About jbaraona

jbaraona · 04-01-2014

I need to know why traceroute command through Cisco FWSM with dynamic PAT does not work.I can only make it work with a non-translated IP or with static NAT.Is this a bug or it just does not work? Cisco FWSM Firewall Version 4.1(15). Thanks a lot,Jos...

jbaraona · 03-13-2012

Hello,Right now we have InterAS MPLS Option C configured between 2 autonomous systems.Now we need to add more bandwith and would like to add another interface between the two routers establishing a multihop session using loopbacks to load share traff...

jbaraona · 07-11-2011

I have configured L2L VPNs a thousand times, but can get them to work with version 8.4.It seems like the NAT Statements don't work.show isakmp sa result is ok "State : MM_ACTIVE" but traffic don't go over the tunnel.Again bad software from Cisco, f...

jbaraona · 02-01-2011

Hello, does anyone knows if this commands are available in Cisco IOS XR 3.8.4?ip rsvp signalling helloip rsvp signalling hello bfdip rsvp signalling hello statisticsI'm migrating a configuration and I cannot find any information regarding this specif...

jbaraona · 10-24-2010

Hello, I'm losing access to the GSR either by console or SSH. Cisco recomenden moving from IOS XR version 3.8.2 to version 3.9.2 after the upgrade we are still getting the same behaviour.Has anyone had the same problem?Best,Jose

jbaraona · 10-26-2014

Hello, for the FWSM there is no option, it does not work.For ASA I think you could try the solution suggested by Marius:try adding the following commands and then test:inspect protocol icmpinspect protocol icmp erroraccess-list OUTSIDE extended permi...

jbaraona · 04-05-2014

Hello Marcus,The fixup commands are no longer in use, instead the inspect is configured.#sh run fixup INFO: All 'fixup' commands have been converted to 'inspect' commands.Please use 'show running-config service-policy' in conjunctionwith 'show runnin...

jbaraona · 04-05-2014

Hello,If you check the icmp and icmp error inspections are already there. I added the ACLs but didn't fix the problem.thanks.

jbaraona · 04-04-2014

Hello Marius,The traceroute not working is from INSIDE to OUTSIDE with dynamic PAT, for instance from 172.16.0.X /24 to 8.8.8.8If I assign a public IP that is just routed, the traceroute works ok. Also if I configure a static NAT again everything is ...

jbaraona · 04-02-2014

Hello Marius, thanks for your response.By non translated IP I was talking about a no Natted one.I already tried configuring an ACL allowing time-exceeded, unreachables and also allowing all ICMP but unfortunately that does not solve the problem.thank...

Member Since	‎08-23-2006 05:40 AM
Date Last Visited	‎10-09-2017 05:41 PM
Posts	33

User Statistics

User Activity

Traceroute through FWSM

InterAS MPLS Option C (BGP IPv4 + Labels) IOS XR with eBGP multihop session

L2L VPN with ASA 8.4(2) not working

RSVP Configuration in IOS XR

Losing SSH and Console Access GSR12000 with IOS XR

Hello, for the FWSM there is

Hello Marcus,The fixup

Hello,If you check the icmp

Hello Marius,Here's the

Hello Marius, thanks for your