topic Re: Firepower ping in Network Security

Firepower ping

ashleybabajee — Sun, 31 Oct 2021 14:15:06 GMT

Hello

I have

FTD ( ip 10.2 ) >> Layer 3 switch >> Router (ip 10.1 )

From switch i can ping router and FTD interface, but from FTD i am not able to ping router interface and vice versa.

ICMP is allowed.

Any help pls

balaji.bandi — Sun, 31 Oct 2021 15:58:37 GMT

what is FTD Gateway IP address ? what is the Switch IP address ?

is the FTD connected to Layer switch port ? or Layer 3 p2p interface?

can you post switch config.

ashleybabajee — Sun, 31 Oct 2021 16:05:32 GMT

FTD ip 192.168.10.1

Router 192.168.10.2

SVI on switch 192.168.10.100

connected to switch port

From Switch i can ping FTD and Router ....

From FTD i can NOT ping router and vice versa

Rob Ingram — Sun, 31 Oct 2021 16:08:15 GMT

@ashleybabajee what FTD interface are you referring too? A data interface or the management interface?

If you are pinging from a data interface you use "ping <ip address>"

If you are pinging from the management interface you use "ping system <ip address>"

ashleybabajee — Sun, 31 Oct 2021 16:14:09 GMT

data interface, did tried that but still no reply, arp entries checked, still weird because i can ping other routers from different data interfaces.

cleared arp, restarted router, icmp allowed but still cannot ping ,

balaji.bandi — Sun, 31 Oct 2021 22:07:04 GMT

Thanks for the information, can you able to ping from FTD to Switch IP ? 192.168.10.100?

Can you post the route table of FTD?