ASA Ping Test show Question Marks

[cherrykit]

I have a two ASA, in active / standby failover status.

In the ASA there has two context, one is ASA1 and the other is ASA2

A network 10.10.1.0/24 is between these two context

I tried to do a ping test in a client behind ASA2, ping to ASA1 client, failed with question marks, I checked the access rule is correct, the static route for dedication subnet is enabled in these two ASA context

Result of the command: "ping 192.168.3.2"

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.3.2, timeout is 2 seconds:

?????

Success rate is 0 percent (0/5)

Anyone know what's that mean? I checked on the internet that say it's "Unknow Packet", but what will cause this issue? Thanks!

[Eugene Khabarov]

Hi! This means sipmly timeout. No response was recieved in 2 seconds interval.

__

HTH

[Kishore Chennupati]

Hi Chun,

it means that either there is no route to the destination or the firewall is blocking it.

Can you do a traceroute to the destination and where it stops?

Regards

Kishore

[BrianChernish]

I think you may need to add the intended source interface name.  Something like "ping inside 192.168.3.2".

Brian

[Freemen]

I think need to insert

icmp permit any <Interface name>