topic One interface to another sub interface cannot ping each other in Network Security

One interface to another sub interface cannot ping each other

Aung Soe Myo Oo — Fri, 21 Feb 2020 16:11:55 GMT

Dear all,

Now,I am starting to learn Cisco firewall.

Now,One interface to another sub interface cannot ping each other.Please tell me how can I solve my problem.

Thank you so much

Re: One interface to another sub interface cannot ping each other

Ajay Saini — Wed, 05 Sep 2018 08:37:03 GMT

Hello,

By design, you can not ping from one interface to another interface of ASA, and thats true for subinterface as well. You can for sure ping from a host behind interface A to a host behind interface B with proper config (Access-list, NAT etc). Also, you can ping from host behind interface A to interface A.

Is this the question here, if not, please share the config and explain the source and destination of ping traffic.

HTH
AJ

Re: One interface to another sub interface cannot ping each other

mkazam001 — Sun, 04 Nov 2018 00:59:35 GMT

not sure if you're ping through the asa, if so, ensure icmp is allowed:

policy-map global_policy
class inspection_default
inspect icmp

regards

azam