topic Cannot ping L3 interface except mgmt? in General Topics

Cannot ping L3 interface except mgmt?

migration — Thu, 07 Apr 2011 06:41:23 GMT

Hi all,

I have a classic setup... mgmt port, one outside, one DMZ and one inside L3 ports, NAT policy defined and a bunch of security rules.

Outside, Inside and DMZ ports all have their IP addresses defined, but I cannot ping them. Not even inside port from inside network. Any ideas?

Re: Cannot ping L3 interface except mgmt?

enfi — Thu, 07 Apr 2011 07:12:59 GMT

Hi,

You need to create and add management profile to L3 interface. Network->Network profiles->Interface mgmt

Add new profile which has ping enabled then add this profile to your L3 interface.

Re: Cannot ping L3 interface except mgmt?

dagibbs — Fri, 08 Apr 2011 06:06:09 GMT

primozl wrote:

Hi all,

I have a classic setup... mgmt port, one outside, one DMZ and one inside L3 ports, NAT policy defined and a bunch of security rules.

Outside, Inside and DMZ ports all have their IP addresses defined, but I cannot ping them. Not even inside port from inside network. Any ideas?

Do you have an interface management profile defined?

Under the "network' tab in your management console, you should see "Interface Mgmt" under the 'Network Profiles" section.

Create a new one with the protocol(s) you wish to allow (ping, snmp etc), optionally add the permitted IP addresses for the requests to come from, save this, then edit the interface concerned and under the "Interface Management" drop down, apply the profile you just creatwed.

Commit this and you should be able to use the protocols you defined in the first step.

HTH

Re: Cannot ping L3 interface except mgmt?

migration — Fri, 08 Apr 2011 07:23:23 GMT

Thank you both! 🙂

Interfaces now reply to my pings cheerfully and on time every time. 🙂