Cant Ping Sub-Interfaces (ASA 5520)

chrisbicm — Fri, 21 Feb 2020 08:58:12 GMT

Hello,

I recently set up an Active/Standby failover configuration with 2 sub-interfaces configured on my g0/0 interface (g0/0.1 and g0/0.2) for some reason I cant ping either of these from my testing server (when the server is on the correct network and subnet to test the interface)? I am not sure whats going on... I included a print out of most of my current configuration.

interface GigabitEthernet0/0

no nameif

security-level 0

no ip address

interface GigabitEthernet0/0.1

vlan 10

nameif Outside1

security-level 0

ip address 66.38.x.x 255.255.255.224 standby 66.38.x.x

interface GigabitEthernet0/0.2

vlan 20

nameif Outside2

security-level 0

ip address 64.187.x.x 255.255.255.224 standby 64.187.x.x

interface GigabitEthernet0/1

nameif DMZ

security-level 100

ip address 10.10.x.x 255.255.255.0 standby 10.10.x.x

interface GigabitEthernet0/2

nameif Private

security-level 40

ip address 192.168.x.x 255.255.255.0 standby 192.168.x.x

interface GigabitEthernet0/3

description LAN/STATE Failover Interface

interface Management0/0

description STATE Failover Interface

no nameif

security-level 100

ip address 192.168.x.x 255.255.255.0

clock timezone EST -5

clock summer-time EDT recurring

pager lines 24

logging enable

logging monitor debugging

logging asdm informational

mtu Outside1 1500

mtu Outside2 1500

mtu DMZ 1500

mtu Private 1500

failover

failover lan unit primary

failover lan interface FoInt GigabitEthernet0/3

failover replication http

failover link FoInt GigabitEthernet0/3

failover interface ip FoInt 192.168.x.x 255.255.255.0 standby 192.168.x.x

monitor-interface Outside1

monitor-interface Outside2

Thanks,

Chris

Re: Cant Ping Sub-Interfaces (ASA 5520)

chrisbicm — Thu, 15 Jun 2006 04:56:34 GMT

Anyone have a suggestion?

Re: Cant Ping Sub-Interfaces (ASA 5520)

jbrunner007 — Thu, 15 Jun 2006 16:16:01 GMT

i would say your layer 2 config for the switch attached to this is not setup properly... does the asa have a trunk with a switch, so its speaking 802.1q?

Joe

Re: Cant Ping Sub-Interfaces (ASA 5520)

chrisbicm — Thu, 15 Jun 2006 19:12:24 GMT

Joe,

I am using a Dell 2624 switch for testing.... do I need to set another sub-interface to act as a trunk line for the g0/0 interface then? Also just wondering if that switch will work with Sub-Interfaces.... or do I have to re-think my setup?

Thanks,

Chris

topic Cant Ping Sub-Interfaces (ASA 5520) in Network Security

Cant Ping Sub-Interfaces (ASA 5520)

Re: Cant Ping Sub-Interfaces (ASA 5520)

Re: Cant Ping Sub-Interfaces (ASA 5520)

Re: Cant Ping Sub-Interfaces (ASA 5520)