Ping through MX Interface to IP on different Interface

[Grant3779]

Hi All,

On the ASA you are unable to ping an Interface IP if the icmp traffic comes in via another interface. This is by "design"

Is this also a design of the Meraki MX appliances? I haven't managed to test this yet.

I'm "hoping" I can send a ping to the MX Internet / WAN address but the source of the ICMP would be from a LAN device behind another interface on the MX.

(Correct routing would all be in place).

There is a specific reason I am looking for this ability 🙂

Thanks

[CptnCrnch · Accepted solution]

MX is not using ASA code for firewalling.

Just tested this: in case routing works and policies don't kick in, you're free to ping another MX interface than the one you're behind from a Layer 3 perspective.

[Grant3779]

Thanks for testing this both. Means i can setup an IPSLA LAN side on my Cisco kit for this.

[jdsilva]

---

@Grant3779 wrote:

I'm "hoping" I can send a ping to the MX Internet / WAN address but the source of the ICMP would be from a LAN device behind another interface on the MX.

---

Yes, that works.