topic loopback interface in ASA or FWSM in Network Security

loopback interface in ASA or FWSM

snarayanaraju — Mon, 11 Mar 2019 16:08:33 GMT

Hi experts,

Is it possible to create loopback interfaces in FWSM or ASA firewall

The need is i want a interface command to the firewall as I am facing problem in pinging one interface IP ADDRESS from the other zones.

Thanks in advance

sairam

Re: loopback interface in ASA or FWSM

Kevin Redmon — Sun, 23 Aug 2009 13:21:13 GMT

Sairam,

No - Cisco firewalls do NOT allow for a loopback address. If you are having issues with pinging a certain interface IP address, please be sure that you are pinging the interface closest to the client machine - ie NOT another interface. Unlike a router, the Cisco firewalls do NOT allow you to ping a "far-side" interface. Also, be sure that you have 'icmp permit ' for the relevant interface.

Re: loopback interface in ASA or FWSM

mgs — Sat, 24 Oct 2009 10:03:13 GMT

Not entirely true. You can issue the 'management-access inside' command, which will enable you to SSH and issue ping/snmp commands on the inside interface IP eg. from the far-end of a IPsec tunnel configured.

Re: loopback interface in ASA or FWSM

cisco24x7 — Sat, 24 Oct 2009 22:16:05 GMT

"Also, be sure that you have 'icmp permit ' for the relevant interface"

This is NOT true. Pix/ASA, by default, will let you ping the interface, unless explicitly dennied.