Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Can't ping Pix over VPN but can PC's

I can ping PC's over our remote VPN (concentrator to a remote Pix) but not the Pix that is over at the remote site. I am trying it's local IP address over the VPN.

However the PC's on the Pix's LAN can.

I can get on the ADSM using the Pix external IP, but I'd rather use the internal IP over the VPn tunnel.

Let me know what info you need.

24 REPLIES

Re: Can't ping Pix over VPN but can PC's

Hi, you should use the "management-access inside " command.

New Member

Re: Can't ping Pix over VPN but can PC's

Hi, how can I do this via the ADSM?

Re: Can't ping Pix over VPN but can PC's

New Member

Re: Can't ping Pix over VPN but can PC's

Why is it I can't log into that with my forum username and password? Do I need a high level?

Re: Can't ping Pix over VPN but can PC's

New Member

Re: Can't ping Pix over VPN but can PC's

Sorry too about this, but I can't find this managment pane to enable this option on an interface via the ADSM.

Re: Can't ping Pix over VPN but can PC's

Ok, and I really don't know about asdm.

Try to get on the console with ssh and enter the command, that must be a lot easier.

Green

Re: Can't ping Pix over VPN but can PC's

Try this...

Tools -> Command Line Interface -> Select Multiple line -> In the text box type...

config t

management-access inside

and select "Send"

New Member

Re: Can't ping Pix over VPN but can PC's

I'll try that this won't change my current access over the Internet?

Re: Can't ping Pix over VPN but can PC's

No. It will only enable management access over the vpn.

Green

Re: Can't ping Pix over VPN but can PC's

No, it should only change access when connected to the ASA via the vpn.

New Member

Re: Can't ping Pix over VPN but can PC's

The reason I can't ping it over the VPN but can on-site, could this be a rule issue?

Green

Re: Can't ping Pix over VPN but can PC's

Probably not, it is most likely that you are missing the command posted above. Did you add it?

Read here...

http://cisco.com/en/US/docs/security/asa/asa72/command/reference/m_72.html#wp1794331

New Member

Re: Can't ping Pix over VPN but can PC's

This is the error I got:

Result of the command: "conf t"

The command has been sent to the device

Result of the command: "management-access inside"

management-access inside

^

ERROR: % Invalid input detected at '^' marker.

Green

Re: Can't ping Pix over VPN but can PC's

Weird, this is what I get...

Result of the command: "config t"

The command has been sent to the device

Result of the command: "management-access inside"

The command has been sent to the device

Re: Can't ping Pix over VPN but can PC's

It could be blocked. If you already have management-access inside enabled, rules could be the cause of the problem. Otherwise it is unlikely.

Green

Re: Can't ping Pix over VPN but can PC's

Found it...

Config -> Device Administration -> Management Access -> Select inside

New Member

Re: Can't ping Pix over VPN but can PC's

Right I have selected the inside interface, but still no joy on connecting to the local IP. A remote user in that same subnet as the Pix can though.

Re: Can't ping Pix over VPN but can PC's

What PIX version do you have?

New Member

Re: Can't ping Pix over VPN but can PC's

7.1(2)

Would the fact that I don't have a service policy rule be a problem too with this?

Re: Can't ping Pix over VPN but can PC's

It should not be a problem, this is a global command.

Can you execute "show management-access" in config mode?

New Member

Re: Can't ping Pix over VPN but can PC's

I can now ping it's internal address over the VPN, but can't accesses it via the ADSM, any ideas?

management-access shows local_network

Thanks

Highlighted
Green

Re: Can't ping Pix over VPN but can PC's

you need to add

http outside

New Member

Re: Can't ping Pix over VPN but can PC's

Still no luck, I put this in:

http 192.168.9.9 255.255.255.255 VPN

VPN is our tunnel to my office

242
Views
0
Helpful
24
Replies
CreatePlease login to create content