# ASA Management VLAN

**URL:** <https://forum.networklessons.com/t/asa-management-vlan/13842>\
**Category:** Security\
**Created:** [March 13, 2021, 2:15am UTC](https://forum.networklessons.com/t/asa-management-vlan/13842 "2021-03-13T02:15:58Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\
**Post date:** [March 19, 2021, 8:46am UTC](https://forum.networklessons.com/t/asa-management-vlan/13842/4 "2021-03-19T08:46:23Z")

</div>

Hello Irfan

If you have configured the ASA with subinterfaces on the interface connected to the switch, then of course, as you have confirmed, you should be able to ping the IP of the subinterface on the same VLAN as the device you are pinging from.

Now for traffic to be routed from one interface to another on an ASA (whether physical interfaces or subinterfaces), it takes into account the security level of these interfaces. I am assuming that each subinterface has the same security level. If that is the case, the default behavior of an ASA is to disallow traffic between such interfaces unless an ACL is present that allows it.

The problem may be there, but it also may be due to a default feature of the ASA that is configured not to respond to ICMP packets. In order to determine the specific problem, take a look at this post, as it will help you to troubleshoot the issue, and identify the problem. Once you identify it you can then examine ways to resolve it.

> [@Cisco ASA Security Levels](https://forum.networklessons.com/t/cisco-asa-security-levels/812/37):
>
> Hello Ayong At first glance, there doesn’t seem to be anything wrong with your configs. I’m not sure what you mean when you say that you can only ping “peer routers”. I assume you mean you can ping from the ASA to each individual router? If you are unable to ping, then there may be something else configured in the ASA that is blocking this. I believe the easiest way to find it is to use the packet tracer feature of the ASA. This will tell you how and why a particular packet is dropped. Yo…

Let us know of any results you may have…

I hope this has been helpful!

Laz

---

_[View the full topic](https://forum.networklessons.com/t/asa-management-vlan/13842)._
