Cisco asa ping from interface. but nothing is working.

Cisco asa ping from interface 13 vlan 13 nameif ESXHosts security-level 100 ip address 10. Thanks in Advance Shankar Murali Nov 19, 2012 · Solved: Hi Everyone, ASA inside interface has connection to switch. Jan 16, 2013 · So you are to test connectivity by pinging another host ( not the ASA interface Ip address) on the other interface, Hope I could help. passwd 2KFQnbNIdI. It allows the ASA device to send any TCP packet (instead of Mar 7, 2019 · Greetings, I am new to the Cisco ASA. 4(1) 'ping tcp' utility: ciscoasa# ping tcp Dec 1, 2020 · I am setting up a new Cisco ASA 5516-X and have a problem. An example from 8. Oct 15, 2014 · So I have a weird issue since I reloaded my ASA 5540's (8. 1" and host 1. management-access inside. - Jouni Jul 28, 2011 · The address on the outside interface that we are trying to ping is assigned via DHCP. When I try to ping the server from the switch it times out with ". 171 of the ASA. My monitoring showing the asa is down because it The ASA needs to have routes to all of the networks behind its interface. 1 255. This is the “ ping tcp ”. but when i choose the interface as inside while using ASDM ping does not work to same website. So i have the correct routing and firewall rules on both devices. Pinging ASA Interfaces To test whether the ASA interfaces are up and running and that the ASA and connected routers are operating correctly, you can ping the ASA interfaces. Configure the switch port to be an access port and not a trunk ICMP Echo works by default. Inside network uses outside interface for the outbound internet but I can't ping outside interface from Inside network. 2 on the internet. However I can ping devices on the 'inside' interface. : : Hardware: ASA5525, 8192 MB RAM, CPU Lynnf Solved: I'm not (yet) an expert with Firewalls, but is there a reason why i can't ping subinterfaces from 1 ASA to another (or even from 1 subinterface on the ASA to another subinterface on the same ASA)? I can ping devices behind the subinterfaces, May 30, 2018 · Hi all, I am really struggling to ping from my inside LAN to ASA inside interface and vice versa. 8(4)15を用いて確認、作成しております。 デフォルト動作 デフォルト動作は、asa のインターフェイスに着信するすべての icmp トラフィックを許可し Mar 4, 2018 · Hi, Support, With great respect, I am facing the issue, note: the ASA i am talking about is on edge and used to access the internal server from outside internet I have a live ASA on our edge of a network, we have gt 2 series of live IPs from ISP, one is working fine, i-e 95. I tried NAT'ing ICMP to an internal host to solve the issue but presented with: Dec 13, 2018 · Is this possible? My goal is to block ping reply from ASA outside interface, but to allow ping reply to group of hosts to the outside interface my config right now icmp permit any unreachable outside with the above config, the ASA outside interface Mar 4, 2020 · I am having an issue pinging through my ASA. I can successfully ping the server from the ASA. TCP 3 Jan 24, 2020 · Now I connect a PC with IP Address 10. 1 or 192. I can successfully ping from my server on the INSIDE interface on the cisco asa to the server on the DMZ on Checkpoint but i cant ping in the other direction. May 18, 2017 · In addition to what JP correctly noted, an ASA does not by default inspect icmp traffic and thus ping through the device will never work as the icmp echo reply messages will be droppped at the outside interface. What I wanna do is to nat internal address with the external interface address but unfortunately the internal interface cannot communicate with the external interface. I'm trying to ping from one host located at site 2, behind site 2's ASA internal interface, to the internal interface IP address of ASA located at site 1. 4(2)! hostname ciscoasa. I am posting config's of my Switch, ASA, and Router and if someone please can tell me where is the problem would be Jul 7, 2017 · Hi folks, ASA newbie here. For security purposes the security appliance does not support far-end interface ping, that is pinging the IP address of the outside interface from the inside network. I had this setup and working and I have another set of equirement that I am replacing that is working with my service provider so I know it is a configuration issue. 3 255. This is the config: ASA Version 8. You need to do one of the following. With the default configurations ASA will allow a host to ping the interface to which is connected to. 80 255. May 15, 2009 · Hi All, Hope you can help me with my little problem. Essentially I can't ping the outside interface of my ASA from another network several hops away. 2270. 1(4), same result, cannot ping outside interface ip address from any host in inside network. Nov 10, 2015 · I am not able ping ASA 5505 running 8. Ping TCP provides great flexibility and allows to troubleshoot routing problems, VPN problems etc. Aug 18, 2014 · If you're pinging from the ASA that's terminating the VPN tunnel, it will not source the correct interface by default. Mar 2, 2012 · Hi Armand, The behaviour you saw is normal. Any help would be appreciated. 4(1) and later, Cisco introduced Oct 15, 2014 · Hello All, I build a small GNS lab,all my internal devices are pinging well on the same subnet,however when i try to reach another subnet via ASA its giving me unreachable icmp mesg. I had what I thought was a decent grasp on how to configure a 5505 from factory settings, but I'm having trouble with some basic functionality. 2 source lo0 % Invalid input detected at '^' marker. They aren't failover controlled. However, i am unable to ping from a subnet on the OUTSIDE to the Natted IP on the INSIDE. Which will enable the connection/ping coming from the VPN connection through "outside" interface to reach the "inside" interface. host on inside trying to ping outside interface). In IPv6, it is done by ND. it would make troubleshooting a lot easier if i can ping the gateway. failover lan unit primary. 0/24. (like this "ping ins SERVER-IP-ADDRESS") But if I tried to ping some host behind ASA from this server, the ping is fail. More specifically, when I try to ping it from a machine on the server interface it fails, but I am able to ping it from my machine on the internal interface. 1 in vlan2 if they are in the same phyiscal interface. Oct 28, 2014 · If you are trying to ping the ASA inside interface sourcing from a host different than 192. Switch Vlan 1 IP 192. The traffic is passing thru the interface but not able to ping asa interfaces. – Aug 19, 2021 · Hi Guys, How to allow ping from INSIDE Interface to Management interface in ASA 5525. To fix this, you have to create state, this is done by inspecting the outbound icmp echo and expecting the inbound echo reply. I can ping the router's interface from the same switch that the ASA is connected. I have the ASA connected to two LANs (no internet connection) interface inside - 10. May 8, 2014 · Hi There, I have the following Interfaces and routes. Apr 4, 2006 · Topology: LAN--Switch--ASA--PIX--Server Situation: I am trying to connect users on a LAN to a server. Currently I'm unable to ping out from the ASA itself to anywhere on the outside interface. If your config is working, you WILL be able to ping from the inside to a host IN the dmz, but not the dmz interface itself. 128. 1 /24 and unable to ping both ways, I can see amber light on the port LED on firepower, although the interface status is up . 15. I can ping management server ip from firewall, also i can ping asa management ip address from my switches. Below is the running config. Jul 23, 2015 · Peace, I have asa 5520 with sub interfaces inside, i can ping hosts on the inside networks but i can't ping the inside interfaces themselves from an attached nexus switch. 165. This is my failover configuration: failover. X 255. Cisco ASA Series Firewall CLI Configuration Guide Chapter 20 Troubleshooting Connections and Resources Testing Your Configuration Figure 20-2 Ping Failure at the ASA Interface If the ping reaches the ASA, and it responds, debugging messages similar to the following appear: ICMP echo reply (len 32 id 1 seq 256) 209. I tried adding 'icmp permit host {outside IP} Outside', and making sure that it was above the deny command, but that didn't work. As we all know, the ping command sends “ICMP” packets to the other end and waits for ICMP reply packets to come back. I can manage the ASA via console and direct connection to the management interface. 5 questions From host PC i can ping the internet but not IP 192. 5 sub interface. The ASA allows access to its own interfaces only from networks located behind that interface, or in other words you can access only the interface pointing towards you but not the other interfaces of the ASA. as per the attached topology iam unable to reach outside interface of ASA from R1. 255. The problem is I cant ping from the 10. 2 Host PC connected to switch IP 192. Go to solution. It's possible if I use "ping" R2#ping Protocol [ip]: ip Target IP Sep 7, 2018 · Peace, I have asa 5520 with sub interfaces inside, i can ping hosts on the inside networks but i can't ping the inside interfaces themselves from an attached nexus switch. Behind that is a switch with the port configured in VLAN 1615 and the ASA connected to that port. 2. Pls help !!!!! ASA Version 8. Whether you can ping the outside interface of the ASA from the inside or not should not affect your remote access VPNs. 2) firewall. 127. From show runn: interface Management0/0 management-only no nameif security-level 100 ip address 192. 2 then that would be normal, because ASA has a route back only to those two ip addresses. invalid dns-guard ! interface Ethernet0/0 description + + + + Connection to Internet (Outside) + Feb 6, 2017 · I have attempted to create ACL's that would allow me to simply ping from any inside interfaces to desktops outside. From inside host i can ping the DMZ host once i config the command global(DMZ) 1 Aug 14, 2014 · Step 2 Ping each ASA interface from the directly connected routers. Wireshark on the router's switchport shows arp query but no reply from either the router or the ASA. It is able to ping to internal devices (to the ip 10. 200. Sep 12, 2014 · One is the internal, connected to a cisco 3560. I am new to Cisco and I started to configure my Cisco ASA but I am unable to ping External interface address from Internal hosts. The same thing happens when I try to ping from laptop253 to interface E1/5 - 10. I can ping one of the interface from the outside, but not the other. 4(7)) this morning. Mar 16, 2025 · It is confused as you wrote "but interesting thing i can ping from PC A to 10. 0 Aug 6, 2012 · I have a couple of subnets, that when the ASA is connected, I cannot ping, nor can they get to the internet or our Exchange server. There are no specific ICMP Mar 11, 2019 · Hi All, I am unable to ping inside interface (Rin) to outside interface (Rout) of my Cisco ASA 5520 runing on ASA Version 8. Problem. 127 vlan 127 nameif Vlan127 security-level 50 ip address 192. 1 ( int vlan 1). The ASA needs to inspect ICMP for the return traffic to work (the quick way to do this is "fixup protocol icmp"). 80. 254 255. 20. When i try to ping from inside lan to firewall DMZ interface IP it is not pingable and but from inside users i am able to ping firewall inside interface IP address. . Any help would be greatly appreciated by looking at the below config and telling me if you see anything wrong. I found myself in a situation today where I was working on a client firewall and I was trying to bring up a VPN tunnel, and I did not have access to any of their machines, and nor did they, (hence the reason for the VPN Mar 19, 2014 · I have a flat network with one VLAN in ASA 5500 and I am trying to divide it into multiple segerated VLANs. If using "ping inside 1. Any attempt to get external also fails. In IPV4, it is done by ARP. I have attached a copy of my Packet tracer file. Also, generally speaking ping is not the best test to use for connectiivty as it might work while communications requiring an actual connection (i. 1 (Interface IP Amil, you can not ping through an ASA to another one of the ASA's interfaces, unless it is configured as a management-access interface. 1 can be reachable via "inside" interface, your ping is OK. Ping and traceroute from inside to ouside is active and working. 51 host to the outside interface 192. When I try to ping server in DC from ASA's inside interface, the ping is ok. I already knew that from my experience, but I also tried for scruple with other four Cisco firewalls with different versions, same result, no ping allowed from inside hosts to the outside interface ip address. When using ASDM i can ping the website when i choose the interface as outside. 1 interface. Managment interface is up and I can SSH / ASDM to it fine, I can ping the mgmt interface both from the same network and from a remote network with no issues - there is a single route for the remote network via the mgmt interface. I can ping the hosts inside the LAN. ASA Version 8. However, your statement So this explains why I was able to ping the inside interface when it was setup on the physical port but not when it was setup as the VLAN. but i want to access interface inside on ASA but i cannot ping , how to enable from outside to ping inside Jun 21, 2011 · Hi, I am unable to Ping towards ASA's Outside interface from Wan or internet. The OUTSIDE interface of the firewall is connected to LAN (having multiple subnets). Feb 18, 2016 · Hi Ishan, your traffic is entering one of the interface on ASA and destined to IP address of another interface of the ASA. 17) There is no ping between them. Now we would link to monitor connection from HQ to branch by pinging Branch ASA inside interface IP As the other people said, the ASA does not allow you to ping any of its interfaces from an opposite one. (inside->dmz, inside->outside) We're talking about the actual interface on the ASA, not what's on the other side. The other is connected to ISP's router, which connects to MPLS cloud. This is regardless if you try to ping from inside to outside or vice-versa, or even from any other segment to another. 0(5) ! hostname Test domain-name default. ISP gateway - 192. Oct 21, 2013 · On the inside network of my ASA i have a server that needs to ping a server on the dmz on the Checkpoint and vice versa. 1 is Aug 18, 2015 · I can not use ping 'target' source 'interface' ping 192. That means from PC A (10. This test ensures that the ASA interfaces are active and that the interface configuration Apr 12, 2013 · When you have a VPN connection configured on the "outside" interface and want to ping or use management connections to "inside" interface you can use the following command. May 3, 2013 · I was asked to block pings from the internet to the outside interface of our ASA-5505 firewall. Is there anyway to do that? Apr 20, 2013 · Cisco ASA 5505 Security Plus license (ASA DMZ interface IP) Solved: Hi Everyone, PC is connected to inside of ASA. I have a Cisco ASA 5505 and I have my internal and external interfaces configured but I currently cannot ping from the inside to an IP Address on the outside. 0. from PC A to ASA interface 10. But if i try ping from my ASA's inside inetrace to outside Feb 17, 2021 · Dear all, currently we are using VPN client from outside to inside network. 50. A host is on the same VLAN with IP 172. I am able to ping from my outside interface on the ASA to the internet and from my client pc (on the inside network) to the (inside) port on the ASA, but can not go through. 1? May 12, 2016 · All, Why is it on an ASA that I can't source ping from an interface to another interface directly connected to the ASA? So if I source pings from the 'inside' to another interface called 'testint': 'Routing failed to locate next hop for icmp' Both interfaces are directly connected to the ASA. However I can ping 4. Packet capture shows the incoming echo, but no reply on the interface not working. 133. To be honest, the title is a little misleading, on an ASA you can specify which interface to launch a ‘ping’ from, but that’s it. Nov 9, 2010 · I have got a new ASA 5510 with no previous experience. Mar 11, 2025 · KB ID 0001445. The only thing i am unable to do is to ping the INSIDE interface of the ASA from a host on vlan 2. At this point I’m not sure if it’s an access rule issue, NAT issue, or DNS issue. But for LAN interface packet tracer says "no route". 4 (1) and later, Cisco introduced an enhanced version of the ping command. Ha I have an ASA firewall which i want to reply to ICMP echo requests from outside, i have allowed ICMP from any to any on the outside interface inbound but when i ping the IP address of the ASA from a device on the outside, am getting the following log message: May 24, 2012 · We are using Cisco ASA 5580 (8. 4(1) ! hostname FW5520 names ! interface GigabitEthernet0/0 nameif Rout security-level 0 Jun 9, 2016 · Yes hosts in the same subnet can't ping each other and far from that when they arent' in the same subnet they also can't ping each other. Basicaly outside interface connected to private link to HQ. However, ping from an internal host to the internet would Apr 13, 2012 · Hi, I can not ping the DMZ hosts from my Inside or from other interface Network and vice-versa mention below is my ASA Config: : Saved : ASA Version 8. I've been searching forums but can't seem to get it working still and it's driving me mad. Feb 11, 2010 · Enter the following command for extended ping from firewallas source interface and define the destination ip and following parameters in extended ping command. "ip routing" command has been run on the layer 3 switch to allow inter-vlan routing. To ping the ASA interfaces, perform the following steps: Step 1 Draw a diagram of your single-mode ASA or security context that shows the interface names, security Elvin Arias schrieb: Try this one: icmp permit any outside. 1 - Ping Failed" With Cisco ASA, you CANNOT ping other Mar 16, 2025 · It is true that ASA does not allow cross-interface_IP_Address pinging. e. 100) you CAN ping 10. I am guessing this some sort Mar 11, 2019 · Hi Everyone, How is everyone doing! On ASA 5505 i can ping from PC to internet site. From DMZ PC i am trying to ping the inside host IP no luck. 0 ! interface GigabitEthernet0/0. and from VPN client can ping /access inside lan network . it Mar 16, 2025 · With Cisco ASA, you CANNOT ping other ASA interfaces rather than the one you are on. Jun 6, 2019 · I have cisco ASA 5505 which create a VPN tunnel to Datacenter. In either case, when talking to an interface directly, the traffic needs to come from a network that's connected to or downstream from that interface. When you ping another host, the first step is always to find the hardware address of the host. One exclusion to this rule is VPN traffic. interface GigabitEthernet0/1. asa# show int ethernet 1/1 Interface Ethernet1/1 "management", is up, line protocol is up Hardware is EtherSVI, BW 10000 Mbps, DLY 1000 usec MAC address 00fd. May 13, 2010 · Solved: I need a ASA/PIX firewall to respond to my ping eneting the outside interface from a specific subnet. but nothing is working. Later I found out it is not possibile to ping the closest interface as it is by design. 215. 254 /24 ASA (Outside) - 192. 1 interface tun - 10. ". failover link stateful GigabitEthernet0/2 Jun 16, 2010 · Like Andrew said, you can't ping a far side interface on an ASA. Aug 3, 2020 · Solved: Hi everyone, I have this basic scenario: (LAN) ----- (ASA) ----- (DSL Router) ----- (Internet) I am able to ping the DSL Router from the LAN but not vice versa. Otherwise the ASA will source the ping from the "outside" interface, in which it won't hit the policies for the crypto engine and get sent through the tunnel. X. 100. Here is the document for the same: Apr 5, 2012 · The ASA is configured in very simple transparent mode. Mar 11, 2019 · Hi all, I need to able to ping Cisco ASA inside interface IP from outside connected network. If you enable management-access <interface-name> on your ASA it should permit traffic to that interface over Site2Site VPN. When I do a pac May 11, 2015 · Solved: Dear Support, I have Cisco ASA 5520. Cisco Adaptive Security Appliance Software Version 9. I think we can't ping to other interfaces of ASA by default. There can be only one management-access This section describes how to test connectivity for the single mode ASA or for each security context, how to ping the ASA interfaces, and how to allow hosts on one interface to ping With Cisco ASA, it is impossible to ping any interface of the ASA itself except the interface facing towards the pinging host and an interface configured for "management-access" or as Mar 15, 2025 · From ASA 8. Firewall# ping Mar 2, 2009 · On ASA, you can not specify source IP of Ping packet. I have an ASA with an inside interface 172. domain-name May 2, 2022 · I'm still getting to grips with Cisco so please bare with if this is simple or been asked before. has nothing to do with cross-interface_IP_Address pinging. interface GigabitEthernet0/0. 56. I am trying to access the ASDM by going to https://192. Jun 23, 2014 · Hi Everyone, ASA has 2 contexts HR which is admin and other context Sales. Mar 15, 2025 · The “ping” command has been the “de facto” troubleshooting protocol used mainly for testing connectivity and communication between two hosts. I'm unable to ping the outside router (Endpoint - Cisco 1841) from the inside router (SME_Edgenode - Cisco 1841) through the firewall (ciscoasa - Cisco ASA Oct 21, 2019 · Solved: Hi For some reason I can't ping from my internal network to the external network through the ASA in my network. There is the default Windows firewall activated, and when I allowed all connections the ping was UP but it's not a solution because before I deactivate Windows Firewall I was able to ping ASA's interface. 1 (Interface IP with SL 100) and CANNOT ping 10. 8(1) Regards, Ermias W Dec 13, 2018 · Hello John, Thanks for prompt reply! I tried "icmp permit any management_interface" but still unable to ping the Management Interface ip from the management server. no Aug 8, 2018 · From laptop253, I can also ping it's GW: 10. John Apr 10, 2017 · From any host on vlan 2, I am unable to ping the INSIDE interface of the ASA fine. For instance, vlan2 is not able to ping 192. 10. The LAN, switch, and ASA are on one subnet, the PIX and server are on ano Aug 14, 2014 · Step 2 Ping each ASA interface from the directly connected routers. This design has been brought ahead since the PIX days, and the reason behind it was due to the fact that it was taken as granted that the traffic coming from a Oct 11, 2013 · When I disabled it, I was able to ping the gateway, but of course, then the ASA would respond to pings on its outside interface. Yes, you are correct on this, as I try to ping from outside back to inside network. enable password 8Ry2YjIyt7RRXU24 encrypted. Cannot ping the ASA interface from that host. I created an ACL to try and do the trick, also to no avail: access-list outside_in extended permit icmp any any e Nov 4, 2024 · Hi there. 18 (point-to-point network between 2 ASAs to route between branches, the next hop is 10. I have created acl and icmp inspection also. 23), but not to the IP 10. This article solely focuses on ICMP traffic passing through Adaptive Security Appliance. domain. I can actually ping WAN interface, no issue there. 253. Is it a common case with the ASA deployed in between or am I Jul 31, 2018 · Hi, I have a 5506 with NAT enabled on its INSIDE interface. For transparent mode, ping the management IP address. shutdown. When i ssh to HR(admin) and go to system context. ASA inside interface IP 192. We are using Easy VPN to establish a VPN connection back to our office. 2 Dec 14, 2010 · Solved: Not sure what I did wrong appreciate any help here is the layout laptop --> cisco 3750 switch --> ASA5505 firewall --> future VPN tunnel Laptop, switch VLAN and Inside interface of the ASA are all in the same subnet Switch and Apr 3, 2007 · I have sent successfully ping packets from the outside lan but if I switch from the failover to standby ASA the ping doesn't work. And also be aware that the R1 would not be able to reach the IP address on the ASA's outside interface. Jun 12, 2007 · I'm trying to figure out why I can't ping the inside management IP address of my ASA. 137. It will fail everytime. 0 ! inte Hi, I am new to ASA and i am trying to learn the behavior of ASA, i just enabled two interfaces and applied IP address. 231 /24 ASA (Inside) Mar 12, 2019 · By design ASA would not allow you to ping an interface IP if you come from a different interface. Oct 5, 2017 · Hello, everybody! I have ASA 5512-X and can't ping it's interface when I am directy connected to it from notebook. In site 2, I've the exact same configuration. names! interface GigabitEthernet0. 0 Helpful Reply. You'll need to manually specify the "inside" interface like this: ping inside remote_ip. I found a post that said to enter "icmp deny any outside", however that does not do it. 13. 2 @Ri0N: I've just tried to disable all nat on an ASA 9. configure the ASA interface as a sub-interface and specify the INSIDE interface to be in vlan 500; or. 2(2) ! hostname ASA5505. This test ensures that the ASA interfaces are active and that the interface configuration is correct. Also, you can not ping one ASA interface from another one. They are in an Active/Standby failover pair and my standby ASA is no longer responding on one interface, but it works on the rest. When I perform a debug icmp trace on the ASA, it shows the Jul 20, 2020 · Hi I am looking for a simple setup 1) Nobody should be able to ping my ASA's outside interface except (an Object group of) whitelisted IPs 2) We should be able to ping everything from inside to outside How do I achieve this? Thank you very much in advance. ICMP echo reply is not permitted back because it is coming from the outside interface to the inside. 4(1). Jon. failover polltime interface 1 holdtime 5 . Julio Carvajal Senior Network Security and Core Specialist CCIE #42930, 2xCCNP, JNCIP-SEC Here is something that Cisco ASA can do but Checkpoint can not: What is even more impressive is that you can specify any source you want even if your ASA doesn't have any interface belonging to this network (permitting actually IP spoofing!). So is there a way to enable pings to the inside interfaces May 27, 2015 · I have an ASA that is situated behind a cisco router and I'm unable to ping the router's interface that is on the same subnet as the outside interface of the ASA. 0 What most Nov 23, 2016 · Under normal circumstances traffic to a far away interface is dropped on ASA (e. failover lan interface heartbeat GigabitEthernet0/3. b67e, MTU 1500 Jan 8, 2020 · はじめに asa のインタフェースへ ping を実行した際に、asa の icmp トラフィック処理・制御について紹介します。本ドキュメントは、asa バージョン9. Please let me know whether this is the default behaviour of ASA or the problem is with ACE's. 115 just fine. (To be clear, I'm not concerned with Nov 1, 2019 · Solved: Hi guys, I am having issues pinging my FTD internal interfaces. 128 vlan 128 nameif Vlan128 security-level 50 ip address 192. "fixup protocol icmp" is a quick way to enable ICMP inspection globally and achieve the expected results. If host 1. I can ping from any host on vlan 1 to vlan 2 and vice-versa. 1/. As desired, traffic can flow in each direction between inside and outside. g. 115. On the ASA, I can ping each interface just fine, but the issue I am facing is that when I try to ping from laptop215 to interface E1/6 - 10. TCP/UDP traffic works fine however. 16. 30. 2KYOU encrypted. Since you are using 8. Any he Jan 9, 2015 · You can only ping an ASA interface (assuming it's been allowed) from a host downstream of that interface. 201. " and in the Result you wrote: "3. 4(2) I think you hit the following bug Sep 14, 2020 · I'm a bit stumped with this, just standing up a new, (to me), 5508-x pair in HA. However the problem is much basic I can not ping the management port of the Cisco ASA 5510 and my computer is not getting a IP address from the DHCP pool of the management port. no nameif. 1. 192 any echo-reply access-group 101 in interface Feb 21, 2016 · Hi all, Not entirely convinced that I've not missed something very simple along the way but am looking for some help. The source first sends a ICMP packet to Apr 19, 2020 · There are many articles out there about ICMP and PING. This PC is conncted directly to the ----- ASA inside interface. That will permit ICMP from host-2 to Gi0/2 of the ASA, but not from host-1 to Gi0/2 of the ASA. 1 > 209. I can ping any other IP on the same subnet from my desktop except this one. 115, it fails. From ASA 8. 168. Is this ACL correctly written to do that? access-list 101 permit icmp 76. The problem is that I cannot ping or ssh to the ASA via the inside interface. A ping might fail if the ASA interface is not active, the interface configuration is incorrect, or if a switch between the ASA and a router Mar 10, 2022 · I have a Cisco with two LIVE interfaces. This is a caveat of the ASA. Ping works fine from system context to HR context interfaces and also to nei switch which is connected to context HR amd also to default route of HR as shown below ASA5510 Apr 17, 2023 · As for ping being unsuccessful, you have configured the switch port to be a trunk port while the ASA interace is a regular routed interface. mjjrx ebsihg wongbo dlhd nylv sfdsvz hrbvou tothdx xafpfu zaz cbgypc vkybsg rrus nhroxkgl gripd