topic ASA Ping Test show Question Marks in Network Security

ASA Ping Test show Question Marks

cherrykit — Mon, 11 Mar 2019 21:44:56 GMT

I have a two ASA, in active / standby failover status.

In the ASA there has two context, one is ASA1 and the other is ASA2

A network 10.10.1.0/24 is between these two context

I tried to do a ping test in a client behind ASA2, ping to ASA1 client, failed with question marks, I checked the access rule is correct, the static route for dedication subnet is enabled in these two ASA context

Result of the command: "ping 192.168.3.2"

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.3.2, timeout is 2 seconds:

?????

Success rate is 0 percent (0/5)

Anyone know what's that mean? I checked on the internet that say it's "Unknow Packet", but what will cause this issue? Thanks!

ASA Ping Test show Question Marks

Eugene Khabarov — Tue, 01 Nov 2011 11:50:41 GMT

Hi! This means sipmly timeout. No response was recieved in 2 seconds interval.

HTH

ASA Ping Test show Question Marks

Kishore Chennupati — Tue, 01 Nov 2011 13:00:45 GMT

Hi Chun,

it means that either there is no route to the destination or the firewall is blocking it.

Can you do a traceroute to the destination and where it stops?

Regards

Kishore

ASA Ping Test show Question Marks

BrianChernish — Tue, 01 Nov 2011 15:24:00 GMT

I think you may need to add the intended source interface name. Something like "ping inside 192.168.3.2".

Brian

I think need to insert

Freemen — Mon, 20 Feb 2017 10:03:30 GMT

I think need to insert

icmp permit any <Interface name>