ASA Interface Question

drbabbers — Tue, 12 Mar 2019 07:44:36 GMT

All,

Why is it on an ASA that I can't source ping from an interface to another interface directly connected to the ASA?

So if I source pings from the 'inside' to another interface called 'testint':

'Routing failed to locate next hop for icmp'

Both interfaces are directly connected to the ASA.

Any help is much appreciated thanks!

Dean

Hi Dean,

Aditya Ganjoo — Thu, 12 May 2016 08:35:00 GMT

Hi Dean,

By design ASA would not allow you to ping an interface IP if you come from a different interface.

For security purposes the security appliance does not support far-end interface ping, that is pinging the IP address of the outside interface from the inside network.

Here is the document for the same:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/asdm63/configuration_guide/config/access_management.html#wp1214986

Regards,

Aditya

Please rate helpful posts and mark correct answers.

topic ASA Interface Question in Network Security

ASA Interface Question

Hi Dean,