Ping clients far end of VPN from PIX CLI

[Morrack]

Perhaps a newbie question here. Telecom guy trying to learn data

When I bring up a VPN tunnel between 2 PIX's, I can ping from a client on one side to a client on the other, and vice-versa. What I can't do, and really wish I could, is ping a client on one side from the CLI of the PIX on the other side.

Is this possible or am I dreaming in technicolor?


Peter Sherwood

Morrack Consulting

http://www.morrack.com

 

[Morrack]

Never mind, found the answer. As I hate seeing only the previous line as a follow up post to a question I'm trying to solve, here is the solution for future searchers:

ping inside <ip address on far side of tunnel>

the key is specifying the inside interface as the source of the ping.


Peter Sherwood

Morrack Consulting

http://www.morrack.com

 

[Morrack]

Except sometimes it works (even to bring up the tunnel), and sometimes it doesn't work at all, and sometimes it works but only if the tunnel has already been brought up by a ping from a client on either LAN side....

Can anyone explain that??


Peter Sherwood

Morrack Consulting

http://www.morrack.com