ASA 5540 _ I want to ping across inside to outside for testing

mtstdelauri · ‎09-27-2012

ASA 5540 8.2 (5)

I have tried many combinations of command line syntax suggested in this forum but none are providing success so far.

I want to ping from the Inside Interface across to the Outside Interface and visa versa.

I have tried various ACLs as well as "inspect icmp" in the config, etc still no go.

I can ping each interface from the console command line but cannot ping across each interface.

Is this even possible ?

I am open to suggestions.

thanks

Troy

------------------------------------------

interface GigabitEthernet0/0

nameif outside

security-level 0

ip address 192.168.1.1 255.255.255.0

interface GigabitEthernet0/1

nameif inside

security-level 100

ip address 10.10.10.10 255.255.255.0

----------------------------------------------

ASA-5540-LAB#

ASA-5540-LAB# ping 192.168.1.1Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

ASA-5540-LAB# ping 10.10.10.10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.10.10, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

ASA-5540-LAB# ping inside 192.168.1.1Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

?????

Success rate is 0 percent (0/5)

ASA-5540-LAB# ping outside 10.10.10.10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.10.10, timeout is 2 seconds:

?????

Success rate is 0 percent (0/5)

ASA-5540-LAB#

Luis Silva Benavides · ‎09-27-2012

Hi Troy,

Remember that the ASA is a security device, so by design it does't support what you are trying to accomplish.

" For For security purposes the security appliance does not support far-end interface ping, that is pinging the IP address of the outside interface from the inside network."

http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/trouble.html#wp1059645

Even if you are trying to ping from the ASA since I see you are trying to do a "source" ping. The source of the packet will be an internal IP address going to the outside IP.

Luis Silva