Hi We need creat multi vlan in the ASA 5520 dmz, dmz switch is cisco 2960. How to config ASA dmz sub interface to 2960 trunk port? could send a example?Thanksben
Hello, in a situation like this:Outside 10.1.1.1Cisco ASAInside 192.168.1.1 |LAN 192.168.1.0/24 I know how to do a PAT to forward incoming packets to an inside host:static (inside,outside) 10.1.1.2 192.168.1.2 netmask 255.255.255.255access-list OUTSI...
Dear friends,A few clarifications on ESMTP inspection class maps.1. What exactly is Match invalid-recipients? I dont know the meaning of this match clause even from command reference?2. Under ESMTP inspection, there are two conflicting commands for ...
Hi,I have a question about access-lists on Cisco Asa 5520. If I change the action on an access-list from permit to deny, traffic that belongs to already active connections will still be permitted. Only new connections will be denied. I want that also...
Hello all...I have two hosts on "inside" networks. One is a jabber server, and the other a client trying to connect to that server.The jabber server's IP address is 192.168.100.19, and the client has a DHCP assigned address of 192.168.150.19. Other c...
Dear All, We've just installed a nice new 1941W router with advance security and enabled the Trendmicro IOS content filtering as a replacement for surfcontrol. We only have a couple of entries within the black list along with the desired categories b...
Hi,I have applied a license upgrade in order to enable the 3DES VPN feature on a PIX firewall, however, when I do a show ver I now see the following message - ************************************************************************* ** ...
this is a service policy for esmtp on asa. Global policy: Service-policy: global_policy Class-map: inspection_default Inspect: esmtp _default_esmtp_map, packet 611, drop 0, reset-drop 0 mask-banner, count 2073 match cmd line l...
I am currently evaluating what kind of method to apply in my 6500. I would like to ask if IOS Version 12.2(33)SXI2a support inline mode and inline vlan pair mode with IDSM-2???what configuration should be done with the switch in order for the multip...
I am attempting to forward SSL connections requests across a NAT into a Windows 2003 platform that is hosting a SSL web server. My SSL webserver is receiving the forwarded SYNs from the client, and responding, but that response ACK is getting lost.I ...
Hi There, what is the CLI command to create and alas for an object. for example if I have a server with an IP address 10.1.46.2 255.255.255.0 I would like to create an object aliase so I can use it in the NAT and ACL rules instead of typing the IP a...
Hello folks,Looking for some help on a problem we are having on a Cisco 5510 running 8.0(5) that we have on a remote site. We have three interfaces configured on the device. Inside as 172.19.19.*, Outside as 172.16.34.* and the voice interface 10.25...
We have a 2821 that is blocking telnet among other things (windows password changes) (setup new account on windowws) when we have an ip ips XXXX in or out statment on a sub interface/vlan.....if we remove the statment everything works replace it and ...
