topic Re: Ping firewall in CML in DevNet Sandbox

Ping firewall in CML

kingdwight1 — Tue, 21 Jul 2020 17:45:06 GMT

I have reserved a session for Cisco Modeling Labs (CML) Sandbox. I am currently testing some automation using Python which requires me to ping the device before I try to make a SSH connection. I am able to telnet and SSH into the firewall from my home desktop using the AnyConnect connection but I cannot ping it. Is there any way I can modify the sandbox environment to allow for ping to go through to the ASA in the sandbox ip address 10.10.20.171?

Re: Ping firewall in CML

bigevilbeard — Wed, 22 Jul 2020 13:06:02 GMT

Its been a while since i did any ASA stuff, so might be totally wrong here! By default does the ASA allow interfaces to respond to ICMP? I do not believe with the SBX there is any rules denying ICMP to the mgmt devices or over the VPN tunnel (anyconnect). Run a packet capture on the ASA and see if you see this being denied.

Hope this helps.

Re: Ping firewall in CML

kingdwight1 — Wed, 22 Jul 2020 14:33:05 GMT

Hi All,

A quick update. I reached out to Cisco Modeling Labs Sandbox Support webex and they helped me understand that ping may not be feasible as I want to use it but more importantly, I should use try/except in my script rather than ping which after a little research, seems to make sense. So I will be going that route. Thank you all!!!

Re: Ping firewall in CML

bigevilbeard — Wed, 22 Jul 2020 15:45:54 GMT

Good to know, thanks for the update!