About Lybra1983

Lybra1983 · 02-09-2011

Hi everybody,you can find here a schema and fw confs: https://supportforums.cisco.com/message/3289161I faced another problem related to the above infrastructure.I've added to fw BBB and CCC also the appropriate ACL for the TFTP server that's in the s...

Lybra1983 · 02-08-2011

Hi everybody,I've attached an image in order to better explain the situation.Each one of the ASA5505 is connected to the ASA5510 via VPN (there's no connection between the two 5505).My PC (10.1.1.2) is on the INSIDE network of the FW AAA (ASA5510) an...

Lybra1983 · 02-08-2011

Hello everybody,I have on an ASA5510 two internal netoworks (inside and voip) and an outside netowork.I would like two addresses of the inside network (10.1.1.1 and 10.1.1.2) to be able to access the whole voip network.I made many trial with static, ...

Lybra1983 · 01-12-2011

Hello,I was testing a particular configuration with dynamic maps for soho routers and it worked well... see this post for the conf: https://supportforums.cisco.com/message/3265755Since a few days I'm trying to port this configuration on a productive ...

Lybra1983 · 01-07-2011

I was looking for a method to have L2L VPN dyn to static without using DefaultL2LGroup but defining instead multiple tunnel groups for each router with dynamic IP. Many people say it's not possible, but I found this guide: http://inetpro.org/wiki/LAN...

Lybra1983 · 02-09-2011

Hi Federico,problem solved!I tried to limitate the access to the tftp with 2 acl, one "udp eq tftp" and the other "icmp" and I guess that somehow the issue was due to this.I simply erased the 2 acl and put only one "ip" and now it's working normally....

Lybra1983 · 02-09-2011

Got it Praveen, thanks again, I gave you the "RIGHT ANSWER"!!! Thanks also to the other guys.Regards,Luca

Lybra1983 · 02-09-2011

Praveen you are great!!! You got the point, now it's working!!! many many thanks...I've also another problem... from my pc I can ping host ORION that's on the AAA voip interface (and now also FW BBB, CCC and respective hosts) but I cannot ping 10.24...

Lybra1983 · 02-09-2011

Hi Praveen,Yes, I think I made all you are asking, but isn't working... maybe it's easier for you all if I post the configurations.FW AAA:!ASA Version 8.2(2) !hostname AAAnamesname 10.245.8.0 CCCname 10.245.4.0 BBBname 10.245.0.0 AAA!interface Ethern...

Lybra1983 · 02-08-2011

Hi Brad,yes of course, these are productive appliances, everything is working except for the issue I'm here trying to solve.VPN tunnels are up, people can call via phone each other from branch offices to HQ without any problem.Luca

Member Since	‎12-28-2010 06:32 AM
Date Last Visited	‎08-18-2017 03:55 AM
Posts	24
Total Helpful Votes Received	5

User Statistics

User Activity

ASA5505: save conf via TFTP to a not directly known network.

Routing problems on ASA5510 and 5505.

ASA5510: enable communication between two internal networks.

Phase 2 fails [NO_PROP_CHOSEN]

VPN L2L dynamic to static w/o DefaultL2LGroup

Re: ASA5505: save conf via TFTP to a not directly known network.

Re: Routing problems on ASA5510 and 5505.

Re: Routing problems on ASA5510 and 5505.

Re: Routing problems on ASA5510 and 5505.

Re: Routing problems on ASA5510 and 5505.