Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1220
Views
0
Helpful
6
Replies

Destination host unreachable message intermittently

manik.palekar
Level 1
Level 1

‎09-18-2008 01:53 AM - edited ‎03-11-2019 06:46 AM

Dear Guys ,

M facinf one issue to ping a remote server via FWSM.It is showing Destination host unreachable intermittently.Please let me know what could be the issue...Thanks in advance

Reply from 172.17.117.24: bytes=32 time<1ms TTL=126

Reply from 172.17.117.24: bytes=32 time<1ms TTL=126

Reply from 172.17.117.24: bytes=32 time<1ms TTL=126

Reply from 172.17.117.24: bytes=32 time<1ms TTL=126

Reply from 172.17.10.25: Destination host unreachable.

Reply from 172.17.10.25: Destination host unreachable.

Reply from 172.17.10.25: Destination host unreachable.

Reply from 172.17.10.25: Destination host unreachable.

Reply from 172.17.10.25: Destination host unreachable.

Reply from 172.17.117.24: bytes=32 time=1ms TTL=126

Reply from 172.17.117.24: bytes=32 time<1ms TTL=126

Reply from 172.17.117.24: bytes=32 time<1ms TTL=126

Labels:
0 Helpful
6 Replies 6

Farrukh Haroon
VIP Alumni
VIP Alumni

‎09-18-2008 01:56 AM

Can other hosts ping this machine .25?

Can FWSM ping other hosts in the 172.17.10.x subnet?

Its most probably a routing issue.

Regards

Farrukh

0 Helpful

manik.palekar
Level 1
Level 1
In response to Farrukh Haroon

‎09-18-2008 02:29 AM

hi frd..

172.17.10.25 is a source ip address..I am getting same response from 172.17.117.24 to 172.17.10.25.Those systems which are behind FWSM contex are experiencing this issue..

0 Helpful

Farrukh Haroon
VIP Alumni
VIP Alumni
In response to manik.palekar

‎09-18-2008 01:40 PM

How is the context setup? ANy shared interfaces etc?

0 Helpful

manik.palekar
Level 1
Level 1
In response to Farrukh Haroon

‎09-18-2008 11:57 PM

Hi ,Contex configuration is simple as inside & outside ,there is no shared interface.. for outside interface I have comman VLAN ,which is catering to five contex

0 Helpful

Farrukh Haroon
VIP Alumni
VIP Alumni
In response to manik.palekar

‎09-19-2008 02:32 AM

How are you classifying packets then (mac-auto,static NAT etc)? because you are using a shared interface. From which zone are you initiating the ping?

Regards

Farrukh

0 Helpful

manik.palekar
Level 1
Level 1
In response to Farrukh Haroon

‎09-19-2008 06:43 AM

hi

M initiating ping from one of the inside contex...Outside interface of all Contexs are in commman network subnet

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card