cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
659
Views
20
Helpful
6
Replies

local hosts behind ASA 5505 cannot ping remote VPN clients

Gideon Chong
Level 1
Level 1

Hi everyone,

We currently have a ASA 5505 8.3 configured for RAVPN, this works, VPN clients are able to access local resources. But if for example a ping is initialized from an inside host that is connect to a particular SVI on the ASA 5505, it cannot ping the VPN client. I have already enable ICMP inspection on the ASA.

Am I still missing something to enable local host to ping VPN clients?

6 Replies 6

What subnet are the VPN users on? what subnet are the local LAN users on that are trying to ping the VPN users?

is there a NAT exempt that includes these subnets?

If you are uncertain, please post a full running configuration (remove any public IPs and passwords).

If these are windows machines that you are trying to ping then make sure that the windows firewall is either turn off or allows ICMP packets, otherwise you will not be able to ping these machines.

--

Please rate all helpful posts

--
Please remember to select a correct answer and rate helpful posts

Please reply with the configuration and a detailed example of what you are talking about

Value our effort and rate the assistance!

Do you still require assistance with this ticket?

--

Please rate all helpful posts

--
Please remember to select a correct answer and rate helpful posts

Sorry guys,

Thank you for replying on this ticket. Problem is solved. This ticket can be closed.

Please rate the assistance and rate our assistance.

Value our effort and rate the assistance!

Help is for free then we need you to rate the assistance.

Value our effort and rate the assistance!
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: