I have an ASR901 that is showing as "Down" from my Solarwinds server. From my server, I can putty into the device but I cannot ping it.
If I do a "debbug ip icmp" I can see the router showing this:
ICMP: echo reply rcvd, src 10.2.2.90, dst 10.2.5.113, topology BASE, dscp 0 topoid 0
It does not show a "SENT" like when I ping it from my desktop:
ICMP: echo reply sent, src 10.2.5.113, dest 10.2.102.231
That is the only evidence that there was a ping. There is another ASR901 at ip 10.2.5.107 that is working fine. It shows recieved and sent when I ping it from solarwinds. The ACL's in the devices along the path allow the entire subnet and are not logging a deny for this traffic.
Any helpful advice into troubleshooting this would be greatly appreciated.
My work laptop has usb blocked so I cannot get you a backup of the device.
10.2.5.113 is your ASR IP ?
in the First Ping
Server - ASR
ASR is receive the ping Echo Reply so the ACL Inbound accept the Ping Echo Reply
ASR is send the ping Echo Reply so the ACL Inbound accept the Ping Echo
But the Subnet you use for both Server and PC is different ???
So I worried about the FW, Why because the FW in case of the Server-ASR is only accept the return back traffic if the traffic is initiate from it INISDE interface "more secure". BUT FW will not accept traffic initiate from OUTSIDE interface "Low Secure".
I agree that clarification of the addressing of the server, of the router, and of the PC would be helpful.
I am surprised by this debug output
ICMP: echo reply rcvd, src 10.2.2.90, dst 10.2.5.113
I would expect to see echo request received. Why is the router receiving echo reply?
Can you post the configruaiton, i am thinking there may be ACL which blocking pings, since you confirmed SSH works ok
but this is just assumptions, once we have config, we can confirm what is wrong ?
*** Rate All Helpful Responses ***
Disable any software firewall on the server and test again, as by default icmp echo-reply would be denied if enabled, Long term if software firewall is required create policy to allow echo-reply
I am thinking about the message
echo reply rcvd, src 10.2.2.90, dst 10.2.5.113,
can you clarify what is 10.2.2.90 and what is 10.2.5.113?