03-04-2021 01:15 AM - edited 03-04-2021 01:16 AM
Hello
ASA5506 i have the problem that the ip from the static clients arnt reachable.
if change this to the attached switch the issue are gone, if pachting back to
ASA the ip arnt still not reachable.
i'am reading that i need to allow IMCP, following command trying without success:
>same-security-traffic permit intra-interface
>policy-map global_policy
>class inspection_default
>inspect icmp
>access-list inside extended permit icmp any any echo
>access-list inside extended permit icmp any any echo-reply
Thanks for any Update.
Regards
03-04-2021 01:25 AM
Do you have a network diagram and network switch/ASA configuration to show us please. I noted you had similar issue in previous thread too.
03-04-2021 01:46 AM - edited 03-04-2021 01:48 AM
meny thanks for your fast answer.
Network run over BVI with Serviced DHCP, the range from 1-20 reserved for Static IP Addresses.
config:
dhcpd address 192.168.1.20-192.168.1.254 inside
dhcpd dns 192.168.1.9 interface inside
dhcpd domain caloro.m interface inside
dhcpd option 3 ip 192.168.1.1 interface inside
dhcpd option 6 ip 192.168.1.9 interface inside
dhcpd enable inside
!
interface GigabitEthernet1/8
description Switch 1.Floor
bridge-group 1
nameif inside_7
security-level 100
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
!
interface BVI1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
--
ASA Ports Connection
G1/1 OOUTSIDE - WAN (ISP)
G1/2 INSIDE - NAS
G1/3 INSIDE - Free
G1/4 INSIDE - Printer
G1/5 INSIDE - ESXI
G1/6 INSIDE - DNS-Server
G1/7 INSIDE - PC
G1/8 INSIDE - Switch 1.Floor
Switch 1.Floor
G1/1 From ASA
G1/2 AP
G1/3 AP
G1/4 Client
G1/6 Client
G1/7 Free
G1/8 Free
03-05-2021 04:22 AM
Please, any possible update?
thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide