Skip navigation
Cisco Learning Home > Certifications > Security (CCNA Security) > Discussions

_Communities

This Question is Not Answered 1 Correct Answer available (4 pts) 2 Helpful Answers available (2 pts)
1252 Views 8 Replies Latest reply: Mar 6, 2012 3:15 AM by Paul Stewart - CCIE Security, CCSI RSS

Currently Being Moderated

ospf routing in ASA

Feb 27, 2012 11:19 PM

eternalrain 104 posts since
Jul 6, 2010

Hi all,

 

i have enable ospf routing in ASA. i can ping from laptop 10.10.10.2 to 192.168.2.2 but fail ping 192.168.2.3 i got debug icmp in layer 3 switch 3550 when i ping 192.168.2.2 from source 10.10.10.2 it got packet to see but when i ping 192.168.2.3 from source 10.10.10.2 no packet can see in debug icmp mode.

 

on the other way  laptop 192.168.2.3 can ping 192.168.250.1 but cannot ping 10.10.10.2. the routing table in router and switch already write in the pdf

 

i already permit ip any any in inside and outside and also configure inspect icmp . can anyone know what is the problem?

Attachments:
  • Paul Stewart  -  CCIE Security, CCSI 6,986 posts since
    Jul 18, 2008
    Currently Being Moderated
    2. Feb 28, 2012 3:07 AM (in response to eternalrain)
    Re: ospf routing in ASA

    Check the route table on the PC at 192.168.2.3. One other note, the fact that you don't see packets in the debug of the switch at 192.168.2.2 may not tell us anything. I would have expected to see that only when the switch itself is being pinged.

  • Irfan Sri 100 posts since
    Feb 28, 2012
    Currently Being Moderated
    4. Mar 1, 2012 2:33 PM (in response to eternalrain)
    Re: ospf routing in ASA

    active ICMP in Win 7. -- Control Panel> Windows Firewall > Advanced settings >Inbound Rules and enable File and Printer Sharing (Echo Request - ICMPv4-In)in the Domain profile

  • eugen 89 posts since
    Oct 7, 2010
    Currently Being Moderated
    5. Mar 1, 2012 4:31 PM (in response to eternalrain)
    Re: ospf routing in ASA

    Check your network profile in win 7 that is not set to Public, and also if ip is dhcp just release and renew after you disable firewall.

     

    Hope this helps

    Eugen

  • Paul Stewart  -  CCIE Security, CCSI 6,986 posts since
    Jul 18, 2008
    Currently Being Moderated
    6. Mar 1, 2012 5:00 PM (in response to eugen)
    Re: ospf routing in ASA

    It seems like every time I think I have a W7 firewall disabled, it is still enabled. You could also throw Wireshark on the W7 box to see if it is receiving the pings.  Then see if it is responding.  HTH.

  • Paul Stewart  -  CCIE Security, CCSI 6,986 posts since
    Jul 18, 2008
    Currently Being Moderated
    8. Mar 6, 2012 3:15 AM (in response to eternalrain)
    Re: ospf routing in ASA

    I think the Cisco RA VPN client may cause that if the checkbox is ticked next to "firewall".  I'd have to test it to be sure. From recollection, it remained in effect even when you exit the application.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)