I was just curious to know what exactly qualifies as the input interface in a packet trace statement.
Eg. ASA has two interfaces, Local & Outside. If the requirement is to ping from node on Local interface to one on the outside, what interface should be used as input interface...Local Or Outside?
Does it take the first interface the traffic hits from the direction as the ingress or to the interface it is destined?
The "input" interface is always the interface from which the packet is coming from.
So if you had "inside" and "outside" interfaces and you wanted to simulate a user behind the "inside" initiating a web browser connection to the Internet then the input interface would be "inside" since that is where the packet would be entering the ASA
packet-tracer input inside tcp
PS. I think I still havent answered some other discussion we had (traffic between network segments through ASA). Will try to have a look at it at some point. I have had something like 8 hours sleep in the span of 72 hours so I am pretty tired. Thanks to maintanance breaks
The "input" interface is always the interface from which the packet is coming from.
So if you had "inside" and "outside" interfaces and you wanted to simulate a user behind the "inside" initiating a web browser connection to the Internet then the input interface would be "inside" since that is where the packet would be entering the ASA
packet-tracer input inside tcp
PS. I think I still havent answered some other discussion we had (traffic between network segments through ASA). Will try to have a look at it at some point. I have had something like 8 hours sleep in the span of 72 hours so I am pretty tired. Thanks to maintanance breaks
