Routing in ASA

[Asfandyar70754]

Hey guys,

So I am a bit new on ASA and was doing a basic lab, topology attached. I have vlan 10 & 20 in my inside network. 

Following are the routes that I have configured on ASA, CoreSW & ISP-RTR

Core SW route:  ip route 0.0.0.0 0.0.0.0 30.0.0.2

ASA routes: 

route outside 0.0.0.0 0.0.0.0 40.0.0.2 1

route inside 10.0.0.0 255.0.0.0 30.0.0.1 1

route inside 20.0.0.0 255.0.0.0 30.0.0.1 1

ISP-RTR route: 

ip route 0.0.0.0 0.0.0.0 40.0.0.1

Now I am not able to ping from my internal network to ISP-RTR's IP or it Loopback IP.

What am I missing in m config?

[MHM Cisco World]

You need ICMP inspection 

https://www.speaknetworks.com/enable-icmp-inspection-to-allow-ping-traffic-passing-asa/

[Asfandyar70754]

Thank you for your response.

I also need to know incase there are 2 ISPs then can I use default routes for both ISPs.

route outside 0.0.0.0 0.0.0.0 50.0.0.2 2(Making it a backup route using administrative distance 2)

[Rob Ingram]

@Asfandyar70754 if you want to use both ISP circuits, then you can use IP SLA to track the primary ISP and failover to the secondary if required - example here. Or use Policy Based Routing (PBR) - example here.

[paul driver]

Hello
By default traffic from an asa outside interface (lower security level) isn’t allowed into the fw ( as such icmp reply’s will denied)
You could allow this two ways: 

Access-list
access-list x extended permit icmp any any echo-reply 
access-group x in interface outside

Service-policy inspection
policy-map global-policy
class insection_default
inspect icmp
inspect icmp-error < hides internal addresing via traceroute
exit

Lastly:
allow traffic between interfaces--- intervlan routing
same-security-traffic permit inter-interface 

Allow traffic in/out same interface
same-security-traffic permit intra-interface 

[Khaled Douma]

Use "fixup protocol icmp" to start to inspect ICMP protocol