About DraganSkundric87318

DraganSkundric87318 · 09-28-2023

here is plan, azure active/active needs to connect to on-prem with single asa. So two gtws (ag1, ag2) in azure, with two bgp peers. On asa side I configure two VTIs with op1 and op2 IPs. op1 and op2 are configured in azure as bgp peers. This should w...

DraganSkundric87318 · 09-23-2023

asa have two interfaces, outside and inside. I have vti ipsec tunnel sourced on outside (public ip) interface and this works ok. I need another vti tunnel sourced with inside (private ip) interface. On both vtis, peers are behind outside interface. T...

DraganSkundric87318 · 09-20-2023

hi, if I disable anti reply check, will there be drops of packets? br

DraganSkundric87318 · 08-03-2023

hi,if I create VPN PTP tunnel with empty protected network groups ....1. will it then try to encrypt any traffic or none?2. if none, is there a way to test tunnel, just to see if encryption will come up correctly? br

DraganSkundric87318 · 07-21-2023

hi,I have classic annoying asdm 77% problem, latest ASDM version, run.bat memory settings tweaks does not help. Is there mybe unpublished solution for this. ASDM is running on win10 virtual machine. If I test it directly from laptop, it is flying. Bu...

DraganSkundric87318 · 09-23-2023

I did asp_drop capture and there ispeer_ip.500 > asa_inside.500: udp 536 Drop-reason: (no-route) No route to host, Drop-location: frame 0x0000559d9b13a215 flow (NA)/NA this is strange since asa_inside is directly connected

DraganSkundric87318 · 09-23-2023

remote peer has configured public ip of nated asa inside interface. Traffic is seen on asa outside interface remote_peer -> asa_inside_ip so this part is working ok. I do not have debugs for now since it looks I am stuck on basic network level

DraganSkundric87318 · 06-28-2023

i have edge routers toward both providers where I am doing NAT. ok, there is work arround to connect both providers to same asa interface and do some chemistry there and move urpf/async path from asa

DraganSkundric87318 · 06-27-2023

but urpf will still see return traffic from internet IPs on interface 2 while routing table has route for them on interface 1 and reverse deny this traffic ... I guess

DraganSkundric87318 · 06-27-2023

i know about reason. just wanted to know if there is a way for asa urpf to be aware of pbr and see this as legitimate setup

Member Since	‎03-02-2021 05:54 AM
Date Last Visited	‎10-15-2023 12:20 AM
Posts	85
Total Helpful Votes Received	155

User Statistics

User Activity

azure active/active single asa on prem

cisco asa vti interface source

disable ipsec anti replay

FMC/FTD peer to peer VPN with empty protected network groups

ASDM 77% problem

Re: cisco asa vti interface source

Re: cisco asa vti interface source

Re: asa reverse path check and policy routing

Re: asa reverse path check and policy routing

Re: asa reverse path check and policy routing