topic Re: UNABLE TO PING MANAGEMENT INTERFACE FROM LAN in General Topics

UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

calabilla — Fri, 25 Oct 2024 13:35:11 GMT

I have a fairly simple network setup in my LAB

Management Interface 192.168.1.1 /24

LAN Interface 192.168.100.1/24

DESKTOP IP 192.168.100.100

I have allowed all the Internal Subnet on the Management interface which is 192.168.100.0 /24 in permitted list

I cannot ping the Management Interface 192.168.1.1

FROM

192.168.100.100

NO SECURITY POLICIES , ROUTES AND NAT ADDRESSES ARE CONFIGURED JUST A PLAIN NETWORK.

I CAN ALSO PING FIREWALL LAN INTERFACE 192.168.100.1/24 FROM PC 192.168.100.100

HOW CAN I PING FROM LAN TO MANAGEMENT INTERFACE

Re: UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

OtakarKlier — Fri, 25 Oct 2024 17:44:51 GMT

Hello,

Since you have two subnets in play, I would like to ask the simple questions;

Do you have routing between the two vlans?

I would honestly guess there is a routing/vlan issue. I would also ensure you have the proper security policies in place to allow the traffic, ie zones and Ip subnets etc.

Regards,

Re: UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

calabilla — Fri, 25 Oct 2024 17:49:31 GMT

I dont have routing and i dont have vlans

LAN subnet is on vlan1 192.168.100.1

and management is on 192.168.1.1

Re: UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

OtakarKlier — Fri, 25 Oct 2024 17:53:09 GMT

Hello,

For the traffic to get from one subnet to the other, there needs to be a gateway and routing otherwise the systems do not know where to go. If you make you management interface something like 192.168.100.240/24, then it will be on the same subnet and you will be able to ping the management interface from the PC workstation.

Regards,

Re: UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

calabilla — Sat, 26 Oct 2024 07:07:24 GMT

actually i can access the Firewall 192.168.100.1 which is my ethernet0 on firewall using 192.168.100.100 which my desktop , but i want to use using

192.168.100.100 --> 192.168.1.1

I add the default route to internet it works fine , If the route is removed then cant be used.

Re: UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

Edsnow — Sat, 26 Oct 2024 07:34:25 GMT

Hi @cale ,

Change your management interface IP to 192.168.100.x series and make the interface in vm to bridged mode. Then You can access it through management interface IP address.