ASA 5540 dropping packets

[Brian Green]

I have an ASA 5540 that is behaving strangely.  I have two interfaces, both at the same security level - 0.  In the Access Rules there are only two - the implicit deny all and before that I created a simple one to allow all (source:any, destination:any, service:ip & icmp, permit).

When I try to ping across it it doesn't work.  Using the Packet Tracer in ADSM it tells me that an implicit rule is dropping an icmp packet from my source to my destination.

Any thoughts?  I'm stumped by this!

Thanks,

Brian

[Rishabh Seth]

Hi,

By default traffic between interfaces with same security level is not allowed.

Try the command : 

same-security-traffic permit inter-interface

Hope it helps!!!

Thanks,

R.Seth

Mark the answer as correct if it helps in resolving your query!!!

[Brian Green]

I tried adding that - it didn't seem to work.

One other thing I notice - on the device, when I ping an address in the range of the external interface (i.e. not on the other side of a router) I get a ? telling me that it doesn't know how to get there, even though it is inside the same subnet.  Is it possible that this firewall is dead?  Or should I try another interface?

Thanks,

Brian