10-27-2016 05:27 PM - edited 03-12-2019 01:27 AM
Hi,
I have a VPN setup with our remote office and I want to create SLA monitor from my ASA FW to an IP Address inside remote encryption domain so that I can use this SLA to track routes.
Is it possible to ping IP Address at remote LAN using outside interface of ASA-Firewall.
I get message " %ASA-2-106016: Deny IP spoof from (outside IP Address) to 10.10.10.1 on interface outside
10-27-2016 09:03 PM
Ping using source outside IP address is no possible as you cant use outside interface IP in encryption domain. You can use inside IP address as source but make sure that your inside interface IP or subnet should be present in encryption domain acl.
10-27-2016 10:11 PM
I have Local encryption domain as any.
I get this message "Deny IP Spoof from (Inside IP) to 10.10.10.1 on interface inside"
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide