cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
476
Views
0
Helpful
1
Replies

AnyConnect clients cannot ping inside devices

mark.watson
Level 1
Level 1

So, I'm an IP Phone guy and the only reason I am installing an ASA is ultimately to be a phone proxy.  With CUCM 9 I need to set up and AnyConnect VPN on the ASA which believe it or not I have done and I can connect.  What I cannot do is ping anything on the inside network.

 

I have an address pool set in the 172.20.1.0 range and my client does get an address in that range so I am pretty sure that I have missed something in the routing area.

 

I realize that my description is limited as is my knowledge of what I am trying to do so I apologize but if anyone has any idea where I may have gone wrong I would appreciate it.

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

Does your core switch / router know to send traffic to 172.20.1.0 back to the ASA?

Often we need to setup a static route on the core (redistributing into whatever dynamic routing process (like OSPF or EIGRP) it has for the rest of the network) so that happens. That's especially true when the ASA isn't the default gateway out of the LAN.