Firewall ASA5525 Routing Table

[a.torrijos]

Good day

I have an ASA5525 device with the following version:

Cisco Adaptive Security Appliance Software Version 9.8(3)29 <context>
Firepower Extensible Operating System Version 2.2(2.119)
Device Manager Version 7.8(2)

And it has a  strange behavior. I can ping the IP 10.10.180.101 that is my internal DNS 

EMX-INTERNAL-FW-B/pri/act# ping 10.10.180.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.180.101, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/10 ms

But It does not show me information about the network in the routing table 

EMX-INTERNAL-FW-B/pri/act# sh route 10.10.180.101

Routing Table: FRONT
% Subnet not in table

EMX-INTERNAL-FW-B/pri/act#

I do not understand how exactly I can ping an IP adress without having a route in the RT :(

[Diana Karolina Rojas]

Buenas tardes estimado,

Ese equipo ¿forma parte de alguna red de las que tienes en tus interfaces? ¿tienes alguna ruta configurada para esa red en el ASDM? si colocas la IP de la red en lugar de la del host ¿puedes verla?

***Por favor no olvides calificar y/o marcar como solución las respuestas útiles, tu calificación promueve nuestra participación.***

Saludos,

[Julio E. Moisa]

Hi,

You are using context right? it could have a communication with the physical interfaces. what do you see with:

changeto system 

Regards. 

[David Castro F.]

Hello,

It may be using the default route (route XXXX 0.0.0.0 0.0.0.0 X.X.X.X), that could be why it does not show which route it is using to route the traffic. You could do show route to verify this,

Keep us posted, please rate all helpful posts,

David Castro,