topic Is the host reachable via a in Network Security

sh arp does not show mac address of IP --- ASA

mahesh18 — Tue, 12 Mar 2019 04:24:25 GMT

Hi Everyone,

I can ping the IP from the ASA but when i do sh arp it does not show me mac address od that IP.

Need to know the reason behind this.

Regards

MAhesh

Is the host reachable via a

Marvin Rhoads — Mon, 30 Jun 2014 20:23:09 GMT

Is the host reachable via a gateway (router)?

If so, the gateway's MAC address will show up in your arp table as the arp table is generally limited to connected broadcast domains (which equate to VLANs - generally associated with subnets).

Hi Marvin, As per NEtwork

mahesh18 — Mon, 30 Jun 2014 22:42:45 GMT

Hi Marvin,

As per NEtwork setup the host is reachable via Switch.

Host gateway is SVI vlan defined in switch.

When i ping host IP from ASA which mac address i should see?

SVI mac address of switch?

i checked i do not see mac address of svi vlan of switch.

Regards

MAhesh

So your ASA should have a

Marvin Rhoads — Tue, 01 Jul 2014 03:28:07 GMT

So your ASA should have a route on the inside interface to internal networks. The address of that next hop in the routing table is the one you should have in your arp table allowing you to reach non-directly-connected (subnet-wise) hosts within the scope of that route statement.

Think through the logic - ASA pings a host. It needs to determine proper egress interface. It checks and asks "Is it reachable via a directly connected interface (most preferred route)?" Answer no. "Do I have a route statement telling me how to get to it?" Answer yes (otherwise use default). OK - so ASA sends packet out egress interface defined in that route statement to the next hop as defined in route statement and waits for reply.

Thanks Marvin i got it

mahesh18 — Tue, 01 Jul 2014 04:11:44 GMT

Thanks Marvin i got it.

Regards

Mahesh