[c-nsp] traceroute from ASA with source IP from inside interface
Nick Hilliard
nick at foobar.org
Wed Mar 16 08:42:15 EDT 2016
George Giannousopoulos wrote:
> It's been a while since I tried that, but I think you are not allowed by
> default to ping an outside host using an inside interface as the source.
>
> Each interface can successfully ping only on it's egress direction unless
> you change the rules.
last time I checked, this was a hard limitation on ASA which couldn't be
worked around by changing the FW rulesets.
Nick
More information about the cisco-nsp
mailing list