Cisco ASA Inside Interface not pinging Router's LAN interface

[Laide]

My Cisco ASA inside interface is not pinging the router's LAN interface but its pinging the public interface of the router.

what can be the cause.

"The error message is destination host unreachable".

Regards

[Jon Marshall]

It is not clear how the devices are interconnected but that error message suggests the ASA does not have a route for  the IP address assigned to the router’s LAN interface. 

Jon

[Josiane de Barros Silva]

 What ASA? 5506? Could you enter the command (show interface ip brief) and post print? I would like to help you.

If you prefer you can call in private.

[Laide]

Hello silva,

thanks for the reply, the ASA is 5516-X

[johnd2310]

Hi,

Do you have the command "icmp permit any INSIDE" in your firewall config?

Thanks

John

[Laide]

I did, but i got the message "entry for address/mask = 0.0.0.0/0.0.0.0 exists

Failed to add NP permit rule"

[Jon Marshall]

Do you have a route on your firewall for that IP address ? 

Jon

[balaji.bandi]

Can you post teh configuraiton to have a look and let us know what code this device running.

[balaji.bandi]

suggest to post the configuration as suggested, the routing is not configured that that designation.

[Laide]

ciscoasa# sh interface ip brief

Interface                  IP-Address      OK? Method Status                Protocol

GigabitEthernet1/1         192.168.4.2     YES CONFIG up                    up

GigabitEthernet1/2         192.168.1.1     YES CONFIG down                  down

GigabitEthernet1/3         192.168.0.3     YES CONFIG up                    up

GigabitEthernet1/4         unassigned      YES unset  down                  down

GigabitEthernet1/5         unassigned      YES unset  administratively down down

GigabitEthernet1/6         unassigned      YES unset  administratively down down

GigabitEthernet1/7         unassigned      YES unset  administratively down down

GigabitEthernet1/8         unassigned      YES unset  administratively down down

Internal-Control1/1        127.0.1.1       YES unset  up                    up

Internal-Data1/1           unassigned      YES unset  up                    up

Internal-Data1/2           unassigned      YES unset  up                    up

Internal-Data1/3           unassigned      YES unset  up                    up

Internal-Data1/4           169.254.1.1     YES unset  up                    up

Management1/1              unassigned      YES unset  up                    up

ciscoasa#