Hello all,
we need to build s2s with bigger company via standard policy-based VPN. However they are not accepting private ranges as encr. domain (i guess because of overlapping?), instead they want to use public IP range with NAT to servers. There ar...
Hello,
I have ran into following issue. We have subnet 10.0.0.0/24 which is currently divided into 3 networks:
One customer 10.0.0.0/27 (GW .1, Broad .31)Second customer 10.0.0.32/27 (GW .33, Broad .63)Third customer 10.0.0.64/27 (GW .65, Broad .95)
...
Hello all,
i ran into a strange issue (at least for me). Like a half year ago customer asked me for fast configuration of their new ISR 1100. I have configured basic things and NAT for users. However in a hurry i have used standard acl which looks li...
Hello all,
I have ISR 1100 IOS-XE 16.8.1 with FlexVPN Anyconnect via IPsec configured and i have ran into an issue of access for specific users.
I'm using split tunneling for needed networks but how can I create user groups and allow them access to ...
Hello, We have ASA Active/Standby Failover. I have noticed that Standby unit is in Failed state. For some reason sfr module in Standby unit is Unresponsive/Down. I'm a bit new into this so i'm not sure what is the best solution. Should i remove modu...
So lets say our internal server has 10.0.0.1(customer interface), my public IP from DMZ (dmz interface) range is 1.1.1.1, partner public IP 2.2.2.2 then:
nat (customer,DMZ) source static 10.0.0.1 1.1.1.1 destination static 2.2.2.2 2.2.2.2 (and this...
Hello Richard, there are some VLANs on both sides and customer needs to implement s2s ipsec tunnel between two local subnets:
Site A 192.168.10.0/24, Site B 192.168.20.0/24
I just plan to implement standard ipsec ikev2 tunnel but i need to do no NAT,...
.jpg "VIP Expert"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
