ASA 5585 - Unable to ping the management Interface IP .

[Sandy!]

Hello All,

I upgrade my Asa's both primary and Secondary.

Everything seems to be fine, but i was not able to ping my management interface ip of my asa from my management server.

But i can ping the evrything from my asa.

ICMp inspect is there in group policy, what else i need to check?!

Best Regards,

Sandy!

[johnd2310]

Hi,

Try the command " icmp permit any management_interface" You can restrict the type of icmp by replacing the any with type of icmp e.g echo, echo-reply. management_interface is the name of the management interface

Thanks

John

[Sandy!]

Hello John, 

Thanks for prompt reply!

I tried "icmp permit any management_interface"  but still unable to ping the  Management Interface ip from the management server.

I can ping management server ip from firewall, also i can ping asa management ip address from my switches.

My monitoring showing the asa is down because it couldn't ping the management interface ip address!

Best Regards,

Sandy!

[Sandy! · Accepted solution]

Hello All, 

The problem was there was no route between the management interface and the server.

After creating  the route i was able to ping the management interface from the server .

thank you for all the help. 

Best Regards,

Sandy!