DMZ 3750x (c3750e-universalk9-mz.122-58.SE2/c3750e-universalk9-mz.122-58.SE2.bin) I CANNOT ping the ASR WAN (ISP) default gateway my debug ip icmp DOES NOT return information on why I cannot successfully ping the ASR gateway Why does my debug not provide any information on failed ping
I can ping the WAN interface on the ASR router I can ping all of the ip addresses on the ASR router my debug ip icmp DOES return information on why I can successfully ping these ip addresses I can ping the ASA behind the DMZ switch
3750x interface connecting to ASR
interface GigabitEthernet1/0/1 description WAN ASR switchport trunk encapsulation dot1q switchport trunk native vlan 11 switchport mode trunk mls qos trust dscp spanning-tree portfast trunk end
Looks like issue with reverse route on ISP router for LAN subnet. To confirm this you can ping to ISP gateway ip 50.x.x.81 from ASR router with source of LAN interface Gig0/0/5(170.x.x.20). If ping fails, check if ISP is accepting prefix 18.104.22.168/28 or not. I see we are originating it on ASR through BGP. Since you are able to ping other ip addresses of ASR from switch, i dont this any issue on switch or with default gateway on switch.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...