Cisco Community
English
Register
Register
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Rob Ingram
Online
VIP Advisor
Independant IT consultant based in the UK, specialising in design and implementation of network/security solutions, such as VPN (DMVPN, FlexVPN, Remote Access and Site to Site), Firewalls (ASA and FTD), ISE, Trustsec and Umbrella.
Personal Website
Awards
2
Cisco Designated VIPs 2019 VPN, Policy and Access, Firewalls 2020 Network Security, Network Access Control, VPN
2
Spotlight Awards English Community Member's Choice, January 2020 English Community Questions Answered, February 2020
Recent Badges
Awards
Recent Badges
See all
VIP 2020
Spotlight Award
VIP 2019
300 Accepted Solution
150 Accepted Solution
CCP Member
100 Helpful Vote
50 Accepted Solution
15 Accepted Solution
1 Accepted Solution
Stats
Member since ‎12-05-2010
3324
Posts
4827
Helpful
586
Solutions
Certifications
Cisco Certified Specialist - Network Security Firepower
Cisco Certified Specialist - Security Core
Cisco Certified Network Professional Security (CCNP Security)
Cisco Certified Network Professional Routing and Switching (CCNP Routing and Switching)
Cisco Certified Network Professional Security (CCNP Security)
Cisco Certified Specialist - Network Security VPN Implementation
Cisco Certified Specialist - Web Content Security
Cisco Certified Specialist - Security Identity Management Implementation
Cisco Certified Specialist - Enterprise Advanced Infrastructure Implementation
Cisco Certified Specialist - Enterprise Core
Cisco Certified Networking Professional -Enterprise
Cisco Certified Network Professional Routing and Switching (CCNP Routing and Switching)
CCNA

Re: Site to Site VPN/Tunnel changes in new ISRs

Created by in VPN
06-29-2020
06-29-2020
Hi,Please can you provide the full output of the debug and your configuration of the routers.

Re: ASA 5510 Anyconnect VPN client can VPN in and get IP but no access to interal LAN(Ping, RDP....)

Created by in VPN
06-29-2020
06-29-2020
Hi @richardlaiCanada The order of your NAT rules is important, you traffic is probably being natted ...

Re: VPN Authentication using Certificates Only, with ISE Posturing

Created by in Network Access Control
06-29-2020
06-29-2020
@marc.walker I've not tried this scenario, but what about configuring ASA aaa for "authorize-only", ...

Re: FTD VPN access from inside

Created by in Network Security
06-29-2020
06-29-2020
Hi, The command "same-security-traffic permit intra-interface" is enabled as default on FTD and it d...

Re: Cisco FMC/FTD - RAVPN - Need to route specific IPs via RAVPN

Created by in Network Security
06-27-2020
06-27-2020
Also, double check you’ve got a firewall rule permitting traffic to the internet

Re: VPN on ASA 5506 - Client has internet access & email - cannot ping internal network or access servers such as NAS

Created by in VPN
06-27-2020
06-27-2020
Remove interface VLAN40 from your 3750, it thinks that /24 network is directly connected so won't ro...

Re: VPN on ASA 5506 - Client has internet access & email - cannot ping internal network or access servers such as NAS

Created by in VPN
06-27-2020
06-27-2020
Under the group-policy group-policy GroupPolicy_SGC2 attributes no vpn-filter value outside_access_i...

Re: Cisco FMC/FTD - RAVPN - Need to route specific IPs via RAVPN

Created by in Network Security
06-27-2020
06-27-2020
Hi, How is your RAVPN configured? if you are using full tunnel then all ip addresses will be tunnell...

Re: VPN on ASA 5506 - Client has internet access & email - cannot ping internal network or access servers such as NAS

Created by in VPN
06-27-2020
06-27-2020
I can see you are hitting the second Nat rule. Do the internal devices have a local firewall that co...

Re: VPN on ASA 5506 - Client has internet access & email - cannot ping internal network or access servers such as NAS

Created by in VPN
06-27-2020
06-27-2020
Can you provide the output of "show nat detail" and "show vpn-sessiondb detail anyconnect" < log in ...

Re: VPN on ASA 5506 - Client has internet access & email - cannot ping internal network or access servers such as NAS

Created by in VPN
06-27-2020
06-27-2020
Hi, You will need NAT exemption rules to ensure traffic between the internal LAN networks and the VP...

Re: Trouble communicating between anyconnect clients coming over Split Tunnel ASA 5512 running 9.12

Created by in Network Security
06-27-2020
06-27-2020
Are there any hits on the NAT rule? Provide the output of "show nat detail"Run packet-tracer from th...

Re: Trouble communicating between anyconnect clients coming over Split Tunnel ASA 5512 running 9.12

Created by in Network Security
06-26-2020
06-26-2020
You mask (255.255.255.255) in your split-tunnel ACL looks incorrect, are you sure your split-tunnel ...

Re: Trouble communicating between anyconnect clients coming over Split Tunnel ASA 5512 running 9.12

Created by in Network Security
06-26-2020
06-26-2020
Hi,In addition to the NAT rules, you will need to use the command "same-security-traffic permit intr...

Re: Access Policy - how to exclude DNS querry from logging so Event viewer or export to syslog

Created by in Network Security
06-26-2020
06-26-2020
Hi, Create another ACP rule at the top of the rule set, permitting dns to the domain controllers wit...
Public Statistics
Date Registered ‎12-05-2010 06:35 AM
Date Last Visited ‎07-01-2020 10:28 PM
Total Messages Posted 3,324
Total Helpful Votes Received 4827
Helpful Votes Given To
Awards
Cisco Designated VIPs
2019 VPN, Policy and Access, Firewalls
Cisco Designated VIPs
2020 Network Security, Network Access Control, VPN
Community Spotlight Award
English Community Member's Choice, January 2020
Community Spotlight Award
English Community Questions Answered, February 2020