ping issue in ASA

[rouzbehta]

Hello All,

I set up a nat on ASA with different inside subntes and a DMZ, I can ping from any one of my subnets  the next hop router with true nat translation from packet tracer.

But I can't ping the next hop router "the router after firewall" from my inside network "inside router"

packet tracer shows that my packet goes trough nat and reaches the next hop router, this means the problem is might be between ASA and inside router?

Any thoughts?

Best Regards,

-Rouzbeh

[PAUL GILBERT ARIAS · Accepted solution]

Can you elaborate a little more. You are trying to ping from the inside to the gateway of the ASA on the Outside?

Do you have the inspect icmp enabled? Can you ping from the ASA to that router?

What kind of NAT do you have?

[Kureli Sankar · Accepted solution]

You are saying the following?

Host2 and Host3 are able to ping the RTR but Host1 is not able to?

                       Host 3

                           |

                        DMZ1

                          |

Host1--inside--ASA--outside--RTR

                         |

                      DMA2

                        |

                     Host2

Pls. enable logging and see what the syslogs show.

conf t

logging on

logging buffered 7

exit

sh logg | i x.x.x.x (where x.x.x.x is the Host1 IP address)

-KS

[rouzbehta]

Thank you for answer, I haven't had default route from next hop router to the ASA, I made that and it is good now

Regards,

-Rouzbeh