Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
264
Views
0
Helpful
1
Replies

ASA5510 v7.0.7 ignoring ACL changes!

davegibelli
Level 1
Level 1

‎01-26-2009 06:42 AM - edited ‎03-11-2019 07:41 AM

I have made changes to nat and IPSec ACL's but the new lines in the ACL's are being ignored!

This results in packets that should be sent encrypted going out unencrypted even though the packets match the ACL.

On a different interface new rules for nat are not taking effect, thus packets are leaving the ASA without being natted!

Active/Failover in operation.

Labels:
0 Helpful
1 Reply 1

Ivan Martinon
Level 7
Level 7

‎01-26-2009 08:22 AM

Did you change these Crypto ACl's on the fly? Meaning did you remove crypto map, change settings and reapply the crypto map? If not then you need to bounce the tunnel to make this new changes occur. Were these changes applied on the remote end as well?

0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking for a $25 gift card