Trying to open access between VLANs / networks and isn't working on firewall

I can't seem to get my firewall working the way I thought it works. I must be SERIOUSLY missing a key step in this. I comprehend how it's supposed to work, but I'm obviously doing something wrong.

Just to "see" (i.e. wide-open between networks, later will remove, add just ports needed, etc.) I have set access-list between our network called "corp" and "db" (I thought), but I can't ping, https, etc. anything. I must not be doing this correctly, OR I'm missing something.

So just trying to open up network between corp and db which are both private subnets both attached directly to the firewall, the firewall can ping either subnet, but when I do a "expert" ping and from the firewall try to ping corp FROM db (on the firewall), it doesn't ping. I also tried just from computer to computer (on those networks) and it doesn't work... no ping, no ip, no web page, nothing...

Thank you, I am going nutz with this... I thought I knew what I was doing.

- - - - - - - - -
ASA Version 7.2(3)
!
hostname fw1
domain-name ratrat.com
enable password ratratrat encrypted
names
!
interface Ethernet0/0
 nameif outside
 security-level 0
 ip address 19.1.2.162 255.255.255.240
!
interface Ethernet0/1
 nameif dmz
 security-level 50
 ip address 10.27.111.1 255.255.255.0
!
interface Ethernet0/2
 nameif inside(trunk)
 security-level 75
 no ip address
!
interface Ethernet0/2.1
 vlan 103
 nameif inside
 security-level 75
 ip address 10.17.222.1 255.255.255.0
!
interface Ethernet0/2.2
 vlan 104
 nameif db
 security-level 80
 ip address 10.23.3.1 255.255.255.0
!
interface Ethernet0/2.3
 vlan 105
 nameif backend
 security-level 85
 ip address 10.24.4.1 255.255.255.0
!
interface Ethernet0/2.4
 vlan 106
 nameif corp
 security-level 90
 ip address 10.25.5.1 255.255.255.0
!
interface Ethernet0/3
 nameif failover
 security-level 100
 no ip address
!
interface Management0/0
 nameif mgmt
 security-level 100
 ip address 10.100.50.11 255.255.255.0
!
passwd ratratratpw encrypted
ftp mode passive
dns server-group DefaultDNS
 domain-name ratrat.com
same-security-traffic permit intra-interface
access-list outside_access_in_1 remark https in from outside to sslvpn outside translated IP .167
access-list outside_access_in_1 extended permit tcp any host 19.1.2.167 eq https
access-list mgmt_access_in remark Allow inside of VPN and corp to access mgmt network
access-list mgmt_access_in extended permit tcp 10.25.5.0 255.255.255.0 10.100.50.0 255.255.255.0
access-list mgmt_access_in extended permit icmp 10.25.5.0 255.255.255.0 10.100.50.0 255.255.255.0
access-list corp_access_db extended permit icmp any any
access-list corp_access_db extended permit tcp any any
access-list db_access_corp extended permit icmp any any
access-list db_access_corp extended permit tcp any any
pager lines 24
logging asdm informational
mtu outside 1500
mtu dmz 1500
mtu inside(trunk) 1500
mtu inside 1500
mtu db 1500
mtu backend 1500
mtu corp 1500
mtu failover 1500
mtu mgmt 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-523.bin
no asdm history enable
arp timeout 14400
global (outside) 101 interface
nat (mgmt) 101 0.0.0.0 0.0.0.0
static (dmz,outside) 19.1.2.167 10.27.111.221 netmask 255.255.255.255
access-group outside_access_in_1 in interface outside
access-group db_access_corp in interface db
access-group mgmt_access_in in interface corp
access-group mgmt_access_in in interface mgmt
route outside 0.0.0.0 0.0.0.0 209.245.112.161 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
http server enable
http 10.100.50.0 255.255.255.0 mgmt
http 10.25.5.0 255.255.255.0 inside(trunk)
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 10.100.50.100-10.100.50.120 mgmt
dhcpd dns 206.251.228.22 206.251.228.24 interface mgmt
dhcpd domain ratrat.com interface mgmt
dhcpd enable mgmt
!
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
!
service-policy global_policy global
username rat_admin password dratratrat encrypted privilege 15
prompt hostname context
Cryptochecksum:fratratrat75f6
: end
- - - - - - - -
Start Free Trial