Link to home
Start Free TrialLog in
Avatar of Bill H
Bill H

asked on

Can't Ping Outside Cisco 3550

I have a Cisco 3550 running (C3550-IPBASEK9-M), Version 12.2(25)SEE3) and it is connected to a Cisco ASA 5505 on one uplink, and behind it i have a port channel to a cisco 2950. Now, from every device on the network i am able to ping anything on the Internet (all servers, workstations, ASA, and even the other switch behind the 3550). On the 3550 i can ping all devices internally, but nothing on the internet, it doesnt seem like it cant go outside to the Internet at all. Am i missing something? So far the network is running fine with no issues.
Avatar of Fidelius
Fidelius
Flag of Croatia image

Hello,

What is default gateway on Cisco 3550?
Can you ping Cisco 3550 from ASA?
Do you have Cisco 3350 IP addres blocked on ASA by inside ACL?
Do you have  Security Plus license on ASA 5505?
How many interfaces are you using on ASA? Just outside and inside? Or also DMZ.

Regards!
Avatar of Bill H
Bill H

ASKER

Default gateway is the ASA.
Yes can ping 3550 from ASA.
Do not have it blocked by ACL inside.
No base licesnse.
Just inside and outside, super simple.
Hi,

please show the configs
Avatar of Bill H

ASKER

i think i figured out the issue, theres an issue with the NAT on the ASA. Will post back
you able to view the problem on the ASA ASDM monitor function live
Avatar of Bill H

ASKER

how so?
here is that you need:)

http://www.cisco.com/en/US/docs/security/asdm/6_1/user/guide/mon_log.html

go to ASDM --> MONITORING --> LOGGING --> VIEW...
Hi,

you can configure ACL on firewall from inside to outside as below :

ASA(config-t)#Access-list 101 permit icmp any any ech-reply
ASA(Config-t)#policy-map global_policy
ASA(Config-t)#ICMP enable

and check you should be able to ping and connect to outside network.
ASA(Config)#Inspect ICMP
ASKER CERTIFIED SOLUTION
Avatar of Bill H
Bill H

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Bill H

ASKER

Resolved issue on my own.