Cisco Firewall :: Pinging Across 2 ASA 5510s
Dec 16, 2012
Here's my basic setup:
Computer A:
IP- 192.168.0.3
Mask- 255.255.252.0
Gateway- 192.168.0.2
[Code]....
Computer A can ping Firewall 1 and Firewall 2, but not Computer B. Computer B can ping Firewall 1 and Firewall 2, but not Computer A. Firewall 1 can ping Firewall 2, Computer A, and Computer B. Firewall 2 can ping Firewall 1, Computer A, and Computer B.
Why can't the computers ping each other, but their default gateways can? I've specifically allowed ICMP any any on all the affected interfaces.
View 6 Replies
ADVERTISEMENT
Feb 9, 2012
I've been given the task of adding a second ASA 5510 to a live ASA and making sure that the active/standby failover works, do I need a crossover cable?
View 4 Replies
View Related
May 30, 2011
We have several ASA5540s and 5510s (v8.4.1) being managed by CSM (4.1) Every so often several of the ASAs will send SNMP messages to CSM stating very high CPU utilization reached, usually between 150% and 400% - sometimes as high as 4million %.Obviously you can't get greater than 100%.
View 1 Replies
View Related
Nov 9, 2011
Is it possible to use the USB ports on a ASA5510's to copy files onto the flash?
I have not been able to find any ionfo on this in the users guides ?
View 2 Replies
View Related
Feb 27, 2013
I have DSL service with AT&T and I have a Motorola 3360 modem. We also have a /28 network of static IPs from AT&T. When I login using PPPoE on the modem it gets x.x.x.190 as it's address. Our range is 177-190. I have two ASA 5510s in an active/passive failover configuration with the Ethernet port of the modem and one interface of each of the ASAs on a dumb layer 2 switch.
I want to setup this DSL connection as a backup to our main Internet connection. I cannot figure out what setting on the DSL modem to use to make this happen. I know I cannot use PPPoE in a failover setting so I can't have the modem in bridged mode. There is some mode where it passes the 190 address to the connected device and when I plug in a PC directly to the modem and set it for DHCP it does get 190 as it's address. So do I configure the ASA interface as 190 with one of the other addresses as it's standby? What do I set my route on the ASA to for use of this connection? Can I then make use of these other static addresses when plugging other devices into the layer 2 switch?
View 4 Replies
View Related
May 1, 2012
I have got new cisco ASA 5580 running 7.2(4) on it when i am trying to configured Virtual interface on vlan 400 in Gi0/0.400 to LBASE.now the problem is from my MZ zone 10.242.107.17 to Lbase virtual interface 10.242.103.1 iam not able to ping.
View 2 Replies
View Related
Oct 23, 2012
I have five (5) sites all connected via static VPN tunnels. They are all using Cisco ASA 5510s running 8.4(4)1. Any internal IP on each site can ping any IP on a remote site, because of the static VPN tunnels. I have the external IP (routeable) addresses connecting to each other.
Site A: 10.1.0.0 /24
Site B: 10.2.0.0 /24
Site C: 10.3.0.0 /24
Site D: 10.5.0.0 /24
Site E: 10.10.0.0 /20
I have remote users who connect using Cisco AnyConnect 3.1 to Site E. They get a static IP within the 10.10.100.0 /24 subnet (vpnpool00) and can access anything in the 10.10.0.0 /20 subnet. So far, so good.No management wants users to access devices within the other sites, specifically Site A using teh same AnyConnect connection. In other words, they get an Ip address of say, 10.10.100.5 and now need to access a server on Site A's subnet or 10.1.0.5.I have checked my NAT statements and they appear to allow this, but so far when I do a ping I get the following: Routing failed to locate next hop for ICMP from outside: 10.10.100.5/1 to inside: 10.1.0.5/0 What am I missing? Is there a NAT statement that is wrong, or an access-list statement or possibly a static route?
View 10 Replies
View Related
Jan 5, 2012
I've attached my ASA's config. I can't bring the VPN up by pinging from the ASA but the VPN will come up when someone pings from behind the ISA server. So the problem seems to be routing/NAT on my ASA because my pings aren't being directed out the tunnel. The VPN in question has 64.106.x.x as the peer and AES 256/SHA for phase 1 and 2.
View 2 Replies
View Related
Jun 27, 2011
I found that Alternate LAN card will support.After replacing another LAN card i can ping all switches.But i want to know why my pc not pinging certain switches connected in network.Even i cleared the port security
View 5 Replies
View Related
Aug 29, 2012
my system ip not able to ping by other system in my company network but my system is in the network and able to ping other system in the network my system IP have static IP and IP is pinging on by server
View 1 Replies
View Related
Mar 3, 2013
We have recentrly replaced a 1700 router with Cisco 3945 router (Core Router) and the Channalised E1 interface is configured as given below: [code]
The issue happens intermittenly and makes network not reahable.Status of the links are UP/UP - No traffic forwarded through the link (Ser 0/0/0:1 and Ser 0/0/0:2) and at the same time not able to ping the local IP Address as well - 10.5.10.1/10.7.10.1.No issue on the Ser 0/0/0:0 link - Working fine.If you replace the new router with the old one all are working fine.
View 1 Replies
View Related
Aug 19, 2011
One computer does not see the other through pinging...but somehow we are connected...strange i know. My confusion ( being network illerate ) is with the names and etc. and some terminologies ie ..client? host? I have found in the past when someone triesthey use words or areas that do not coincide with my system...which is laptop with win 7 prem and desktop XP sp3
View 2 Replies
View Related
Feb 23, 2011
I have 2 NIC cards on the same machine running Redhat 9.I need to setup the machine in such a way that both cards are in the same subnet but card on port eth1 can be reached through card on port eth0.I tried modifying the iptables (with the limited knowledge that I have on it,used google) and even tried turning it off.I also tried setting files /proc/sys/net/ipv4/ip_forward and /proc/sys/net/ipv4/conf/all/proxy_arp to 1 but was unable to ping from IP address on port 0 to IP address on port 1 and vice-versa
View 1 Replies
View Related
Apr 22, 2013
If we have the following setup:Host A (IP :192.168.1.1, Prefix/length : 24, GW : 192.168.1.254) connected to the Router A on int Fa0/1 (IP : 192.168.1.254), Router A is connected to Router B, Host B (IP :192.168.2.1, Prefix/length : 24, GW : 192.168.2.254),connected to Router B on int Fa0/1 (IP : 192.168.2.254).Using the mentioned setup, after Host A pings Host B successfully, which entry will be in the ARP cache of Host A to support the transmission ?.
View 3 Replies
View Related
Sep 11, 2012
I have a cisco 2821 and have configured a llopback address which I want to use for management, however, I am unable to ping it from a device attached to GigabitEthernet0/0
View 1 Replies
View Related
May 29, 2013
I am getting RTO while pinging my L3 switch 3750 that happened after restarting switch,i have restarted it because I am not able to browse internet through URL,i am able to do it trough ip address, so I restarted it not I am getting RTO.
View 1 Replies
View Related
Jul 2, 2011
I will be moving away from my home computer but will still want access to it so I am trying to set up a VPN between it (home computer is windows 7) and my fedora 15 machine. They are currently on the same 192.168.1.0/24 network so I'm wondering if that may be the cause for my troubles.
Here's my setup:
Fedora 15 (192.168.1.3) is running the PPTP server with pptpd and gives 192.168.1.66 to any vpn client that connects to it./etc/pptpd.conf only has "localip 192.168.1.3" and "remoteip 192.168.1.66" options in it /etc/ppp/options.pptpd has "refuse-pap, refuse-chap, refuse-mschap, require-mschap-v2, require-mppe-128, proxyarp, lock, nobsdcomp, novj, novjccomp, nologfd, debug, dump" options Windows 7 (192.168.1.6, 192.168.1.66) is the client and I have it set to use connect to the public IP address of my router, PPTP, require encryption, only allow mschap-v2, don't use gateway in ipv4 properties.Both machines are connected to the same Belkin router (192.168.1.254) and I can ping locally to and from each computer no problem. The problem is my VPN connection is very inconsistent. I will open a ftp connection to 192.168.1.66 from 192.168.1.3, login, start uploading a file, get about 10MB uploaded, and then the VPN connection will die and the upload will fail. But, when I have "ping 192.168.1.66" running while uploading, the connection stays alive.
View 1 Replies
View Related
Sep 20, 2011
Lately I've noticed that my internet connection has been less than stellar. I will be playing an online game or surfing the web, and every so often I'll freeze up or things just won't run smoothly. My network consists of the following...All of my computers and devices connect to a Cisco 16 port gigabit switchThe switch then connects to a Peplink 20 Dual WAN routerThe router connects to a cable modem as well as a DSL modemThe other day I was trying to diagnose the problem, as well as update the firmware of the router. While I was on the main "status" page, I noticed an error saying that I couldn't connect to the router. It quickly cleared and everything was working fine. This of course made me think that my issues have to do with my connection to the router, and not with the internet service itself. I then tried ping -t to two other computers on the network, as well as the router. After 5 minutes of pinging, the connections to the two computers had zero fails, while the router connection failed about 5% of the time. I ran the same check from the other computers on the network, with similar results.So, I know that the issue lies with the router (I think), but that's where my brainstorm ends.
View 4 Replies
View Related
Jul 4, 2012
i can ping the other system but i can not access tthat system.. error message shows that path does not found.
View 6 Replies
View Related
Dec 26, 2012
I am able to ping the node but when i try to access the systm using backslash i am uable to access it and an error of host inaccessible.
View 1 Replies
View Related
Mar 7, 2013
I'm currently taking a networking course and was having some difficulty answering the following questions and could use a little clarification.Question: When pinging a non-existent device on your subnet, why doesn't the source node issue a ICMP echo request.My thoughts on this was because there was not a receiving node therefore any ICMP packets were not issued.Question 2: when pinging another non-existent device but not on your subnet, why doesn't the source node issue a ICMP echo request.
View 2 Replies
View Related
Apr 7, 2011
I have a problem with my Cisco 887V VDSL-router. The router gets a ip-address with dhcp from my provider. That works fine. I also can ping from the router:
routerVdslTestNew#ping google.ch source vlan 1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.79.99, timeout is 2 seconds:
Packet sent with a source address of 10.10.10.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 48/48/52 ms
My problem: If I want to ping google from a computer in the VLAN1 the ping doesn't work.
C:UsersXXXXXX>ping 74.125.79.99
Ping wird ausgeführt für 74.125.79.99 mit 32 Bytes Daten:
Timeout.
View 3 Replies
View Related
Nov 3, 2012
We had a problem where a 4500 would not ping directly connected devices dispite being able to telnet to them and also view them in CDP. It was mostly forwarding packets between devices but some hosts could not connect to others.
View 1 Replies
View Related
Jul 6, 2011
I've had some issues with my internet connection lately. Occasionally I would have connection interruptions even when I am just browsing the web with no downloads in the background or anything like that.The strange thing is that connection fails right at the vey beginning - if I constanly ping the gateway, I will see that among the continous pings of 1ms or less, every once in a while I would have several "request time out" messages.My laptop is connected directly to the router with a 6 feet cable. I replaced the cable and it still happens.What I also noticed is that if I am online in the MMORG I am playing, I can stay online for long hours, however when I start browsing the web, I would get disconnected pretty soon. So I think somehow browsing (and downloading at high speeds, which is understandable) somehow triggers these timeouts. I dont know what to make out of it.
View 1 Replies
View Related
May 1, 2012
I am have 3 machines int he house connected to the internet but one does not have internet access. It shows connected to the wireless network and from the command prompt there is an ip assigned to the laptop. But i cannot ping the gateway or any ip I get General Failure.
View 1 Replies
View Related
Apr 30, 2012
I have an Issue.In my networks, 1 single user is facing Network Slowness issue. i needs to check to which port user is coneected in switch to CHeck whether that port has any errors.But problem is, i am providing support from remote location.And my concern LAN segment is Very big,I have only user Ip address details,when i ping the Ip address from Core switch it is pinging. but when i give show ip arp & give Ip address then its not learning and listing out the Mac address to trace down to the specific port.
View 3 Replies
View Related
Nov 1, 2011
We have a Cisco 3640 router running c3640-is-mz.123-3g.bin Switching ports are devided into several VLans. Each VLan has its own IP subnet. We can't ping IP address X in subnet A from subnet B unless we log into the router and ping it from there first. (and then the IP address will show up in "show ip arp" command. Then we can ping X in subnet A from subnet B, and browse web on device X from subnet B, etc. )
View 6 Replies
View Related
Aug 4, 2012
last day i went to one client for the installation of C(WS-C4507R+E)
current ios :cat4500e-ipbase-mz.122-53.SG2.bin
there is only one sup engine installed and redundant slot is empty.
I installed one ethernet module in the slot 6 and it get detected working fine. I also want to install one fiber module but that module is only supported by 12.2 54 sg or later ios version.so i need an ios upgrade.
For the ios upgrade I decide to do it through svi interface For that i igive an ip address to vlan 1 (192.168.1.2) and plug cable in gigabit 6/1 and added that port into valn 1.
my laptop's ip is 192.168.1.1 @ this point i faced a rare problem the PING IS NOT WORKING.(switch is directly connected to my laptop).
Then i create another VLAN (2) and add that port into vlan 2 still ping is not getting.last thing i tried is that making that gigabit port into a routed port and result is same.
View 4 Replies
View Related
Oct 3, 2012
Lost Internet connectivity at home. connected via dsl line to my isp.when i issued ipconfig /all command i noticed that default gateway IP addr was a global ip addr. (77.36.x.x) instead of the usual private address 192.168.1.1. DHCP server had IP address 58.206.x.x when i issued ping 192.168.1.1 command, i got this output: "reply from 77.36.x.x: destination host unreachable" i couldn't access my router's configuration menu by typing 192.168.1.1 in web browser's address field.it's very interesting, because i had network issues before but could access my router's config menu and ping it. but now, i cannot reach my local router but receive reply from ISP's router.
View 10 Replies
View Related
Feb 2, 2012
I'm having an issue routing between vlans. I have vlan 1, and 2. I want to ping something on vlan 2, from vlan 1. I cannot ping from a computer on vlan 1 to a computer on vlan 2. I can ping each computer from the ASA 5505. I get an error on the ASA when I try to ping from the computers. The error is Failed to locate egress interface for UDP from voice:192.168.0.199/137 to 192.168.1.200/137. I can't understand why it even mentions IP 192.168. 1.200/ 137... I reset the unit configuring it from scratch and still no go. I have no given a static route to the out yet.. I need to get inter-vlan routing working first. [code]
View 13 Replies
View Related
Feb 4, 2013
i configured the VLAN810, with DHCP services, while i try to ping the host which is connected to gi 1/0/2 from my gi 1/0/1 , i can't ping the same vlan host , while i try to debug ip icmp its showing ,
C3750XB11#sh running-config
Building configuration...
Current configuration : 12053 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
[code]....
View 5 Replies
View Related
Oct 12, 2012
In my preparation for my coming CCNA certification I am experimenting with different network configurations. In my test network I am currently working with a "Router on a stick" setup. A Cisco 2611 router connecting a Cisco 2950 switch. VLANs configured on the switch and subinterfaces + dot1q encapsulation configured on the router. Switch only supports dot1q.Router's Eth0/1 is connected to the Switch Fa0/24 port which is also set to trunk mode. I am using a normal Cat5e twisted pair cable to connect the 2 devices.
VLANs are working since I can connect a workstation to an access port for example fa0/2 (vlan2) and get Internet access.I can also ping any of the subinterfaces of the router from the workstation.With the current setup I am not able to ping the switch from the router, or the other way around, so in other words I can't remote manage the switch from a telnet or SSH session with this setup. What I am missing?Just to be clear I am pinging the switch directly from the router (Router2611#ping 172.16.100.2), so please ignore all static routes and OSPF. [code]
View 3 Replies
View Related
Jun 3, 2013
I have two 1841's, setting up a Lab WAN in Packet Tracer. I have one of the 1841's run to a DSL modem, then out to the cloud and the same setup on the other end... from the cloud to the DSL modem and to the 1841 on that end... I have all green lights, so that tells me layer 2 is up, but I'm trying to figure out
what IP to assign the routers to test pinging and getting traffic flowing. but the DSL Modem's have the public IP's and dynamically assign an IP to the routers? I've also tried setting up a static IP on the routers fa0/0 interfaces and the pings fail.. Wondering what I am missing to get these two talking.
View 2 Replies
View Related
