Unable to ping ASA's Management interface - why?

[Ilya Semenov]

Hello, everybody!

I have ASA 5512-X and can't ping it's interface when I am directy connected to it from notebook.

From show runn:

interface Management0/0
management-only
no nameif
security-level 100
ip address 192.168.1.3 255.255.255.0

What most likely could be the problem?

Many thanks in advance,

Ilya

[Seb Rupik]

Hi there,

You need to enable ICMP inspection:

!
fixup protocol icmp
!

cheers,

Seb.

[Ilya Semenov]

It's turned on

class-map global-class
match access-list global_mpc
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
policy-map global_policy
description SFR
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
class global-class
sfr fail-open monitor-only

[Seb Rupik]

Give the interface a name:

!
int Management0/0
  nameif MANAGEMENT
!

[Ilya Semenov]

The problem was in VLANs.

Thanks