ASA FW VPC to N7K with FP enabled

[muhammadsafwan]

Hi,

We doing some testing on FabricPath (FP), VPC and some other NX-OS features on Nexus Platform.

The ASA Firewall is connecting to 2 x N7K with VPC (2 x 10GbE).

Logically, we setup like this

N7K --- VLAN10 --- FW ---- VLAN12 ---- PC

N7K is doing static route to VLAN12 via FW.

We do some basic testing from the N7K and we can ping the front interface of the firewall on VLAN10. But we cannot ping the PC on VLAN12.

When we do ping from N7K, the packet did not reach the PC and even the FW (based on log and trace on FW)

When we do debug ICMP on N7K and ping from the PC, i can see the traffic and the N7K replies. But the FW did not receive any packet.

Any idea where else i shoud check?

[sbhadrav@cisco.com]

The command-line interface (CLI) allows you to configure and monitor Cisco NX-OS using a local console or remotely using a Telnet or SSH session. The CLI provides a command structure similar to Cisco IOSsoftware, with context-sensitive help, show commands, multiuser support, and roles-based access control.
http://docwiki.cisco.com/wiki/Cisco_Nexus_7000_Series_NX-OS_Troubleshooting_Guide_--_Troubleshooting_Tools_and_Methodology