topic Re: Route-map and NAT order in Network Security

Route-map and NAT order

selkerleadtn — Fri, 21 Feb 2020 09:05:35 GMT

I am attempting to provision a Cisco 851 with 12.4(4)T3 using SDM. I do alright until I add and Easy VPN Server.

At that time when the route-maps are added and the tool generates the route-maps associated with the dynamic and static NAT's in place things go south.

The network is small with one MS Server that runs File & Print along with Exchange. There is also a machine with SFTP server loaded on it.

I am hoping someone can assist me with the ACL's I have added part of the configuration

TIA

Re: Route-map and NAT order

m-haddad — Fri, 04 Aug 2006 21:47:55 GMT

Many errors in the config. (Mainly in ACLs)

Below you can find a corrected one.

Let me know if this works,

Re: Route-map and NAT order

selkerleadtn — Fri, 04 Aug 2006 22:11:53 GMT

Thanks I will I will have some questions after I test this

Most of this was generated with the SDM tool but it is obvious I made some wrong entries TIA

Re: Route-map and NAT order

m-haddad — Sat, 05 Aug 2006 04:32:50 GMT

Usually I don't use any graphical interface for configuring and even troubleshooting Cisco. ASDM is a good tool but it does't really let you what is going in the background of the config. However, do command line config helps you really understand what is going on and also to do some enhancements such as route summarization etc...

Re: Route-map and NAT order

selkerleadtn — Sat, 05 Aug 2006 11:17:19 GMT

I used to work for a company that had 28 CCIE's

All of them CLI users.....I understand.

Re: Route-map and NAT order

selkerleadtn — Sat, 05 Aug 2006 16:28:23 GMT

I put the router in place and observed the following

sent email via gmail recieved email - success

Did not test SFTP server

Was not able to connect via the VPN client

Had to pull router and put PIX 501 back in place

Re: Route-map and NAT order

m-haddad — Sat, 05 Aug 2006 23:53:36 GMT

What error did u get on the VPN Client? Are you sure you always get the same IP and subnet on your Dialer?

Regards,

Re: Route-map and NAT order

selkerleadtn — Sun, 06 Aug 2006 00:31:33 GMT

Mohamad

The number was 412 I do not remember the exact wording sorry something like connection cancelled/closed by client

The IP is a static handed out by AT&T/SBC....

Re: Route-map and NAT order

m-haddad — Sun, 06 Aug 2006 06:07:47 GMT

Hello,

When I sent you the config the KEY under the vpn client configuration was empty. I don't know if you uploaded the config directly without setting the KEY on the config.

Make sure in the config and on the vpn client the group key is correct!

Let me know the progress,

Regards,

Re: Route-map and NAT order

selkerleadtn — Mon, 07 Aug 2006 15:30:10 GMT

Mohamad

I will try the configuration this evening Monday EDT

Thomas

Re: Route-map and NAT order

selkerleadtn — Mon, 07 Aug 2006 23:23:49 GMT

Mohamad

The problem was with trying to use RADIUS The config was missing some config lines I changed it to authenticate locally and was able to establish connection

Thank you for assistance

Re: Route-map and NAT order

m-haddad — Tue, 08 Aug 2006 00:40:45 GMT

Hello Thomas,

Glad to know that things are working as you wish.

Regards,