02-18-2015 03:08 PM - last edited on 03-25-2019 05:54 PM by ciscomoderator
i permit all and packet tracer succeed to allow all, still can not ping, why?
can not ping from inside switch to outside switch in GNS3 though packet tracer allow in both direction
https://community.gns3.com/message/20175#20175
Solved! Go to Solution.
02-19-2015 12:11 AM
Hi,
If you are using L3 switches then confirm that they have the proper routing information to reach the other switch.
If you are using L2 switches then for them to reach a remote subnet you would need the "ip default-gateway" command. This will let the switch forward traffic to other subnets from its Vlan interface.
I only quickly glanced the output on the other thread. It should really be cleaned up so thats easier to read. But I would imagine that you have a routing problem.
Notice that for the purpose of reaching subnets on each side of the firewall you dont really need any NAT configurations on the ASA. If there is no NAT the traffic will simply go through with their original IP addresses. If you need Dynamic PAT for some purpose then make sure you have a NAT0/Identity NAT configuration between the subnets which you need to connect to eachother with their original IP addresses.
Hope this helps :)
- Jouni
02-19-2015 12:11 AM
Hi,
If you are using L3 switches then confirm that they have the proper routing information to reach the other switch.
If you are using L2 switches then for them to reach a remote subnet you would need the "ip default-gateway" command. This will let the switch forward traffic to other subnets from its Vlan interface.
I only quickly glanced the output on the other thread. It should really be cleaned up so thats easier to read. But I would imagine that you have a routing problem.
Notice that for the purpose of reaching subnets on each side of the firewall you dont really need any NAT configurations on the ASA. If there is no NAT the traffic will simply go through with their original IP addresses. If you need Dynamic PAT for some purpose then make sure you have a NAT0/Identity NAT configuration between the subnets which you need to connect to eachother with their original IP addresses.
Hope this helps :)
- Jouni
02-19-2015 09:55 AM
i succeed by adding static route in outside and inside router
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide