I am trying to set up inter-VLAN routing on my ASA 5505. I have configured the 2 NAT policies and ran the same-security-traffic permit inter-interface command, since both networks are security level 100. Am I missing anything else here? When I ping an "inside" address from the "phones" VLAN I do not get a reply, the same is true for reversing that test. I have tried with the "no nat-control" command as well, to no avail.
I have some VPN SA's coming into this and I don't want to break those in the process.
Here is a snip of my running config:
switchport trunk allowed vlan 1,200
switchport trunk native vlan 1
switchport mode trunk
ip address 192.168.1.1 255.255.255.0
ip address 10.0.10.1 255.255.255.0
access-list nonat-inside extended permit ip any 192.168.0.0 255.255.0.0
nat (inside) 0 access-list nonat-inside
nat (inside) 1 192.168.1.0 255.255.255.0
nat (phones) 1 0.0.0.0 0.0.0.0
static (inside,phones) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
static (phones,inside) 10.0.10.0 10.0.10.0 netmask 255.255.255.0
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface