Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ping request failure.

i have a branch located in one of the regional location. To connect my branch with my company network. i have taken mpls line from our service provider.

In my branch office i have installed a layer 3 switch. Since we want to segregate my lan. we have created a vlan in l3 switch named vlan 10. i am facing a problem to connect my vlan host to company network.

Switch configuration is below.

vlan 10 ip

Default route

port Fa0/1 ip connecting to Router)

Host in vlan 10 ip

From switch i can able to ping company network host (

The ping request from is failed to get response from

My firewall is NETASQ

On firewall we can see a log like icmp block to address

Since ping request is generated by my host computer( and reply is going to is MPLS line from ISP). we cannot able to get ping response and firewall block the reply to be send

In  NETASQ firewall there in no such option to apply IPS as filter base policy.

Attaching network Diagram for the same

Kindly Suggest.

Your response is highly appreciated.

Everyone's tags (2)
Hall of Fame Super Silver

ping request failure.

Hello Dipak,

>> port Fa0/1 ip connecting to Router)

they are not in the same IP subnet routing is broken, port fas0/1 should have ip address

Hope to help


New Member

ping request failure.

Sorry for creating confusion

port Fa0/1 ip connecting to Router)

Re: ping request failure.

which routes do you see on L3 switch that you have on Branch Office?

"show ip route "

New Member

Re: ping request failure.

C is directly connected, FastEthernet0/47

C is directly connected, Vlan 10

S* [1/0] via

Re: ping request failure.

Ok. thats good as per what you said earlier. I just wanted to make it sure. So SP is using static routing for VRF.

On the firewall have you allowed the subnet from outside to communitcate to inside? And Are you able to ping from to ??


Nandan Mathure

New Member

Re: ping request failure.

yes i have already allowed on firewall. i cannot able to ping and from