ASA 5540 Ping inside interface from another interface

[matias.pandullo]

Hi everyone,

I'm having some issues with my ASAs. I've two remote sites, connected through MPLS.

In site 1, I've an ASA 5540 with 2 interfaces connected. One is the internal, connected to a cisco 3560. The other is connected to ISP's router, which connects to MPLS cloud.

In site 2, I've the exact same configuration.

I'm trying to ping from one host located at site 2, behind site 2's ASA internal interface, to the internal interface IP address of ASA located at site 1.

Is there anyway to do that?

Thanks in advance!

[Julio Carvajal · Accepted solution]

Hello,

No, that's an ASA restriction.

That's the far-end interface rule that says you cannot ping an interface that is not directly connected to you unless via a VPN using the managment-access command.

Regards,

Jcarvaja

jcarvaja@inetworks.cr