One interface to another sub interface cannot ping each other

[Aung Soe Myo Oo]

Dear all,

Now,I am starting to learn Cisco firewall.

Now,One interface to another sub interface cannot ping each other.Please tell me how can I solve my problem.

Thank you so much

[Ajay Saini · Accepted solution]

Hello,

By design, you can not ping from one interface to another interface of ASA, and thats true for subinterface as well. You can for sure ping from a host behind interface A to a host behind interface B with proper config (Access-list, NAT etc). Also, you can ping from host behind interface A to interface A.

Is this the question here, if not, please share the config and explain the source and destination of ping traffic.

HTH
AJ

[mkazam001 · Accepted solution]

not sure if you're ping through the asa, if so, ensure icmp is allowed:

policy-map global_policy
 class inspection_default
  inspect icmp

regards

azam