cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
912
Views
0
Helpful
2
Replies

One interface to another sub interface cannot ping each other

Aung Soe Myo Oo
Level 1
Level 1

Dear all,

 

Now,I am starting to learn Cisco firewall.

Now,One interface to another sub interface cannot ping each other.Please tell me how can I solve my problem.

 

Thank you so much

2 Accepted Solutions

Accepted Solutions

Ajay Saini
Level 7
Level 7

Hello,

 

By design, you can not ping from one interface to another interface of ASA, and thats true for subinterface as well. You can for sure ping from a host behind interface A to a host behind interface B with proper config (Access-list, NAT etc). Also, you can ping from host behind interface A to interface A.

 

Is this the question here, if not, please share the config and explain the source and destination of ping traffic.

 

HTH
AJ

View solution in original post

mkazam001
Level 3
Level 3

not sure if you're ping through the asa, if so, ensure icmp is allowed:

policy-map global_policy
 class inspection_default
  inspect icmp

regards

azam

View solution in original post

2 Replies 2

Ajay Saini
Level 7
Level 7

Hello,

 

By design, you can not ping from one interface to another interface of ASA, and thats true for subinterface as well. You can for sure ping from a host behind interface A to a host behind interface B with proper config (Access-list, NAT etc). Also, you can ping from host behind interface A to interface A.

 

Is this the question here, if not, please share the config and explain the source and destination of ping traffic.

 

HTH
AJ

mkazam001
Level 3
Level 3

not sure if you're ping through the asa, if so, ensure icmp is allowed:

policy-map global_policy
 class inspection_default
  inspect icmp

regards

azam

Review Cisco Networking for a $25 gift card