Two Cisco ASA 5500 VPN but only one pings

[Carlos Gomez]

Hi everyone!

I have an issue that I can't figure out. I have two cisco asa firewalls connected through a VPN, one is 5505 and the other is a 5510. From the 5505 I can ping the internal interface of the 5510, but not vice versa. Would that be a NAT issue? I used the ASDM to configure the VPN tunnels with the wizard for IPsec site to site.

Any suggestions?

Thank you

[John Blakley]

Make sure the management interface is configured for inside. Otherwise, it's going to be hard to say what the issue is without seeing the config.

HTH,
John

*** Please rate all useful posts ***

[shillings]

Similar to John's post, is the 5510 configured with the management-access command, but the 5505 not? This is just a guess btw.

[Carlos Gomez]

Ok, I will make sure on the 5505 that the manage interface is the inside interface. The 5510 is configured for other VPNs and it is working well. I made the VPN tunnel and it is connected, I added the NAT Exemtions on both firewalls, but like I said, can ping the inside interface of 5510 from a computer behind the 5505, but I can't ping back from the 5510 or any computer behind it. I will post the config for the 5505 later on. Thanks