Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About CiscoBlueBelt
Online
CiscoBlueBelt
Member since
09-06-2016
Contributor
Created by
CiscoBlueBelt
in Other Network Architecture Subjects
in Other Network Architecture Subjects
07-18-2019
07:02 PM
07-18-2019
07:02 PM
See attachment of topology lab. So I have configured the 2 ASA for HA/failover. Now because I have redundant links from both ASAs to both csr1000 routers, I am looking for guidance on best technologies/design to use. Can I configure the g2 and 3 interfaces for a layer 3 BDI (its IOS-XE) and configure the pair in some type of HA setup? What about interface g0/0 and 0/1 on the FW?
... View more
Labels:
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-17-2019
06:36 PM
07-17-2019
06:36 PM
I guess I will always create the objects via CLI. I like the running config to match more what the ASDM shows.
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-16-2019
04:40 PM
07-16-2019
04:40 PM
Entering this command should not cause any disruptions in service and/or connections correct?
... View more
Labels:
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-16-2019
04:39 PM
07-16-2019
04:39 PM
So it just references DM_INLINE and nothing for the Object I created e.g. 10.1.1.1._object. This is normal correct?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-12-2019
10:16 AM
07-12-2019
10:16 AM
So I have NAT config statements on ASA but the objects I have entered (configured via ASDM) show up in the running config as DM_INLINE still. Any ideas?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-03-2019
02:47 PM
07-03-2019
02:47 PM
I can't access the remote device. For interesting traffic, the source is ANY so that means it should take it correct?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-03-2019
02:39 PM
07-03-2019
02:39 PM
To add, the default route points to next hop of outside interface which is what tunnel uses?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-03-2019
02:29 PM
07-03-2019
02:29 PM
I am not sure if I follow given its an IPSEC on no tunnel inteface IP like gre. The default route on the ASA does not point to a tunnel destination. Is that what you mean?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-03-2019
02:14 PM
07-03-2019
02:14 PM
Say the interesting traffic is ANY source on the ASA where you have IPSEC tunnels built. If I ping a destination IP which is deemed interesting traffic, what is a good way confirm the traffic is taking the IPSEC tunnel?
... View more
Labels:
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
07-03-2019
02:12 PM
07-03-2019
02:12 PM
Awesome thanks! Yes there are many NAT rules which was causing the conflict. No I don't have any other public IPs to use. I am a bit confused about this statement "as landing/coming from outside to mapping to (if you have a single ip address) your interested subnet is not a good practice." You meaning coming to the real IP addresses/subnet of internal hosts?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
06-23-2019
11:29 AM
06-23-2019
11:29 AM
Hi my friend actually a no NAT rule for the subnets had to be configured.
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
06-19-2019
09:59 AM
06-19-2019
09:59 AM
I am also getting "Assymetric NAT rules matched for forward and reverse flows" in the logs.
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
06-19-2019
09:56 AM
06-19-2019
09:56 AM
yes I need the whole subnet accessible from certain subnets on the Outside. SO change the "dynamic" to "Static" in my statement?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
06-19-2019
08:14 AM
06-19-2019
08:14 AM
Yes meaning I would just put a statement on OUTSIDE ACL allowing the subnets I want allowed to the REAL 200.10.10.0 IP correct?
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
06-19-2019
05:15 AM
06-19-2019
05:15 AM
If I have the below, hosts trying to reach this subnet from Outside are automatically untranslated correct?: object network Natted_Hosts subnet 200.10.10.0 255.255.255.0 nat (any,outside) dynamic interface
... View more
Labels:
Thursday
See attachment of topology lab.So I have configured the 2 ASA for
HA/failover. Now because I have re...
Created by
CiscoBlueBelt
in Firewalls
Wednesday
Wednesday
I guess I will always create the objects via CLI. I like the running
config to match more what the A...
Tuesday
Entering this command should not cause any disruptions in service and/or
connections correct?
Created by
CiscoBlueBelt
in Firewalls
Tuesday
Tuesday
So it just references DM_INLINE and nothing for the Object I created
e.g. 10.1.1.1._object. This is ...
Created by
CiscoBlueBelt
in Firewalls
2 weeks ago
2 weeks ago
So I have NAT config statements on ASA but the objects I have entered
(configured via ASDM) show up ...
2 weeks ago
Trying to understand better when I should use object NAT vs Manual.
Which is the better way to confi...
Created by
CiscoBlueBelt
in FirePOWER
2 weeks ago
2 weeks ago
Do you know which logging event numbers to configure on the ASA to still
make sure it logs when a se...
Created by
CiscoBlueBelt
in FirePOWER
2 weeks ago
2 weeks ago
Not really I guess.So Solarwinds and prime can be configured to send
emails or noitifications to a e...
Created by
CiscoBlueBelt
in FirePOWER
2 weeks ago
2 weeks ago
Is there a way to send a notification to an email or something like that
when "logging host manageme...
Created by
CiscoBlueBelt
in Firewalls
3 weeks ago
3 weeks ago
I can't access the remote device.For interesting traffic, the source is
ANY so that means it should ...
Created by
CiscoBlueBelt
in Firewalls
3 weeks ago
3 weeks ago
To add, the default route points to next hop of outside interface which
is what tunnel uses?
Created by
CiscoBlueBelt
in Firewalls
3 weeks ago
3 weeks ago
I am not sure if I follow given its an IPSEC on no tunnel inteface IP
like gre. The default route on...
Created by
CiscoBlueBelt
in Firewalls
3 weeks ago
3 weeks ago
Say the interesting traffic is ANY source on the ASA where you have
IPSEC tunnels built. If I ping a...
Created by
CiscoBlueBelt
in Firewalls
3 weeks ago
3 weeks ago
Awesome thanks!Yes there are many NAT rules which was causing the
conflict.No I don't have any other...
Created by
CiscoBlueBelt
in Firewalls
a month ago
a month ago
Hi my friend actually a no NAT rule for the subnets had to be
configured.
Public Statistics
| Date Registered | 09-06-2016 11:48 AM |
| Date Last Visited | 07-19-2019 12:48 PM |
| Total Messages Posted | 757 |
| Total Helpful Votes Received | 45 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 20 | |
| 55 | |
| 190 | |
| 45 | |
| 10 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
