site-to-site VPN inside interface ping

[ohchan]

PC1 - ASA1 ---- ASA2 - PC2

PC1 IP : 100.100.100.100

ASA2 inside interface IP : 200.200.200.1

It is composed as above.

source Ping 100.100.100.100 destination 200.200.200.1 in PC1

ping failed

why fail??

[balaji.bandi]

We need to know more information and config :

also check below  steps  :

is this IP range part of encryption domain

Do you have ACL to allow ping both the side.

is the windows FW in place (if the device is Windowss based)

are you pinging from PC to PC or from ASA ?

[Rob Ingram]

@ohchan 

You will need to configure the management-access interface command in order to manage (ping, asdm or ssh) to the ASA's inside interface over a VPN tunnel.

management-access <interface-name>

Reference here:-

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/118092-configure-asa-00.html

HTH