topic Hi,It seems Packet Tracer is in Network Security

Cisco ASA 9.1(1) Cannot Ping Public Server

Michael Darr — Tue, 12 Mar 2019 05:51:26 GMT

Cisco ASA 9.1(1) I have defined a public server. Ping from outside fails. Packet Tracer shows the following:

What is going on here?

Hi,It seems Packet Tracer is

johnd2310 — Wed, 29 Apr 2015 01:09:33 GMT

Hi,

It seems Packet Tracer is showing the IP as on Inside-Test interface. Is the routing configured correctly?

Thanks

John

Hi,I think the routing is

Vibhor Amrodia — Wed, 29 Apr 2015 06:47:57 GMT

Hi,

I think the routing is correct.

It is a RPF drop. If you check the 1st NAT phase , that NAT statement seems to be different than the one in the displayed section.

This is the reason for this drop.

I would request you to send me the NAT configuration and the complete trace output.

Thanks and Regards,

Vibhor Amrodia

Hi, John;That is correct. It

Michael Darr — Fri, 01 May 2015 14:14:49 GMT

Hi, John;

That is correct. It is an isolated test server on an isolated test network. Does not everyone have one of these for testing firewall configuration? Thanks for the response.

Cheers,

Thank you for responding,

Michael Darr — Fri, 01 May 2015 14:57:00 GMT

Thank you for responding, Vibhor: Here are the pertinent NAT statements in my running configuration:

object network Grede-Test-Server
host xx.xx.xx.xx (Public IP Address)
description Grede Test Server Menocon

object network Grede-Test-Server-Private
host 10.1.104.21
description Grede-Test Server

nat (Inside-Test,Outside) source static Grede-Test-Server-Private Grede-Test-Server

Cheers,

Hi,Thank you for updating the

Vibhor Amrodia — Sat, 02 May 2015 02:24:58 GMT

Hi,

Thank you for updating the NAT statement. I would request you to still update me with the Complete Packet Tracer as this is a NAT misconfiguration causing this issue.

I think there might be another NAT configured which is causing this issue on the ASA device.

Thanks and Regards,

Vibhor Amrodia

I have attached the response.

Michael Darr — Mon, 04 May 2015 20:45:57 GMT

I have attached the response.

Hi,The Packet Tracer is

Vibhor Amrodia — Tue, 05 May 2015 06:07:57 GMT

Hi,

The Packet Tracer is incorrect.

You need to use the destination ip in it as the Public IP instead of the Private Ip as you have used.

Correct that and let me know what you get as the output from the tracer.

Thanks and Regards,

Vibhor Amrodia