ASA FPWR 1150 - Ping dropped

[oscardenizjensen]

Hej
I am new to ASA and having ping. When I do a packet tracer I see action is to drop.

I am trying to figure out what I am missing. Regards

fw01# packet-tracer input SERVICE-8 icmp 172.16.8.3 0 8 172.16.8.1 

Result:
input-interface: SERVICE-8
input-status: up
input-line-status: up
Action: drop
Drop-reason: (inspect-icmp-bad-code) ICMP Inspect bad icmp code, Drop-location: frame 0x0000559c3b8309fd flow (NA)/NA

fw01# sh running-config interface ethernet 1/10.8
!
interface Ethernet1/10.8
 vlan 8
 nameif SERVICE-8
 security-level 100
 ip address 172.16.8.1 255.255.255.0 standby 172.16.8.2 

access-list SERVICE-8 extended permit ip any any 

access-group SERVICE-8 in interface SERVICE-8
access-group SERVICE-8 out interface SERVICE-8

same-security-traffic permit inter-interface
same-security-traffic permit intra-interface

[MHM Cisco World · Accepted solution]

You need to use icmp code 8 0 not 0 8

Try again using 8 0

MHM

[oscardenizjensen]

Ok, passes when I do that.

So the first number is input and second is output?

Result:
input-interface: SERVICE-8
input-status: up
input-line-status: up
output-interface: NP Identity Ifc
Action: allow

[MHM Cisco World]

Correct friend

Now it all allow

Your config is OK

MHM