Connectivity checking.

[ldpaynejr2]

How do I verify that hosts on different VLANs have connectivity?  I can't ping from a host on one VLAN to a host on the other VLAN even with a policy that allows ICMP in place.

[ldpaynejr2]

Just as a follow up, this explains my question better -

From the Routing and Bridging Guide vA2(1.0), Cisco ACE Application Control Engine Module -

"For security reasons, the ACE does not allow pings from an interface on a VLAN on one side of the ACE through the module to an interface on a different VLAN on the other side of the module. For example, a host can ping the ACE address that is on the IP subnet using the same VLAN as the host, but cannot ping IP addresses configured on other VLANs on the ACE."

[Cesar Roque]

Hi Larry,

It sounds like an expected behavior.  However this applies only to ICMP traffic, you should be able to telnet for example without any problem.

---------------------
Cesar R
ANS Team