Cisco ASA 5505 ver 8.2 Firewall

Question

I am working on a project to allow ICMP through the firewall from the outside interface to an inside interface. I have configured the firewall to inspect icmp and allowed icmp through access-list for the subnets and hosts then bound it to the outside and inside interfaces and still can't get through. I have two computers connected directly to the firewall outside and inside ports. Here is the config:

Int Eth0/1
!
Int Eth0/2
switchport access vlan 2

interface Vlan1
nameif inside
security-level 100
ip address 192.168.5.12 255.255.255.0
!
interface Vlan2
name if outside
security-level 50
ip address 192.168.6.1 255.255.255.0
!
access-list ALLOW_ICMP extended permit icmp any any echo-reply

access-group ALLOW_ICMP in interface outside
access-group ALLOW_ICMP out interface outside 
access-group ALLOW_ICMP in interface inside 
access-group ALLOW _ICMP  out interface inside

policy-map global_policy 
class inspection_default
inspect icmp 
inspect icmp error

Answer 1

Your access list allow only echo-reply, but not requests.

Also Cisco ASA is statefull firewall, so you don't need your access list applied on every interface, only on outside interface. When icmp inspection is enabled, return traffic for session is allowed by default.

access-list ALLOW_ICMP extended permit icmp any any echo
access-group ALLOW_ICMP in interface outside

Answer 2

You should allow echo request from outside. In current ACL you are allowing only returning traffic(reply).