About pdriscoll

pdriscoll · 02-27-2008

Summary:We are trying to establish a two-way L2L VPN tunnel with a partner. VPN traffic is a many-to-many towards our partner, and from our partner they need a many-to-one towards us (they need to access just one host on our network). Furthermore, ...

pdriscoll · 08-14-2007

I inherited a network with the following: ATM(Internet and DSL subints)<-->7206<-->Firewall<--> internal networkThe DSL subinterfaces are injected into the ATM circuit; they use 192.168.x.0 and 192.168.y.0 subnets. They are used by company employees...

pdriscoll · 07-25-2007

On an ASA, what is the keyboard key or combination of keys to halt screen output in a telnet/ssh session, similar to the <ctrl> <c> combo that halts output in the IOS? I cannot figure this out or find it via Google for anything....Thanks.

pdriscoll · 07-05-2007

We recently added a 2851 router to our network. It connects to a 3750 switch via a MOE circuit. The link is up just fine (interface up, line protocol up), we can ping or telnet to anywhere in our network from the 2851, but we cannot pass any higher...

pdriscoll · 06-12-2007

Hello experts.Scenario: I have a new 2851 ISR router connected to a 3750 switch. Both are configured for EIGRP in the same AS. The 2851 connects via GigE to the 3750. The connection is up just fine.The 2851 has a VLAN (VLAN126, 192.168.26.254) co...

pdriscoll · 03-06-2008

Jon - reversing the order of the policy NAT statements worked very well. The tunnels come up fine, and internet access is just as robust as before.Thanks for your time and input.Patrick

pdriscoll · 02-28-2008

Jon - thanks again for your posts.Here is the relevant config:object-group network OURHosts network-object host 192.168.x.xobject-group network PartnerHosts network-object host 10.2.x.xaccess-list NAT-LIST extended permit ip 192.168.0.0 255.255.0.0 a...

pdriscoll · 02-27-2008

Jon - I tried #1, but I received an error:access-list NAT1 permit ip 192.168.0.0 255.255.0.0 10.2.0.0 255.255.0.0static (inside,outside) 172.20.n.1 access-list NAT1global address overlaps with maskI am unable to figure out what the error message mean...

pdriscoll · 02-27-2008

Jon - thanks for the reply.I tried #2. What I think happened was that the deny statement was processed but not applied (as it should be), and the next statement (permit 192.168.0.0 255.0.0 any) was processed, which resulted in the same outcome.I am ...

pdriscoll · 02-27-2008

Jon - thank you for replying. I apologize for the typo - the config is:nat (INSIDE) 2 access-list NAT2 global (OUTSIDE) 2 172.20.n.0 andnat (INSIDE) 2 access-list NAT3 global (OUTSIDE) 2 172.20.n.1 Upon further analysis, what is happening is that we ...

Member Since	‎10-09-2006 09:24 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	55
Total Helpful Votes Received	13

User Statistics

User Activity

Policy NAT for L2L VPN

Two separate NAT's

Telnet/SSH - halt screen output

Cannot pass application data

VLAN and EIGRP

Re: Policy NAT for L2L VPN

Re: Policy NAT for L2L VPN

Re: Policy NAT for L2L VPN

Re: Policy NAT for L2L VPN

Re: Policy NAT for L2L VPN