VPN concentrator public interface connected to the internet; private interface connected to the firewall dmz. The vpn clients get an ip address from the pool which is on the same subnet as the private interface.
VPN clients receive public IP. The internal network is private IP and I have no nat configured for internal network to the DMZ. VPN clients do not have any problem accessing anything. But users on the inside cannot ping the VPN client addresses. The firewall is permitting ICMP. It seems like the concentrator is blocking it. The tunnel default gateway is the DMZ interface of the firewall. The def. gateway is the external router.
Does anyone know why I am not able to ping the client IP addresses from inside?
from the concentrator itself you should be able to ping the client ip address picked up from your DMZ dhcp pool. Login to concentrator>administration>ping and try one of the clients DMZ addresses, if you cannot ping clients from concentrator it is quite posible the clients have firewall turned on in their machines.
have a client checked their firewall settings from their windows machine, if this is the case try ping from your inside net after clients turn off firewalling.
 for troubleshooting you may also plug in a labtop in DMZ switch give it a static ip and try ping the client from DMZ subnet, this way you can truly rule out firewall.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...