The tunnel is UP but cannot ping from end to end

[kevinshkong11]

Hi ALL,

The VPN tunnel is UP and established but still cannot ping from end to end. When using packet tracer in ASDM, it said blocked by ACL. ACL is opened ANY to ANY.

Attached are 2 sites configuration

Kindly advise

Kevin

[Rob Ingram]

Hi,

On the JR ASA add the command inspect icmp under the global policy, E.g:

policy-map global_policy
 class inspection_default

 inspect icmp

This is already enabled on the other ASA. If that doesn't work can you upload the output of the packet trace.