About NInja Black

NInja Black · 11-30-2021

We have Site to Site VPN setup between few servers to a vendor. However seems all traffic including these servers internet destined traffic is also passing through the S2S VPN. How should I exempt internet traffic from S2S VPN

NInja Black · 10-19-2020

Hi, I have a IPsec IKEv1 VPN setup on the FTD (FMC managed). The internal IPs are to be statically NAT'd to a public IP when going over the VPN but its not working. On Packet tracer it shows it is being NAT'd to the firewall outside interface IP ins...

NInja Black · 09-20-2020

Hi, Setting up site to site VPN from ASA 5555 (FTD) to a clients firewall. Do I use the firewalls Outside interface IP address as VPN source IP NAT or an IP from the ISP assigned public range? Also will the private host IPs be NAT'd as the source IP...

NInja Black · 09-01-2020

HI, I am trying to have the DCI routers and MPLS routers as OSPF neighbors with ACI.Tried configuring multiple L3Outs on the border leaf with same OSPF process ID and it won’t allow me to. Per Cisco docs this is not allowed. Do I have to have separat...

NInja Black · 08-31-2020

HI, I was configuring multiple L3Outs on the same leaf with same OSPF area 0 and got the attached error. Cisco docs says this is not allowed. I want my border leafs to be OSPF peers with my DCI and MPLS routers. Is this not possible with ACI??

NInja Black · 10-01-2020

Thanks for the response. For VPN setup, the peer IP would be the FTD's outside interface IP and under NAT rules I will have to configure the PAT for the source IPs to translate to the Public IP from the NAT range. correct?

NInja Black · 09-30-2020

When configuring the VPN through FMC it only gives me option to select the interface and auto populates the IP address. How do I use an IP from the public NAT range as VPN tunnel IP?

NInja Black · 09-20-2020

Thanks Eduman for the quick response. So if I am setting up multiple S2S VPNs with different peers I can use a unique IP from the public NAT range for each S2S VPN connection? Or use the one internet IP (FW Outside interface) for all S2S commections....

NInja Black · 09-01-2020

fdgdf

NInja Black · 08-13-2020

removed the ' ip ospf mtu-ignore' on both sides and hardcoded the mtu size on Cat4k switch interface to 9000 and the neighbor state changed to Full The mtu-ignore probably didn't work due to some bug.

Member Since	‎09-30-2013 06:47 PM
Date Last Visited	‎12-02-2021 07:55 AM
Posts	183
Total Helpful Votes Received	10

User Statistics

User Activity

Internet traffic is also passing through S2S VPN on FMC

FTD - Static NAT over IPsec VPN

FTD Site to site VPN

ACI - Multiple L3Outs with same OSPF process

ACI leaf with multiple L3Outs with same OSPF area error

Re: FTD Site to site VPN

Re: FTD Site to site VPN

Re: FTD Site to site VPN

Re: ACI leaf with multiple L3Outs with same OSPF area error

Re: ACI OSPF neigbor stuck in Exchange/DR