local hosts behind ASA 5505 cannot ping remote VPN clients

[Gideon Chong]

Hi everyone,

We currently have a ASA 5505 8.3 configured for RAVPN, this works, VPN clients are able to access local resources. But if for example a ping is initialized from an inside host that is connect to a particular SVI on the ASA 5505, it cannot ping the VPN client. I have already enable ICMP inspection on the ASA.

Am I still missing something to enable local host to ping VPN clients?

[Marius Gunnerud]

What subnet are the VPN users on? what subnet are the local LAN users on that are trying to ping the VPN users?

is there a NAT exempt that includes these subnets?

If you are uncertain, please post a full running configuration (remove any public IPs and passwords).

If these are windows machines that you are trying to ping then make sure that the windows firewall is either turn off or allows ICMP packets, otherwise you will not be able to ping these machines.

--

Please rate all helpful posts

[jumora]

Please reply with the configuration and a detailed example of what you are talking about

[Marius Gunnerud]

Do you still require assistance with this ticket?

--

Please rate all helpful posts

[Gideon Chong]

Sorry guys,

Thank you for replying on this ticket. Problem is solved. This ticket can be closed.

[jumora]

Please rate the assistance and rate our assistance.

[jumora]

Help is for free then we need you to rate the assistance.