topic Re: Firewall won't reply back ICMP Request in General Topics

Firewall won't reply back ICMP Request

vtlikinio — Sun, 10 May 2020 02:23:17 GMT

Hello

We have trouble on the firewall side that won't reply back to a certain ICMP request. Here is a TCP dump on the packet.

TCP DUMP

We can see the arp also of a certain IP.

Here is the ping coming from the firewall.

Re: Firewall won't reply back ICMP Request

PhoneBoy — Sun, 10 May 2020 23:22:14 GMT

Please explain what all the IPs are in this output and how they relate to the two gateways.
Continual ARP who-is packets suggest you're pinging the wrong IP on possibly the wrong interface or it's a configuration issue of some sort.

Re: Firewall won't reply back ICMP Request

vtlikinio — Sun, 10 May 2020 23:26:07 GMT

Those IPs are within the subnet of the one assigned in the interface on both cluster firewall.

Re: Firewall won't reply back ICMP Request

PhoneBoy — Sun, 10 May 2020 23:35:58 GMT

I am going to assume that 192.168.30.50 is NOT associated with the firewalls in any way (i.e. it's just a host on that subnet).
If that is INCORRECT please explain precisely how this IP relates.

The host with that IP address is failing to respond to a request for its MAC address.
That means the gateway cannot send traffic to that host irrespective of any policy configuration.
This points to a configuration issue (either the host in question, the switch, a cabling issue, or something else).

Re: Firewall won't reply back ICMP Request

Maarten_Sjouw — Mon, 11 May 2020 05:13:06 GMT

Are you sure the ping is allowed in the rulebase? This is not by default and needs to be allowed specifically.