10-15-2017
02:52 PM
- last edited on
02-21-2020
11:34 PM
by
cc_security_adm
I've spun up an ASA in packet-tracer and I've set up some device as shown below:
PC A - 192.168.1.2
ASA - 192.168.1.1 / 172.16.1.1
PC B - 172.16.1.2
Both PCs are able to ping the ASA but can't get to each other. I've set an all ICMP ACL so I would think I'm good to go. I'll post the ASA config below:
: Saved : ASA Version 8.4(2) ! hostname ciscoasa names ! interface Ethernet0/0 ! interface Ethernet0/1 switchport access vlan 2 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 ! interface Ethernet0/6 ! interface Ethernet0/7 ! interface Vlan1 nameif inside security-level 100 ip address 192.168.1.1 255.255.255.0 ! interface Vlan2 nameif outside security-level 50 ip address 172.16.1.1 255.255.255.0 ! ! ! access-list all extended permit tcp any any access-list all extended permit icmp any any ! ! access-group all in interface inside access-group all in interface outside access-group all out interface inside access-group all out interface outside ! ! ! group-policy test internal ! ! ! ! telnet timeout 5 ssh timeout 5 ! dhcpd auto_config outside ! ! dhcpd address 192.168.1.5-192.168.1.36 inside dhcpd enable inside
Can anyone see what the issue is?
Solved! Go to Solution.
10-15-2017 04:55 PM
Hello @tsetsetsetsetsetset
Your problem is a Typo on the PC with IP address 192.168.1.2. You put 192.158.1.2.
Correct that and will be ok. I could ping from both side with no problem.
-If I helped you somehow, please, rate it as useful.-
10-15-2017 03:26 PM
Hello @tsetsetsetsetsetset
Please, share your Packet Tracer file. You can go to "File" tab and Save As PKZ.
After that save file in your machine, rename it as file.pkz.txt and attach here.
This is the easiest way to help you.
Waiting for you file.
-If I helped you somehow, please, rate it as useful.-
10-15-2017 03:41 PM
Hi
Your config seems ok.
Can you share the output of the following command:
packet-tracer input inside icmp 192.168.1.2 8 0 172.16.1.2
10-15-2017 03:51 PM
I tried this initially. Doesn't seem Packet Tracer lets you use the packet-tracer command, unless I'm doing something wrong.
10-15-2017 03:53 PM
10-15-2017 04:00 PM
Packet Tracert ASA has not the same command as real ASA.
Send me you pkz file as I said and let me take a look.
-If I helped you somehow, please, rate it as useful.-
10-15-2017 04:03 PM
10-15-2017 04:04 PM - edited 10-15-2017 04:05 PM
10-15-2017 04:33 PM
10-15-2017 04:36 PM
10-15-2017 04:51 PM
10-15-2017 04:55 PM
Hello @tsetsetsetsetsetset
Your problem is a Typo on the PC with IP address 192.168.1.2. You put 192.158.1.2.
Correct that and will be ok. I could ping from both side with no problem.
-If I helped you somehow, please, rate it as useful.-
10-15-2017 05:07 PM
10-15-2017 05:11 PM
That happens man. Keep up!!
-If I helped you somehow, please, rate it as useful.-
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide