Ping firewall in CML

[kingdwight1]

I have reserved a session for Cisco Modeling Labs (CML) Sandbox.  I am currently testing some automation using Python which requires me to ping the device before I try to make a SSH connection. I am able to telnet and SSH into the firewall from my home desktop using the AnyConnect connection but I cannot ping it.  Is there any way I can modify the sandbox environment to allow for ping to go through to the ASA in the sandbox ip address 10.10.20.171?

[bigevilbeard · Accepted solution]

Its been a while since i did any ASA stuff, so might be totally wrong here! By default does the ASA allow interfaces to respond to ICMP? I do not believe with the SBX there is any rules denying ICMP to the mgmt devices or over the VPN tunnel (anyconnect). Run a packet capture on the ASA and see if you see this being denied.

Hope this helps.

[kingdwight1 · Accepted solution]

Hi All,

A quick update.  I reached out to Cisco Modeling Labs Sandbox Support webex and they helped me understand that ping may not be feasible as I want to use it but more importantly, I should use try/except in my script rather than ping which after a little research, seems to make sense.  So I will be going that route.  Thank you all!!!

[bigevilbeard]

Good to know, thanks for the update!