hello to all members:- i am trying to convert my old ASA ios config to new. could you guys review and let me know the convertion is look correct???oldaccess-list MGMTSOFTWARE_access_in extended permit tcp 192.168.3.0 255.255.255.0 host 10.0.9.5 eq...
Hello Everyone,I need configure destination NAT in my ASA 8.2 version only for a specific origin.Today, the network 10.84.25.0/24 access the web server with IP 172.17.3.150, i need nat the IP 172.17.3.150 to 10.96.202.10 only for 10.84.25.0/24 networ...
Hi Experts,I believe this everyone is doing OK and getting along with your are doing? I have this funny scenario that happened on ASA 8.4 I configured recently for DMZ static nat. See the topology attached. I did configure the inside with a PAT objec...
one Customer is using Cisco VPN Client 5.0.07x to connect to servers from home. This works well in all OS, except Windows 8. When they install Cisco VPN Client on Windows 8, thay can connect to VPN gateway but unable to access any of internal serv...
Hi All,I'm configuring the nat on a ASA5525 running on 9.1.2 and got 2 questions, 1. Is the below overlap warning message normal and will not cause any issue? 2. Is there a simple way on 8.3 and later to fulfill the same functionality like 8.2 and ea...
I had a working active/passive pair of ASA5510's, and then I had to do a rush firmware upgrade, but didn't have time to do it on the secondary at the same time. Now I have made config changes and upgraded the secondary firmware to be the same, and w...
Hi All,I'd like to see if an ASA is blocking / dropping traffic whenI try to connect to a server. I'm basically getting timeout errors every so often, and want to see if it's the ASA which is in the path of the traffic.What's the best Debug command t...
Hi,I would like to config "when host X on vlanX goes to a network that is across an ipsec tunnel, for which vlanX network is not in the encryption domains, translate host X address to that of the asa in a network that is part of the crypto domain".In...
Hi,I just managed to completely screw all our tunnels when trying to configure l2l to allow a remote peer with dynamic address to form a tunnel with me.I'm pretty confident that my dyn map kicked in on every tunnel, and then the phase 2 would fail be...
Hi everybody I am just trying to understand how Cisco's security products evolved so I can better understand themThese are some questions I have:1) Before PIX came along, what Cisco product we used and what security features we could implement with...
Hi Experts,My setup is as belowinside host--> ASA1--Outside interface- layer_ 2_Switch1--outside interface--> ASA2--inside interface-DHCP SERVER.We want that inside host should get ip from subnet 192.168.10.0 /24. This ip pool is configured in DHCP s...
I've been following most of the comments in regarding how to allow communication between two internal networks on a ASA5510 8.2.5But I am still a little confused about to how to set my firewall. I made chages to it and still do not have the desired r...
HI everybody.I have few questions.policy-map type inspect PING class type inspect PING inspect class class-default pass1)What is the order of operation? The" inspect" action will apply only to class " PING" . The action " pass" will be applied to...
I have an ASA with an outside ACL that is configured to allow 208.84.248.95 SIP/5060 to 1x.x.x.46. I show no hits. I added an ACL to do a packet capture, it sees the packet coming into the ASA but not going to the ServProv interface. I see hits o...
Hello all.I am having an issue where clients at remote sites can not access website in our dmz. Any thoughts?Thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM |
| User | Count |
|---|---|
| 5 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
