cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1429
Views
30
Helpful
2
Replies

Enable ICMP (Ping) Over Site to Site VPN (ASA5510 to FP ASA1010

Amoret
Level 1
Level 1

I have a Site to Site VPN setup from an ASA 5510 (ASA Code) to an ASA 1010 (Without FMC); we are using the FDM GUI to manage this. The Site to Site VPN is working fine, but we cannot ping from behind the ASA5510 to the inside interface of the ASA 1010. Does anyone know how to enable ICMP to the inside interface over the Site to Site VPN?

 

ASA5510 192.168.26.1 

ASA1010 10.0.64.1 

 

From behind the ASA5510 we can not ping 10.0.64.1 but we can ping other devices on the 10.0.64.X network. 

From behind the ASA1010 we can ping anything on the 192.168.24.0/22 network. 

2 Replies 2

@Amoret on the ASA previously you had to enable the command "management-access <inside interface name>" to ping/ssh/http over a VPN tunnel - that command doesn't exist on the FTD/FDM natively, but you could try deploying via FlexConfig.

I created a FlexConfig Template - "management-access inside" and Negate Template "no management-access inside" and now I can ping the inside interface, that's 50% of what I am trying to do but I can not access the FDM GUI over the Site-To-Site VPN? 

 

 

 

Review Cisco Networking for a $25 gift card