Opening ping up from anything in another interface/network
I have three interfaces on my firewall - LAN, WAN, and OPT1. LAN is where everything like SharePoint, ADFS, etc sit, WAN is for DMZ, and OPT1 is for my load balancer F5.
My F5 appliance cannot ping the LAN servers. I'd like to open the LAN up to be pinged from anything on the OPT1 interface/network (172.16.245.x).
How could I achieve this?
Create a rule to allow ICMP traffic.
Pass IPv4 ICMP any source OPT1 net dest LAN net