Access Server

[azizk220]

hello all,

i have two sites and both sites are use public IP and connect these two sites through site-to-site VPN,
i have a Server which are located in A site i want to access this Server from Site-B ASA.
how can ping the server IP from Site-B ASA

[MHM Cisco World]

You need to add sunbet of sever under acl of s2s vpn.

Also you may need no-NAT

[azizk220]

Hi,

thanks for replay,

Route on CoreSWitch Site-A

ip route 192.168.151.253 255.255.255.255 172.20.0.1

192.168.151.253 is the server ip

172.20.0.1 is the GRE Tunnel IP

Route on remote-CoreSW Site-B

ip route 192.168.151.0 255.255.255.0 172.20.0.2

Remote Site ASA route

route inside 192.168.151.0 255.255.255.0 172.21.1.2 1

172.21.1.2 remote site inside ip

nat (inside,outside) source static local local destination static remote remote no-proxy-arp route-lookup
nat (any,outside) source dynamic ALL_OBJECTS interface

[MHM Cisco World]

Asa not support gre

You run one side vti and other side gre that why it not work'

You need to change mode of tunnel in coreSW to be tunnel mode ipsec ipv4.

[azizk220]

thanks fro helpe

please see the map i have server which located in local site i want to ping this server from remote site ASA

i can ping this server from NOC Core switch but i cant ping this server from NOC ASA

RemoteCoreSw#ping 192.168.151.253
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.151.253, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
RemoteCoreSw#

RemoteGate# ping 192.168.151.253
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.151.253, timeout is 2 seconds:
?????
Success rate is 0 percent (0/5)
RemoteGate

[Flavio Miranda]

Hello

 If you have a site to site vpn working, you should ping. If not, you may setup proper gateway on servers and maybe allow the Server subnet on the vpn túnel.

[azizk220]

thanks

VPN working i can ping Server ip from remote CoreSwitch through GRE Tunnel but i can't ping Server from remote site ASA

RemoteCoreSw#ping 192.168.151.253
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.151.253, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
RemoteCoreSw#

RemoteGate# ping 192.168.151.253
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.151.253, timeout is 2 seconds:
?????
Success rate is 0 percent (0/5)
RemoteGate