can't ping inside interfaces on asa from switch

[Majed Zouhairy]

Peace,

I have asa 5520 with sub interfaces inside, i can ping hosts on the inside networks but i can't ping the inside interfaces themselves from an attached nexus switch. it would make troubleshooting a lot easier if i can ping the gateway. So is there a way to enable pings to the inside interfaces from different vlans?

[Traian Bratescu]

Sorry for my previous post... I incorretly assumed that you were trying to ping the ASA's intrface Ip which doesn't seem to be the case...

uRPF is unicast reverse path forwarding which state that a packet is allowed only if there is a returning route (in ASA) through the interface that it came.

Please confirm that the setup is the one described above by R.Seth.

Traian

[Traian Bratescu]

i would do what R.Seth suggested - a capture to see wether there are any icmp packets reaching the ASA; maybe a traceroute from Nexus... just to ignore any routing issue...