Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ping and traceroute on multiple context mode not working (security appliance)

Hi

I can not make work  ping & traceroute in multiple context mode

I have configured two context context1 & context2. the second one have several vlan and servers behind. Then I added the lines below to test if servers behind the security appliance(context2) are on line

access-list outside_access_in extended permit icmp any any time-exceeded log disable 
access-list outside_access_in extended permit icmp any any echo-reply log disable
access-group outside_access_in in interface outside

This  works fine in single mode but it seems to have no effect in multiple context mode

is there something missing?

Any ideas?
Thanks
4 REPLIES
Hall of Fame Super Blue

Re: ping and traceroute on multiple context mode not working (se

Osavldo

It's a little unclear but echo-reply would presume you are pinging from the servers. If you are trying to ping the servers from the outside then it should be echo-request not echo-reply.

Jon

Cisco Employee

Re: ping and traceroute on multiple context mode not working (se

enable icmp and icmp error inspection on both contexts.

what the logs on both contexts.

Community Member

Re: ping and traceroute on multiple context mode not working (se

Ok, thanks very much

I changed my rules to:

access-list outside_access_in extended permit icmp any any traceroute 
access-list outside_access_in extended permit icmp any any echo

the ping command now work but not the traceroute

Thanks
Cisco Employee

Re: ping and traceroute on multiple context mode not working (se

374
Views
0
Helpful
4
Replies
CreatePlease to create content