ping
Determine if other IP addresses are visible from the firewall. (Privileged mode.)
ping [if_name] ip_address
Syntax
if_name The internal or external network interface name. The address of the specified interface is used as the source address of the ping. ip_address The IP address of a host on the inside or outside networks.
Usage Guidelines
Determines if the firewall has connectivity on a network. The command output shows if the response was received; that is, that a host is participating on the network. If a host is not responding, ping displays:
NO response received.
Use show interface to verify the firewall is connected to the network and is passing traffic.
If you want internal hosts to be able to ping external hosts, create an ICMP access-list command statement for echo reply; for example, to give ping access to all hosts, use the access-list acl_grp permit icmp anyany command and bind the access-list command statement to the interface you want to test using an access-group command statement.
If you are pinging through firewall between hosts or routers, but the pings are not successful, use the debug icmp trace command to monitor the success of the ping. If pings are both inbound and outbound, they are successful.
The firewall ping command no longer requires an interface name. If an interface name is not specified, firewall checks the routing table to find the address you specify. You can specify an interface name to indicate through which interface the ICMP echo requests are sent.
Examples
An example of the usage follows:
ping 10.0.0.1 10.0.0.1 response received -- 10ms 10.0.0.1 response received -- 10ms 10.0.0.1 response received -- 0msOr you can still enter the command specifying the interface:
ping outside 10.0.0.1 10.0.0.1 response received -- 10ms 10.0.0.1 response received -- 10ms 10.0.0.1 response received -- 0msThe ping command makes three attempts to reach an IP address:
ping 192.168.42.54 192.168.42.54 response received -- 0Ms 192.168.42.54 response received -- 0Ms 192.168.42.54 response received -- 0Ms
To permit ping access enter:
conduit permit icmp any any