i am able to ping 10.18.1.120 from my remote machine.
after adding the packet-tracer input command, this is my output
admin-firewall(config)# packet-tracer input administration icmp 10.18.1.121 8 $
Phase: 1
Type: ACCESS-LIST
Subtype:
Result: ALLOW
Config:
Implicit Rule
Additional Information:
Forward Flow based lookup yields rule:
in id=0x7ffec80d4f80, priority=1, domain=permit, deny=false
hits=23666, user_data=0x0, cs_id=0x0, l3_type=0x8
src mac=0000.0000.0000, mask=0000.0000.0000
dst mac=0000.0000.0000, mask=0100.0000.0000
input_ifc=administration, output_ifc=any
Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 172.16.10.1 255.255.255.255 outside
Phase: 3
Type: IP-OPTIONS
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Forward Flow based lookup yields rule:
in id=0x7ffec80d9fc0, priority=0, domain=inspect-ip-options, deny=true
hits=139, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0
src ip/id=0.0.0.0, mask=0.0.0.0, port=0
dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
input_ifc=administration, output_ifc=any
Phase: 4
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
Additional Information:
Forward Flow based lookup yields rule:
in id=0x7ffec80d99e0, priority=66, domain=inspect-icmp-error, deny=false
hits=3, user_data=0x7ffec80d8f50, cs_id=0x0, use_real_addr, flags=0x0, protocol=1
src ip/id=0.0.0.0, mask=0.0.0.0, icmp-type=0
dst ip/id=0.0.0.0, mask=0.0.0.0, icmp-code=0, dscp=0x0
input_ifc=administration, output_ifc=any
Phase: 5
Type: NAT
Subtype:
Result: ALLOW
Config:
nat (administration,outside) source static any any destination static NETWORK_OBJ_172.16.10.0_29 NETWORK_OBJ_172.16.10.0_29 no-proxy-arp route-lookup
Additional Information:
Static translate 10.18.1.121/0 to 10.18.1.121/0
Forward Flow based lookup yields rule:
in id=0x7ffec829fde0, priority=6, domain=nat, deny=false
hits=2, user_data=0x7ffec829f2b0, cs_id=0x0, use_real_addr, flags=0x0, protocol=0
src ip/id=0.0.0.0, mask=0.0.0.0, port=0
dst ip/id=172.16.10.0, mask=255.255.255.248, port=0, dscp=0x0
input_ifc=administration, output_ifc=outside
Phase: 6
Type: WEBVPN-SVC
Subtype: out
Result: ALLOW
Config:
Additional Information:
Forward Flow based lookup yields rule:
out id=0x7ffec9c444d0, priority=71, domain=svc-ob-tunnel-flow, deny=false
hits=3, user_data=0x1000, cs_id=0x0, reverse, flags=0x0, protocol=0Phase: 7
Type: USER-STATISTICS
Subtype: user-statistics
Result: ALLOW
Config:
Additional Information:
Forward Flow based lookup yields rule:
out id=0x7ffec8e73a50, priority=0, domain=user-statistics, deny=false
hits=38, user_data=0x7ffec8e628c0, cs_id=0x0, reverse, flags=0x0, protocol=0
src ip/id=0.0.0.0, mask=0.0.0.0, port=0
dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
input_ifc=any, output_ifc=outside
Phase: 8
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 255, packet dispatched to next module
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 255, packet dispatched to next module
Module information for forward flow ...
snp_fp_tracer_drop
snp_fp_inspect_ip_options
snp_fp_translate
snp_fp_adjacency
snp_fp_svc_ob_tunnel_flow
snp_fp_fragment
snp_ifc_stat
Module information for reverse flow ...
Result:
input-interface: administration
input-status: up
input-line-status: up
output-interface: outside
output-status: up
output-line-status: up
Action: allow
