HiI am currently in process of removing around 6 switches from 3750 Stack of 8 Switches. Currently Switch 6 is the Master. I would like to change it to switch 3. I have changed the priority to switch 3 higher than all other switches, so that when ele...
Hi I have question regarding NTP. Current Scenario Physical Server(NTP Server for LAN hosts) ----- This communicates with public NTP source to get time. New designCisco 4500 Switch needs to be NTP Server with the same public NTP source and LAN clien...
Hi Guys I am trying to setup a new IPSEC VPN connection between a Cisco ASA 5520 (verion 8.4(4)) and Checkpoint Firewall. I have successfully established IKE and IPSEC phases and I can see tunnel is UP. But I can't see any traffic going through the ...
Hi I would like to know whether we can configure Same Vlan and assign to multiple physical ports in Cisco ASA 5525X series firewalls. The interfaces are connected to same subnet. These are directly connected to servers in DMZ and no switches in betwe...
Hi guysWe are in process of troubleshooting Server Performance issue through cisco ace.. We are load testing the application and we get performance degradation only when we test for like 1000 - 2000 users. Results are good when tested against 400 use...
Hi Joseph Many thanks for your reply. In this case the stack contains the core routing information for the whole envrionment. Mostly static and some EIGRP routes. Also Portchannels. I beleive the Version 12.2(25r)SEE4 doesn't support NSF. So there w...
Hi I would like to get advise on Static NAT. Customer would like to NAT around 60 IP address one-to-one and they want this to be implemented in ASA. Is this a efficient way of doing it or are there any other options ? Thanks
Hi I got it working and it was quite unusual.1. I changed the crypto access list to a /19 rather than /24 and tested it and started seeing encrypted packets and not decrypted packets... - problem existed2. Confirmed with to other end and enab...
Hi Adding the Nat Exemption did have a impact and it now checks the NAT and allows in packet tracer ... but still dropped by the VPN-user access list ... any ideas ? Thanks
Hi I have looked in to the ipsec sa and the output is as below ... but cannot see any traffic being encrypted or decrypted ... internetasa# sh crypto ipsec sainterface: outside Crypto map tag: outside_map1, seq num: 1, local addr: 194.168.166.1 ...
