02-28-2022 12:32 PM
I have a Site to Site VPN setup from an ASA 5510 (ASA Code) to an ASA 1010 (Without FMC); we are using the FDM GUI to manage this. The Site to Site VPN is working fine, but we cannot ping from behind the ASA5510 to the inside interface of the ASA 1010. Does anyone know how to enable ICMP to the inside interface over the Site to Site VPN?
ASA5510 192.168.26.1
ASA1010 10.0.64.1
From behind the ASA5510 we can not ping 10.0.64.1 but we can ping other devices on the 10.0.64.X network.
From behind the ASA1010 we can ping anything on the 192.168.24.0/22 network.
02-28-2022 12:52 PM
@Amoret on the ASA previously you had to enable the command "management-access <inside interface name>" to ping/ssh/http over a VPN tunnel - that command doesn't exist on the FTD/FDM natively, but you could try deploying via FlexConfig.
02-28-2022 01:01 PM
I created a FlexConfig Template - "management-access inside" and Negate Template "no management-access inside" and now I can ping the inside interface, that's 50% of what I am trying to do but I can not access the FDM GUI over the Site-To-Site VPN?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide