Pinging with Access-List

[gabrielshorn]

I'm not sure what you're saying, CableGuy. If you want to just allow Finance to ping Sales, It change the outbound access-list on fa0/1 to an extended that looks something like this:

access-list 100 permit icmp 192.168.40.0 0.0.0.255 any echo-reply
access-list 100 deny ip 192.168.40.0 0.0.0.255 any

If the goal is for Finance to have complete access to Sales without Sales having any access to Finance, then I'd put the following INBOUND on the Sales fa0/0 interface:

access-list 100 permit tcp any any established
access-list 100 permit icmp any 192.168.50.0 0.0.0.255 echo-reply
access-list 100 deny ip any 192.168.50.0 0.0.0.255
access-list 100 permit ip any any

This isn't perfect, as Finance wouldn't be able to connect to UDP-based services in Sales.