Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN ping / Communication host to host

Hello Guys,

ASA 5510

Ver 8.2(5)

I have been looking all over the place for the answer of how to allow clients on an IPSEC VPN to ping from host to host. I know I have seen it in the config someplace but I just can find it now.

Any help is greatly appreciated.

Murray                 

  • VPN
Everyone's tags (4)
4 REPLIES

VPN ping / Communication host to host

"IPSEC VPN to ping from host to host."

Please explain more, pinging host to host, between Remote access vpn-clients (RA) client or between RA client and Remote-VPN Site ?

thanks

New Member

VPN ping / Communication host to host

Hi Rizwan,

What I am trying to say is, how can peers on remote access VPN communicate with each other.

Murray

VPN ping / Communication host to host

Ok, let me recap what you have said i.e you want to have remote-access vpn-client to communicate with each other.

Lets assume, you have two vpn-pools as shown below.

ip local pool RA_POOL-ONE 10.10.1.1-10.10.1.254 mask 255.255.255.0

ip local pool RA_POOL-TWO 10.10.2.1-10.10.2.254 mask 255.255.255.0

Now create an ACL as shown below.

access-list outside-nonat extended permit ip 10.10.1.0 255.255.255.0 10.10.1.0 255.255.255.0

access-list outside-nonat extended permit ip 10.10.1.0 255.255.255.0 10.10.2.0 255.255.255.0

access-list outside-nonat extended permit ip 10.10.2.0 255.255.255.0 10.10.2.0 255.255.255.0

access-list outside-nonat extended permit ip 10.10.2.0 255.255.255.0 10.10.1.0 255.255.255.0

Now apply the ACL on outside interface.

nat (outside) 0 access-list outside-nonat

Now this will give remote vpn-clients communication between them.

Hope that answers your question.

thanks

Rizwan Rafeek

VPN ping / Communication host to host

Please rate helful post.

thanks

584
Views
0
Helpful
4
Replies
This widget could not be displayed.