topic Re: Cisco ASA Inside Interface not pinging Router's LAN interface in Network Security

Cisco ASA Inside Interface not pinging Router's LAN interface

Laide — Fri, 21 Feb 2020 16:40:59 GMT

My Cisco ASA inside interface is not pinging the router's LAN interface but its pinging the public interface of the router.

what can be the cause.

"The error message is destination host unreachable".

Regards

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

Jon Marshall — Mon, 21 Jan 2019 21:12:48 GMT

It is not clear how the devices are interconnected but that error message suggests the ASA does not have a route for the IP address assigned to the router’s LAN interface.

Jon

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

Josiane de Barros Silva — Mon, 21 Jan 2019 22:50:45 GMT

What ASA? 5506? Could you enter the command (show interface ip brief) and post print? I would like to help you.

If you prefer you can call in private.

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

Laide — Mon, 21 Jan 2019 23:04:01 GMT

Hello silva,

thanks for the reply, the ASA is 5516-X

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

johnd2310 — Mon, 21 Jan 2019 23:43:26 GMT

Hi,

Do you have the command "icmp permit any INSIDE" in your firewall config?

Thanks

John

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

balaji.bandi — Tue, 22 Jan 2019 01:19:33 GMT

suggest to post the configuration as suggested, the routing is not configured that that designation.

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

Laide — Tue, 22 Jan 2019 08:30:53 GMT

I did, but i got the message "entry for address/mask = 0.0.0.0/0.0.0.0 exists

Failed to add NP permit rule"

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

Jon Marshall — Tue, 22 Jan 2019 08:32:43 GMT

Do you have a route on your firewall for that IP address ?

Jon

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

Laide — Tue, 22 Jan 2019 08:39:45 GMT

ciscoasa# sh interface ip brief

Interface IP-Address OK? Method Status Protocol

GigabitEthernet1/1 192.168.4.2 YES CONFIG up up

GigabitEthernet1/2 192.168.1.1 YES CONFIG down down

GigabitEthernet1/3 192.168.0.3 YES CONFIG up up

GigabitEthernet1/4 unassigned YES unset down down

GigabitEthernet1/5 unassigned YES unset administratively down down

GigabitEthernet1/6 unassigned YES unset administratively down down

GigabitEthernet1/7 unassigned YES unset administratively down down

GigabitEthernet1/8 unassigned YES unset administratively down down

Internal-Control1/1 127.0.1.1 YES unset up up

Internal-Data1/1 unassigned YES unset up up

Internal-Data1/2 unassigned YES unset up up

Internal-Data1/3 unassigned YES unset up up

Internal-Data1/4 169.254.1.1 YES unset up up

Management1/1 unassigned YES unset up up

ciscoasa#

Re: Cisco ASA Inside Interface not pinging Router's LAN interface

balaji.bandi — Tue, 22 Jan 2019 08:47:52 GMT

Can you post teh configuraiton to have a look and let us know what code this device running.