Firewall 515E Can't Ping Interface

Unanswered Question
Nov 24th, 2008

Hello Guys,

I am new the whole Cisco firewall thing but do know routing and switching some what. I have assigned the config below on my firewall and a ip of on my switch which is plugged into my interface. I can not ping the firewalls interface from the firewall ( interface E1) nor my vlan interface in my switch plugged into my inside interface port. My config is below. Please help. Thanks.

Ping Error

CharlesPIX# ping

Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:


Success rate is 0 percent (0/5)

Firewall Config


hostname ChuckPIX

enable password 2KFQnbNIdI.2KYOU encrypted



interface Ethernet0


nameif outside

security-level 0

no ip address


interface Ethernet1

nameif inside

security-level 100

ip address


interface Ethernet2


nameif DMZ

security-level 50

no ip address


interface Ethernet3


no nameif

no security-level

no ip address


interface Ethernet4


no nameif

no security-level

no ip address


interface Ethernet5


no nameif

no security-level

no ip address


passwd 2KFQnbNIdI.2KYOU encrypted

ftp mode passive

pager lines 24

mtu outside 1500

mtu inside 1500

mtu DMZ 1500

no failover

no asdm history enable

arp timeout 14400

route inside 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout uauth 0:05:00 absolute

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

telnet timeout 5

ssh timeout 5

console timeout 0

dhcpd dns

dhcpd wins

dhcpd lease 10000

dhcpd ping_timeout 1000

dhcpd domain


dhcpd address inside

dhcpd enable inside



class-map inspection_default

match default-inspection-traffic



policy-map type inspect dns preset_dns_map


message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns preset_dns_map

inspect ftp

inspect h323 h225

inspect h323 ras

inspect netbios

inspect rsh

inspect rtsp

inspect skinny

inspect esmtp

inspect sqlnet

inspect sunrpc

inspect tftp

inspect sip

inspect xdmcp


service-policy global_policy global

prompt hostname context


: end

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading. Mon, 11/24/2008 - 07:52


Why do you have route inside 1 ?

Best regards.


Charlie Mayes Mon, 11/24/2008 - 08:42

I guess that would be wrong then right? What do I need to have?

when I removed it that route this is what it gave me as an error

ChuckPIX# ping

Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:

No route to host

ajagadee Mon, 11/24/2008 - 09:28


Do a show interface and make sure that the iterface e1 in up/up status. It looks like a L1/L2 issue.



*Pls rate if it helps*

ajagadee Mon, 11/24/2008 - 11:04

Interesting! Can you post the outputs of "show interface e1" and also "show route".




This Discussion