Добрый день, подскажите ....
Схема такая:

На Catalyst3550 на портах настроены VLAN60, VLAN70 и подключены ПЭВМ.
Catalyst3550 по транку подключен к ASA5520.

С ASA5520 ping проходит до любой ПЭВМ в различных VLAN60, VLAN70.
Не идёт ping между ПЭВМ расположенных в различных VLAN60, VLAN70.
Как заставить чтоб ping проходил?

конфиг ASA
sh run

: Saved

:

ASA Version 7.0(6)

!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
names
dns-guard
!
interface GigabitEthernet0/0
nameif OUT
security-level 0
ip address 192.168.10.1 255.255.255.0
!
interface GigabitEthernet0/1
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/1.60
vlan 60
nameif ivlan60
security-level 100
ip address 192.168.60.1 255.255.255.0
!
interface GigabitEthernet0/1.70
vlan 70
nameif ivlan70
security-level 100
ip address 192.168.70.1 255.255.255.0
!
interface GigabitEthernet0/2
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
nameif management
security-level 100
ip address 192.168.30.1 255.255.255.0
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
access-list 150 extended permit icmp any any
access-list 150 extended permit ip any any
pager lines 24
mtu OUT 1500
mtu ivlan60 1500
mtu ivlan70 1500
mtu management 1500
no failover
asdm image disk0:/asdm506.bin
no asdm history enable
arp timeout 14400
access-group 150 in interface OUT
access-group 150 out interface OUT
access-group 150 in interface ivlan60
access-group 150 out interface ivlan60
access-group 150 in interface ivlan70
access-group 150 out interface ivlan70
rip ivlan60 default version 1
rip ivlan70 default version 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
  inspect dns maximum-length 512
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect netbios
  inspect rsh
  inspect rtsp
  inspect skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect tftp
  inspect sip
  inspect xdmcp
!
service-policy global_policy global
Cryptochecksum:1da1a352ac166381ea94e8f81181822b
: end
ciscoasa#