Ping outside interface from inside

bbilut — Wed, 18 May 2016 17:28:07 GMT

Can somebody explain how I would be able to ping the IP address on an untrusted interface from inside (trusted). I setup a interface management profile on the interface and I can ping the outside interface IP address from the public internet, but not from inside. I don't see any drops, and creating a policy has not seemed to help either.

I'm trying to do to troubleshoot something and not intended for long term usage.

Thanks!

Re: Ping outside interface from inside

jvalentine — Wed, 18 May 2016 18:10:01 GMT

Is there a security policy that allows pinging between the zones associated with those two interfaces?

While pinging, try running "show counter global filter delta yes". This should show you other reasons for packet drops (outside of policy).

Are you using NAT? Does your NAT policy translate the internal addresses to the external interface address? (The one you're trying to ping?) That may be the cause of the problem. You could create a "no-nat" rule that bypasses NAT when the source is internal and the destination is the outside interface IP address. Make sure this new policy is above your other NAT policy for outbound access.

topic Re: Ping outside interface from inside in General Topics

Ping outside interface from inside

Re: Ping outside interface from inside