VPN Routing Issue

[VincentLong]

Hi There,

We currently having issues connecting users using VPN to access servers at diffrent floors, there was some changes done on the devices to cisco ASA, currently all the VPN users are able to ping only servers located at 23rd floor, where by servers in 31st floor unable to ping from VPN.

But all of them using LAN can ping both servers in 31st & 23rd floor without issue, when traceroute from firewall at 23rd floor it stucks at CORE Switch, but from the firewall we are able to ping firewall located at 31st floor from the 23rd floor, but when we add a static route from the server in 31st floor to 192.168.0.254 as per in the diagram, its able to ping, with the default route to 192.168.0.2 firewall it cant. what could be the issue. Thank you.

Regards,

Vincent Long

[Zubair.Sayed_2]

Hi

Did these issues occur after you upgraded the ASA's?

What version did you upgrade to?

Thanks

Zubair

[Harish Balakrishnan · Accepted solution]

Hello Vincent

Can you give the following command on your 192.168.0.2 firewall ?

same-security-traffic permit intra-interface

regards

Harish