loopback interface in ASA or FWSM

snarayanaraju · ‎08-21-2009

Hi experts,

Is it possible to create loopback interfaces in FWSM or ASA firewall

The need is i want a interface command to the firewall as I am facing problem in pinging one interface IP ADDRESS from the other zones.

Thanks in advance

sairam

Kevin Redmon · ‎08-23-2009

Sairam,

No - Cisco firewalls do NOT allow for a loopback address. If you are having issues with pinging a certain interface IP address, please be sure that you are pinging the interface closest to the client machine - ie NOT another interface. Unlike a router, the Cisco firewalls do NOT allow you to ping a "far-side" interface. Also, be sure that you have 'icmp permit ' for the relevant interface.

mgs · ‎10-24-2009

Not entirely true. You can issue the 'management-access inside' command, which will enable you to SSH and issue ping/snmp commands on the inside interface IP eg. from the far-end of a IPsec tunnel configured.

cisco24x7 · ‎10-24-2009

"Also, be sure that you have 'icmp permit ' for the relevant interface"

This is NOT true. Pix/ASA, by default, will let you ping the interface, unless explicitly dennied.