Routing Question

[goosed]

Hi all, this question has to do with an ASA but I was still hoping to get some feedback on it.

We have two ASA's, one for our local firewall and the other in our DMZ. What I would like to do is gain shell access to the DMZ ASA.

ASA1: inside - 10.10.10.1/24
DMZ - 172.16.5.1/24

ASA2: inside - 172.16.5.2/24

If I'm on ASA1, I can ping ASA2 fine. But from my workstation (in the 10.10.10.1 subnet) I cannot access ASA2.

How can I accomplish this? Any help is appreciated, thanks.

 

[burtsbees]

ICMP conduits---post in the ASA forum please. There are 3 types of ICMP you must allow through---you cannot ping past a 0 security interface without them.

Burt

 

[goosed]

Thanks burtsbees. It ended up being a routing issue. I figured it out after long sessions of scratching my head.