Limitations and Precautions for Ping Proxy

Hardware Requirements

The ping proxy is supported by all models.

License Requirements

The Ping Proxy function is not license-controlled.

Limitations

In a cross-virtual system scenario, as shown in Figure1, you can configure the ping proxy function in the virtual system (vsysa) to which the Client belongs or the virtual system (vsysb) to which the Server belongs.

• If you configure the ping proxy function in vsysa, the FW sends ICMP probe packets to the Server end, and the IP address of the Virtual-if interface of vsysa serves as the source IP address of the ICMP packets. In this case, you shall also configure a route to vsysa on the Server so that the response packets of the Server can reach the ping proxy server vsysa.
• If you configure the ping proxy function in vsysb, the FW sends ICMP probe packets to the Server end, and the IP address of the physical interface through which vsysb connects to the Server serves as the source IP address of the ICMP packets. In this case, the Server is reachable to vsysb, and you no longer need to configure a route.

Figure 1 Schematic diagram of the ping proxy function