I think packet flow is changed in 8.3 IOS and above.We are using private NAT for ouside traffic.can any body explain me why we are using private IP for outside traffic
static (inside,outside) <global ip> <local ip> netmask <local ip netmask>When I enter the above in my pix 501 (mind that whats in the <> is an ip address) I get an error message that says 'global address overlaps with mask'Any ideas?
Can someone Explain what the following does on my PIX firewallnat (inside) 0 access-list NoNat_Insideaccess-list NoNat_Inside line 1 permit ip lan 255.255.0.0 dmz 255.255.255.0Lan = 10.10.0.0DMZ= 172.172.172.0I'm am under the impression it denies the...
Hi everyone.I am new in ASA, I have the DMZ (10.1.1.0/24) configured on ASA 5520 and I achieve the reach Internet from DMZ (10.1.1.0/24), but now need reach DMZ from inside (172.16.12.0/24) and inside (172.16.12.0/24) from DMZ (10.1.1.0/24), in othe...
Hi!We have 2 ASA5510 and 2 ASA5525. Got a very weird error; up to release 8.4 eigrp works fine, after upgrading to 8.6 eigrp stops working.If i do 'sh ei nei' i get this after upgrade to 8.6:GRPCPDFW01# sh ei neighbors deEIGRP-IPv4 neighbors for proc...
We use multiple context mode on FWSM and dhcp relay but never configured setroute and it works.Does anybody know when to use this feature under what circumstances?**********************Step 4 (Optional) To change the first default router address in t...
Hi all,We have a NAC guest server in our environment which we use to add trusted guest wireless users to our network. We successfully use the Email user facility and wev'e now successfully got the SMS part working too. Is it possible however to 'hard...
Hi, I try to find a solution but got some problem ... I got Two DMZ, one name "Dmz" and other "service" I can have the same security level but not a problem. I want that traffic from Dmz to service works in some TCP port to some IP and from ...
Does anyone know of a good tutorial video or site for the ASA 5510s? I'm specifically looking for something on how to get around the GUI; adding rules, etc. Thanks,Steve
Hi all,Our customer is experimenting really bad performance when runing 10Gig traffic through FWSM on C6509. Test with1 Gig traffic are providing find result perfromance as expected in this document: https://supportforums.cisco.com/docs/DOC-12668. I ...
HiMy basic query is whether a dot1q trunk carrying 2 VLANs (guest wireless and corporate LAN) can still be firewalled using the zone based firewall on an IOS firewall on a 1941 ISR. Here's more background:It's for a number of branch sites that will h...
Hi I am Jonathan Rivero and I am NEW on ASAs, I have ASA 5520 with Version 8.2(5), the ISP give me a block of IP pubic (201.148.156.193/28), one IP valid (201.148.156.194) have the Global NAT (all users LAN) and server FTP, but i n...
Background:This is my 1st time working with the post 8.4 IOS on the ASA and have a question regarding access lists. My ASA is running ver 8.6 and is configured with 3 interfaces, inside, data and outside. The inside network is for management\monit...
We have two networks HQ and Site1 and for some reason we can’t ping the inside IP for Site1 PIX device. We have site-site-VPN set up between the two and everything works fine except we can’t ping the Site1 PIX from internal IP. However, I can ASDM/SS...
Hi,I am getting below error frequently, can anyone suggest me what could be the done to eleminate the error..? %asa-3-305006: portmap translation creation failed for udp src INT1:10.64.54.154/56706 dst INT2:10.0.1.3/8612 Best Regards,Siraj
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
.jpg "Hall of Fame Community Legend"){kind=icon}
.jpg "VIP Master"){kind=icon}
