Ping connection between users on the same Anyconnect subnet

[tommykang]

Hello,

I set up Anyconnect VPN on 5525. The Anyconnect users can ping to any internal networks but, he cannot ping the user on the same subnet with Anyconnect.

The subnet for Anyconnet is 10.0.0.0/24, the subnet for internal is 192.168.0.0/24. 

10.0.0.4 is reachable to 192.168.0.10. and also 10.0.0.5 is reachable to 192.168.0.10.

But, 10.0.0.4 cannot reach 10.0.0.5. 10.0.0.5 cannot reach 10.0.0.4 either.

When I checked the log, I could not see any blocked logs.

I was only able to see the log like below.

"Teardown ICMP connection fro faddr 10.0.0.5/1(LOCAL\000) gaddr 10.0.0.4/1 laddr 10.0.0.4/1 type 8 code 0"  

Is there anyway to ping between users on the same Anyconnt subnet?

[Marius Gunnerud]

enable same-security-traffic permit intra-interface as well as configuring a twice NAT / NAT exempt for the subnet.

Also, make sure that windows firewall is either turned off or allows ICMP on the PCs you are pinging between.