Hi Everyone,Is it good practice to config VPN failover config on client rather then on VPN gateway itself?Are there any advantages or disadvantes of this?RegardsMAhesh
a company has at&t as the primary. and they want the cradlepoint as the failover. but the cradlepoint has no static ip. the company realizes they will only beable to surf the web if the failover cradlepoint is active. so once i have the c...
In a pre-8.3 ASA, is it possible for both regular dynamic NAT and policy dynamic NAT to share a single global address?I see two configuration possibilities, but I am not sure if either of them would work.1. Two nat statements share an ID and therefor...
Hi Everyone,I am studying about VPN these days.I did sh crypto isakmp sa Active SA: 8 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)Total IKE SA: 81 IKE Peer: 198.x Type : user Role : responder R...
Hi folks,I´m learning for my CCNA security and I take some labs in GNS3. At the time I´m learning to configure a ASA firewall and this is where I´m hanging now.I have configured a Cisco ASA wich version are 8.4(2) and ASDM-version 6.4(9). I configure...
hiI'm making some major changes to the config on an active/standby asa this evening and am planning the roll back in case things go bad.I'm planning to wr mem the config and then 'no failover' on the Active asaTHen make the changes.If all goes well, ...
I'm trying to configure static PAT for a Linux SSH server on my network. The tricky part is that I'm trying to map port 21 from the outside to port 22 on the inside (because port 22 is blocked on my work network).I've tried the following but it does...
Hi,I uploaded the above ASDM to my ASA's and trying to operate the ASDM without success. In the ASA I configured the below:http server enable 1512http 192.168.1.0 255.255.255.0 managementhttp 10.20.2.192 255.255.255.255 insidehttp 10.20.168.22 255...
Hi,Can someone help me with the following?I am working on an ASA 5512-x at the moment.I just returned to the factory default I started to set the IP of inside and outside interface and after this I set the default gateway, but ASA don't use it.I cann...
Hello,We have a Cisco 5525 ASA, and we have a Whitelist where only the agents are allowed to go to specific websites.I am using the following commands to add a new URL to a list which was preconfigured by another IT member:Example:(config)# regex all...
Hola,Existe algun debug para ver las conexiones tcp que se van abriendo y cerrando en un FWSM? Se que las versiones actuales de ASA para esto puedes hacer un "debug tcp", pero existe algun comando en el FWSM que haga algo similar a esto?Saludos.
Ok I need help with a problem. I have two firewalls between two networks, one is ASA 5520 (8.2(5)46) and ASA 5510 (9.0(2))ASA5520 DMZ (192.168.169.x) ASA5510 (10.65.25.x)Error message before is from the ASA 5510 %ASA-6-106100: access-list insid...
Hey everyone,Can anyone suggest a proper procedure for allowing external access through the ASA using FQDN? We are in the process of moving an internally hosted system to the cloud (external hosting) and the option of filtering via IP address is not...
I hope I'm in the correct area.I'm trying to deny access to 3 wireless devices to the cisco 800 series wireless routerThe MAC address are:MAC Address IP address Device Name Parent State0014.6caf.410a 192.168.2.26 ...
Despite the fact that I have the following setting:crypto isakmp nat-traversal 10All tunnels are bi-directional. Our l2l tunnels keep dropping due to inactivity. On one client, the tunnel drops and doesn't come back up unless you remove the remote ...
