topic Re: Server or Printer not reachable in Network Security

Server or Printer not reachable

Maurizio Caloro — Thu, 04 Mar 2021 09:16:43 GMT

Hello
ASA5506 i have the problem that the ip from the static clients arnt reachable.

if change this to the attached switch the issue are gone, if pachting back to
ASA the ip arnt still not reachable.

i'am reading that i need to allow IMCP, following command trying without success:

>same-security-traffic permit intra-interface

>policy-map global_policy
>class inspection_default
>inspect icmp

>access-list inside extended permit icmp any any echo
>access-list inside extended permit icmp any any echo-reply

Thanks for any Update.
Regards

Re: Server or Printer not reachable

Sheraz.Salim — Thu, 04 Mar 2021 09:25:56 GMT

Do you have a network diagram and network switch/ASA configuration to show us please. I noted you had similar issue in previous thread too.

Re: Server or Printer not reachable

Maurizio Caloro — Thu, 04 Mar 2021 09:48:34 GMT

meny thanks for your fast answer.

Network run over BVI with Serviced DHCP, the range from 1-20 reserved for Static IP Addresses.

config:
dhcpd address 192.168.1.20-192.168.1.254 inside
dhcpd dns 192.168.1.9 interface inside
dhcpd domain caloro.m interface inside
dhcpd option 3 ip 192.168.1.1 interface inside
dhcpd option 6 ip 192.168.1.9 interface inside
dhcpd enable inside
!
interface GigabitEthernet1/8
description Switch 1.Floor
bridge-group 1
nameif inside_7
security-level 100
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
!
interface BVI1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0

ASA Ports Connection
G1/1 OOUTSIDE - WAN (ISP)
G1/2 INSIDE - NAS
G1/3 INSIDE - Free
G1/4 INSIDE - Printer
G1/5 INSIDE - ESXI
G1/6 INSIDE - DNS-Server
G1/7 INSIDE - PC
G1/8 INSIDE - Switch 1.Floor

Switch 1.Floor
G1/1 From ASA
G1/2 AP
G1/3 AP
G1/4 Client
G1/6 Client
G1/7 Free
G1/8 Free

Re: Server or Printer not reachable

Maurizio Caloro — Fri, 05 Mar 2021 12:22:04 GMT

Please, any possible update?

thanks