About DraganSkundric87318

DraganSkundric87318 · 04-22-2025

hi,I need to NAT one subnet to another from inside to outside, but also to NAT DNS replies for some of the hosts in original subnet. Set of host that needs to be dns_replies_nated is dynamic. Is this possible? br

DraganSkundric87318 · 04-17-2025

hi,I have router with trunk toward switch with configured subinterfaces. Each interface has l2tp xconnect to another router with looback interface as source. If I shutdown loopback interface will tunnels go down?br

DraganSkundric87318 · 02-17-2025

hi,I have problem with using aesgcm for encryption on ipsec tunnels between azure and cisco asr 1001 router. Not working. AES/SHA works ok. Looks like the problem is that I cannot define integrity protocol on ikev2 proposal if aesgcm is used. Has any...

DraganSkundric87318 · 02-11-2025

hi,so I have normal trunk port in operation right now interface INTswitchportswitchport mode trunkswitch trunk all vlan VLAN_LIST! I nned to implement some PVLANs ant L3 is on INT trunk. So ...as I understood I nned to configurePPP is primary vlan an...

DraganSkundric87318 · 11-27-2024

hi,I am sending debug to syslog. If I try to make debug ip bgp ... it is working for few minutes even if ssh session is alive. After fw minutes sh debug show no commands I made and there is nothing in syslog.

DraganSkundric87318 · 04-23-2025

I know, but I need to translate subnet_inside to subnet_outside ... clients use dns to resolve destinations from subnet_ouside. I need to NAT those servers to subnet_inside. List of servers is not fixed so I hoped asa can DNS doctor all resources fro...

DraganSkundric87318 · 04-23-2025

but is it possible for whole subnet?

DraganSkundric87318 · 04-17-2025

shutdown 50 tunnels with one command. Shutting down phyisical interface is not an option

DraganSkundric87318 · 02-17-2025

hi,yes id does not. Point is that ipsec with asr router does not work. ipsec with asa fw works ok, integirity is defined as null on asa ikev2 policy and this setup works ok ---- ASA -----crypto ikev2 policy 90encryption aes-gcm-256integrity nullgroup...

DraganSkundric87318 · 12-02-2024

of course I have it ... otherwise it would not work at all

Member Since	‎03-02-2021 05:54 AM
Date Last Visited	‎04-22-2025 12:06 AM
Posts	129
Total Helpful Votes Received	170

User Statistics

User Activity

cisco asa network nat dns replies

l2tp xconnect loopback source

azure ipsec asr using aesgcm

add PVLAN to present trunk port

ASA debug ip bgp persistence

Re: cisco asa network nat dns replies

Re: cisco asa network nat dns replies

Re: l2tp xconnect loopback source

Re: azure ipsec asr using aesgcm

Re: ASA debug ip bgp persistence