Ping remote encryption domain destination using outside interface

[netsupsalmat]

Hi,

I have a VPN setup with our remote office and I want to create SLA monitor from my ASA FW to an IP Address inside remote encryption domain so that I can use this SLA to track routes.

Is it possible to ping IP Address at remote LAN using outside interface of ASA-Firewall.

I get message " %ASA-2-106016: Deny IP spoof from (outside IP Address) to 10.10.10.1 on interface outside

[Pawan Raut]

Ping using source outside IP address is no possible as you cant use outside interface IP in encryption domain. You can use inside IP address as source but make sure that your inside interface IP or subnet should be present in encryption domain acl.

[netsupsalmat]

I have Local encryption domain as any.

I get this message "Deny IP Spoof from (Inside IP) to 10.10.10.1 on interface inside"