Solved

ASA to ASA site to site VPN. Cannot ping workstations, can ping printers!

Posted on 2014-11-11
3
143 Views
Last Modified: 2014-12-06
Site-A to Site-B VPN connection.

From Site-A to Site-B, I am able to ping Printers, and the ASA itself. No workstations are able to be pinged.

packet-tracer input inside icmp "Site-A" 8 0 "Site-B" detailed  , flow is denied by configured rule
ping inside "Site-B" , success 100%.

I can ping any of the printers at site b, or the ASA itself, but no workstations! Is this configuration in the one of the ASA's causing this?
0
Comment
Question by:paulrausch
3 Comments
 
LVL 10

Accepted Solution

by:
Ray earned 250 total points
Comment Utility
Because I am a simple person, I'll ask the simple question:  Are the workstations running a firewall such as windows firewall?
0
 
LVL 7

Assisted Solution

by:tolinrome
tolinrome earned 250 total points
Comment Utility
Hi paulrausch,
"flow is denied by configured rule" - it could be that the workstations are on a different ip range or subnet not in the ACL defined and the printers are and thats why they are not pingable. Please post the config if you can so we can take a look deeper into it.
0
 
LVL 2

Author Closing Comment

by:paulrausch
Comment Utility
This project was terminated by the End User. Points awarded for attempts.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now