Manage ASA from remote site through VTI

[jshdcooper]

Hi All,

We have a site where we recently replaced an ISR with a 5506. I wanted to use this as an opportunity to test using VTI's on an ASA. I got the tunnel up fine and can pass traffic between the sites, but I'm unable to hit the inside interface of the router from the remote site. I'd like to be able to manage the ASA through the VPN.

Logging shows when trying to ping from the remote site:

        Failed to locate egress interface for ICMP from Tunnel:192.168.0.9/1 to 192.168.12.1/0

Has anyone ran into this with VTI's on an ASA yet?

Thanks,

Josh

[Francesco Molino]

Hi

Can you check if command management-access is configured otherwise connect on your asa through ssh and apply the following config:
management-access inside --> if your inside interface has another name replace it here.