• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 542
  • Last Modified:

2nd vlan connected to inside interface of Cisco ASA not connecting over Site to Site tunnel

Hello All,

I have a Cisco ASA that has two vlans connected to it on the inside through trunking. I am trying to get both to route over the Site to Site VPN tunnel. So far the first vlan called Baroda can connect fine over the tunnel but the second only pings across but does not route TCP or UDP traffic. I am trying to figure out why. Any suggestions.  
ASA-with-2-vlans-connected.txt
0
greenbeanx81
Asked:
greenbeanx81
  • 3
1 Solution
 
Ioannis_AvgerosCommented:
Check if you're missing any route inside command for that specific vlan.
0
 
greenbeanx81Author Commented:
Would I need route inside for trunking interfaces? The interfaces are on the same network?
0
 
crouthamelaCommented:
The config looks good, maybe it is an ACL issue at Acacia?
0
 
Ioannis_AvgerosCommented:
You could try to remove any deny ACLs temporarily and test it.
0
 
Ioannis_AvgerosCommented:
Check this out: It seems similar even though its not about Site-to-Site and one of your vlans works and its just the other one that doesnt. Perhaps if you shared part of your config something might come up.

https://supportforums.cisco.com/message/3014664


22.  Feb 23, 2010 6:54 AM  in response to: Edwin Kok
Re: ASA 5505 Trunk / intervlan routing issue

Just realized that you have an inbound ACL on the inside interface. Can you add the following and try again (clear logging buffer first)? If it is not working, check the log to see anything is on it.

 

access-list acl_in extended permit icmp any any

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now