Can't ping Pix over VPN but can PC's

[whiteford]

I can ping PC's over our remote VPN (concentrator to a remote Pix) but not the Pix that is over at the remote site. I am trying it's local IP address over the VPN.

However the PC's on the Pix's LAN can.

I can get on the ADSM using the Pix external IP, but I'd rather use the internal IP over the VPn tunnel.

Let me know what info you need.

[acomiskey]

Weird, this is what I get...

Result of the command: "config t"

The command has been sent to the device

Result of the command: "management-access inside"

The command has been sent to the device

[mattiaseriksson]

It could be blocked. If you already have management-access inside enabled, rules could be the cause of the problem. Otherwise it is unlikely.

[acomiskey]

Found it...

Config -> Device Administration -> Management Access -> Select inside

[whiteford]

Right I have selected the inside interface, but still no joy on connecting to the local IP. A remote user in that same subnet as the Pix can though.

[mattiaseriksson]

What PIX version do you have?

[whiteford]

7.1(2)

Would the fact that I don't have a service policy rule be a problem too with this?

[mattiaseriksson]

It should not be a problem, this is a global command.

Can you execute "show management-access" in config mode?

[whiteford]

I can now ping it's internal address over the VPN, but can't accesses it via the ADSM, any ideas?

management-access shows local_network

Thanks

[acomiskey]

you need to add

http outside

[whiteford]

Still no luck, I put this in:

http 192.168.9.9 255.255.255.255 VPN

VPN is our tunnel to my office