topic ASA 5540 dropping packets in Network Security

ASA 5540 dropping packets

Brian Green — Tue, 12 Mar 2019 06:45:12 GMT

I have an ASA 5540 that is behaving strangely. I have two interfaces, both at the same security level - 0. In the Access Rules there are only two - the implicit deny all and before that I created a simple one to allow all (source:any, destination:any, service:ip & icmp, permit).

When I try to ping across it it doesn't work. Using the Packet Tracer in ADSM it tells me that an implicit rule is dropping an icmp packet from my source to my destination.

Any thoughts? I'm stumped by this!

Thanks,

Brian

Hi,By default traffic between

Rishabh Seth — Thu, 15 Oct 2015 14:24:26 GMT

Hi,

By default traffic between interfaces with same security level is not allowed.

Try the command :

same-security-traffic permit inter-interface

Hope it helps!!!

Thanks,

R.Seth

Mark the answer as correct if it helps in resolving your query!!!

I tried adding that - it didn

Brian Green — Thu, 15 Oct 2015 15:42:32 GMT

I tried adding that - it didn't seem to work.

One other thing I notice - on the device, when I ping an address in the range of the external interface (i.e. not on the other side of a router) I get a ? telling me that it doesn't know how to get there, even though it is inside the same subnet. Is it possible that this firewall is dead? Or should I try another interface?

Thanks,

Brian