05-14-2024 01:03 PM
Hi
I have 2 x Firepower 2110 ASA Transparent mode Firewalls connected to each other. The Firewall are used to create 3 levels of Security Zones for Servers. Layer 3 will collect updates from the internet. Layer 3 will then copy the updates to Server in Layer 2. Layer 2 Server then needs to distribute the updates to Servers in Layer 1.
So Layer 1 in South of Firewall-01 and Layer-02 is North of Firewall-01 and South of Firewall-02. Layer 3 is north of Firewall-02. All of these layers are on the same IP range and also in thje same bridge groups.
The servers in Layer 1 can ping FW-01 but not FW-02. FW-01 and FW-02 can ping each other BVI IP's.
What config is required to alow ICMP echo's and reply's to be received and forwarded by the two Firewall? Or do i need to allow or set something setiings for this to happen? FW-01 does even create Log entries whne trying to each FW-02 for Layer 1.
05-15-2024 04:52 AM
Hard task
Can you draw topolgy to make me better understand the issue.
Also one Q are server and BVI in both FW in same subnet?
Are you config any ACL to interface?
MHM
05-15-2024 05:00 AM
05-15-2024 05:02 AM
No attachment friend
MHM
05-15-2024 01:02 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide