- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-05-2018 01:04 AM - edited 02-21-2020 08:11 AM
Dear all,
Now,I am starting to learn Cisco firewall.
Now,One interface to another sub interface cannot ping each other.Please tell me how can I solve my problem.
Thank you so much
Solved! Go to Solution.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-05-2018 01:37 AM
Hello,
By design, you can not ping from one interface to another interface of ASA, and thats true for subinterface as well. You can for sure ping from a host behind interface A to a host behind interface B with proper config (Access-list, NAT etc). Also, you can ping from host behind interface A to interface A.
Is this the question here, if not, please share the config and explain the source and destination of ping traffic.
HTH
AJ
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-03-2018 05:59 PM
not sure if you're ping through the asa, if so, ensure icmp is allowed:
policy-map global_policy
class inspection_default
inspect icmp
regards
azam
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-05-2018 01:37 AM
Hello,
By design, you can not ping from one interface to another interface of ASA, and thats true for subinterface as well. You can for sure ping from a host behind interface A to a host behind interface B with proper config (Access-list, NAT etc). Also, you can ping from host behind interface A to interface A.
Is this the question here, if not, please share the config and explain the source and destination of ping traffic.
HTH
AJ
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-03-2018 05:59 PM
not sure if you're ping through the asa, if so, ensure icmp is allowed:
policy-map global_policy
class inspection_default
inspect icmp
regards
azam
