Hi everybody,

I've got the following situation:

For testing I want to allow icmp traffic from the 10.11.96.0 /20 network to 
the 10.11.64.0 /20 network

PIX 515E
Inside: 10.11.96.3 255.255.240.0
Outside: 172.31.255.9 255.255.255.248

Router
Ethernet0/0: 172.31.255.10 255.255.255.248
Tokenring0/0: 10.11.64.0 255.255.240.0

Part of the PIX config:
route outside 10.11.64.0 255.255.240.0 172.31.255.10 1
nat (inside) 0 access-list 100
access-list 100 permit icmp 10.11.96.0 255.255.240.0 10.11.64.0 255.255.240.
0

Problem:
When I want to use the command: "nat (inside) 0 access-list 100" I get the w
arning: "access-list protocol or port will not be used". I cannot ping any h
osts on the 10.11.64.0 network.

Can someone help me?
Marcel

[ Post a follow-up to this message ]