UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

[calabilla]

I have a fairly simple network setup in my LAB

Management Interface 192.168.1.1 /24

LAN Interface 192.168.100.1/24

DESKTOP IP 192.168.100.100

I have allowed all the Internal Subnet on the Management interface which is 192.168.100.0 /24 in permitted list

I cannot ping the Management Interface 192.168.1.1

FROM

192.168.100.100

NO SECURITY POLICIES , ROUTES AND NAT ADDRESSES ARE CONFIGURED JUST A PLAIN NETWORK.

I CAN ALSO PING FIREWALL LAN INTERFACE 192.168.100.1/24 FROM PC 192.168.100.100

HOW CAN I PING FROM LAN TO MANAGEMENT INTERFACE

[OtakarKlier]

Hello,

Since you have two subnets in play, I would like to ask the simple questions;

Do you have routing between the two vlans?

I would honestly guess there is a routing/vlan issue. I would also ensure you have the proper security policies in place to allow the traffic, ie zones and Ip subnets etc.

Regards,

[calabilla]

I dont have routing and i dont have vlans

LAN subnet is on vlan1 192.168.100.1

and management is on 192.168.1.1

[OtakarKlier]

Hello,

For the traffic to get from one subnet to the other, there needs to be a gateway and routing otherwise the systems do not know where to go. If you make you management interface something like 192.168.100.240/24, then it will be on the same subnet and you will be able to ping the management interface from the PC workstation.

Regards,

[calabilla]

actually i can access the Firewall  192.168.100.1 which is my ethernet0 on firewall using 192.168.100.100 which my desktop , but i want to use using

192.168.100.100 --> 192.168.1.1

I add the default route to internet it works fine , If the route is removed then cant be used.

[Edsnow]

Hi @cale ,

Change your management interface IP to 192.168.100.x series and make the interface in vm to bridged mode. Then You can access it through management interface IP address.