Hi,
I'm trying to set up a site to site vpn.
Site A (local): 192.168.2.0/24, external IP 81.14.x.x. (CISCO ASA 5512)
Site B (remote): 192.168.5.0/24, dynamic external IP
IPsec Tunnel comes up nicely, data is transferred both ways.
I can't ping all of my servers from the remote site tho. Pinging some servers just flawlessly works, tracert shows [IP of ROUTER] - [SERVER]. Pings to several LAN servers ping out - I can ping them fine from the inside.
I assigned a connection profile to the site to site connection which I succesfully use for my anyconnect clients. It is working fine there, everything is pingable.
- If I do a packet trace from 192.168.2.x on the INSIDE interface 192.168.5.x everything is allowed.
- If I do a packet trace from the OUTSIDE interface from 192.168.5.x to 192.168.2.x EVERYTHING is dropped (ipsec-tunnel-flow Action DROP). The strange thing is, I can ping 192.168.2.1 from 192.168.5.29 directly - but pinging 192.168.2.201 times out. It works from the inside tho.
