Solved

2nd vlan connected to inside interface of Cisco ASA not connecting over Site to Site tunnel

Posted on 2010-09-14
5
530 Views
Last Modified: 2012-05-10
Hello All,

I have a Cisco ASA that has two vlans connected to it on the inside through trunking. I am trying to get both to route over the Site to Site VPN tunnel. So far the first vlan called Baroda can connect fine over the tunnel but the second only pings across but does not route TCP or UDP traffic. I am trying to figure out why. Any suggestions.  
ASA-with-2-vlans-connected.txt
0
Comment
Question by:greenbeanx81
  • 3
5 Comments
 
LVL 5

Expert Comment

by:Ioannis_Avgeros
ID: 33677739
Check if you're missing any route inside command for that specific vlan.
0
 

Author Comment

by:greenbeanx81
ID: 33677818
Would I need route inside for trunking interfaces? The interfaces are on the same network?
0
 
LVL 11

Expert Comment

by:crouthamela
ID: 33678061
The config looks good, maybe it is an ACL issue at Acacia?
0
 
LVL 5

Expert Comment

by:Ioannis_Avgeros
ID: 33678090
You could try to remove any deny ACLs temporarily and test it.
0
 
LVL 5

Accepted Solution

by:
Ioannis_Avgeros earned 500 total points
ID: 33678109
Check this out: It seems similar even though its not about Site-to-Site and one of your vlans works and its just the other one that doesnt. Perhaps if you shared part of your config something might come up.

https://supportforums.cisco.com/message/3014664


22.  Feb 23, 2010 6:54 AM  in response to: Edwin Kok
Re: ASA 5505 Trunk / intervlan routing issue

Just realized that you have an inbound ACL on the inside interface. Can you add the following and try again (clear logging buffer first)? If it is not working, check the log to see anything is on it.

 

access-list acl_in extended permit icmp any any

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco Trunk question 4 30
Cisco  3750E switches 1 28
How to append an output to existing file with DOS and IPerf 2 30
Cisco RV042G 4 6
If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question