About Namal Suranga

Namal Suranga · 03-06-2014

Hi all,I have a firewall cluster with two ASA 5585X. it's currently running with single uplink (Untrust). I have attched a draft diagram with this.site to site (L2L) VPNs peering with untrust interface but Remote access VPN clients connections termin...

Namal Suranga · 01-24-2013

Hi All,I have faced a problem with configuring Cisco 3750G series switches as Sever farm switches with redudance. i have attaced basic connectivity diagram with this..ISwitch model - WS-C3750G-24TIOS - C3750-IPSERVICES-Mservers have 2NIC (1GBps) and ...

Namal Suranga · 08-15-2012

I have configured redundant interface on ASA 5510interface Redundant1description *** INSIDES NETWORK ***member-interface Ethernet0/1 (This is a 1000Mbps Port)member-interface Ethernet0/2 (This one is 100Mbps)no nameifno security-levelno ip addressint...

Namal Suranga · 08-14-2012

when i create a rule and enable icmp in ASA inside to outside direction to testing purpose, but I can't ping outside address , access-list ICMP extended permit icmp any anyaccess-group ICMP in interface insideLOGG:::ping 8.8.8.8 %ASA-3-106014: Deny ...

Namal Suranga · 08-12-2012

Existing nework New NetworkHi all,I have attached some diagram here,2911 Router configured as a zone based firewall and it works fine.I need to put ASA 5510 as an internal Firewall in to the existing network.So I need to hand-over the NATing configur...

Namal Suranga · 03-11-2014

Hi Marius, Thank you for your comment.I have tried with add additional default route with AD 200, towards Remote VPN interface. I did this for just trial and error method. But it works... existing Default route : - route Untrust 0.0.0.0 0.0.0.0 203....

Namal Suranga · 08-12-2012

I will attach asa configurations too...

Namal Suranga · 08-08-2012

Hi Jennifer,Thanks for comment, It's working now , not the issue with router config , we found some problem with a smartphone, becoz we used a smart phone for checking VPN connection that the issue. as you told, GRE class-map must be top of the tab...

Namal Suranga · 08-07-2012

thanks your update... i have change as above .. .but still not working ....

Namal Suranga · 08-07-2012

Hi,I have configured as above, but it's no working properly, i can initiate tcp connection with port 1723 but i can't connect vpn .....is there any more ... Configs ip access-list extended ISA-SERVER-TO-OUTSIDE-ANY permit ip host 202.124.160.2 any ...

Member Since	‎08-06-2012 03:39 AM
Date Last Visited	‎10-21-2020 12:11 AM
Posts	17

User Statistics

User Activity

ASA 5585 with dual uplinks

Server Farm Switches STP issue with NIC bridging

ASA 5510 redudant interface

asa 5510 access rules

Implementing ASA 5510 to a Network

Hi Marius, Thank you for your

Implementing ASA 5510 to a Network

IOS ZONE based FW with gre

IOS ZONE based FW with gre

IOS ZONE based FW with gre