Hello! and I hope someone can help me.As part of delivering a service to our customers I had the need to nat their destination (as well as our source). However, two different customers wanted me to nat their end and later noticed they use a similar I...
Hi, I wonder if someone can help me. I will appreciate it very much. I started the process to upgrade our ISE deployment consisting of 2 SNS-3615-K9 servers. These have AD-OS version 3.0 (with no patches) and I wanted to upgrade it to AD-OS 3.1. I re...
I replaced a Cisco 887VA with a ISR4331/k9 loaded with a NIM-VAB-A ADSL card. I copied the configuration of the ATM interface and the dialer 1 interface from the Cisco 887VA to the ISR router, taking care of the password and username. Note: the Cisco...
Hi all, I wonder if someone knows why I get the error:MCAST-RR(config-router)#address-family l2vpn evpn% BGP: Error initializing topologywhen I try to configure address-family l2vpn evpn in the BGP process. The router has hardly any config and I foun...
My ISE cube is made up of two nodes. I just enabled device admin to manage a few switches/routers via TACACS and it is working as expected. However, I noticed the system clock in ISE is different to the one of the routers/switches and to that of the ...
Thank you all, especially @Rob Ingram, for your time and sharing your knowledge. I finally got it. I also have to nat the source to make the difference as to which egress interface and crypto map to use.
Excellent Rob, thank you. I understood the explanation regarding the V in the routing table.But what I am concerned is that I could potentially have 2 customers with the same crypto ACL as per below. In this case how does the firewall knows what is t...
Hi, thank you for your comments. The problem is the customers can't or do not want to nat their end. Hence, they use their real IP subnet for their crypto ACL and I have to do the same on my crypto ACL.I can and will remove the RRI from the crypto ma...
Please see the nat statements that I am using for each customer:This is for customer 1 crypto map 163nat (any,OUTSIDE) source dynamic COMPANY_NET-GROUP-A NAT_COMPANY_HOST-X.X.X.201 destination static CUSTOMER_1_HOST-10.241.242.9 CUSTOMER_1_REAL_HOST-...
Hi @Rob Ingram and thank you for your post.If I remove the reverse route command, how does the FW know that the packet destined to the nated address 192.168.100.2 is destined for the customer using crypto map 163? If both customers were using the sa...
