Hello everyone,
Today I will share with you how to deal with connectivity issue.
[Issue]
Can’t ping the Agile server from the core switch with the source IP 10.7.1.4 that belongs to VLAN 701.
Agile IP 10.7.4.21 and the gateway is 10.7.4.254.
Core IP is 10.7.1.4 and the gateway is 10.4.7.254.
[Progress]
1. We checked to permit the policy any-any and tried to ping from the core switch with the source IP 10.7.1.4, but not working.
2. When we ping from the core switch with the no source IP 10.7.1.4 to the Agile controller 10.7.4.21, the ping is successful . Through VLANIF 704.
3. When we ping from the core switch with the source IP 10.7.1.4 to the Agile controller 10.7.4.21, the ping is not successful, despite the 2 VLANIFs 704 and 701 being directly connected.
4. When we ping from the core switch the with source IP 10.7.1.4 to the firewall 10.7.4.2, the ping is successful. So why can’t we reach Agile 10.7.4.21?
5. Tried to ping with the source IP 10.7.4.2 from the firewall to the Agile server 10.7.4.21 and the ping is successful.
6. We tried to ping the core switch and the firewall from the Agile controller and the ping was successful from the Agile side.
7. So when we ping step by step from the core to the firewall, then from firewall to Agile, the ping is successful but from the core directly to Agile with source IP 10.7.1.4 it doesn't; so, we suspected the statefull inspection on the firewall for the ICMP.
8. We enabled the following command on the firewall to disable the stateful inspection for the ICMP: [FW] undo firewall session link-state check icmp
And the ping works successfully from the core with the source IP 10.7.1.4.
9. We disabled the any-any permit test policy and tested the ping again but it doesn't work.
10. We created the security policy to permit only 10.7.4.0/24 and 10.7.1.0/24 on both directions and tested again; then, the ping works.
[Solution]
1. Create the security policy to permit the communication between the two subnets on both sides.
2. Disable the stateful inspection for the ICMP.
That is all I want to share with you. Thank you!
