ASA Tunnel up and passing traffic but Can't ping inside interface

[dbuckley77]

We have an ipsec vpn tunnel between a Cisco ASA and PA firewall.  The tunnel is fully functional as far as passing traffic in both directiosn but from the PA side I cannot ping the inside interface (default gateway for local networks) on the ASA and we need to be able to do so.  Below is the config:

config

[JP Miranda Z]

Hi dbuckley77,

In order to get response from the interface at the other end of the tunnel (ASA) you need to add the following command:

management-access inside

Hope this info helps!!

Rate if helps you!! 

-JP- 

[Mohammed al Baqari]

Hi,

If you are trying to do this from remote site over the tunnel, it can't
work. This is a security feature of ASA.

***** please remember to rate useful posts