turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About CiscoBlueBelt
Online
CiscoBlueBelt
Member since
09-06-2016
Contributor
02-14-2019
06:42 PM
I have seen this being done. You would need to do this let's say if you are building a IPSEC or VPN between 2 sites that perhaps share the same Private address space correct? I guess in IPSEC case you would need to do NAT-T? If these 2 private networks transverse the internet through their ISP, thus being natted, do you use the public natted IP address as the source and destination for the tunnel endpoints meaning you no longer natting 2 private networks? Can someone give me an example?
Are there use cases for NATTING between 2 public IPs as well? Basically I am looking for a bit of explanation on why this is done for whatever use cases?
... View more
Labels:
Created by
CiscoBlueBelt
in Switching
in Switching
02-14-2019
06:29 PM
02-14-2019
06:29 PM
See drawing - sorry I don't have VISIO on this PC right now.
Yes the 2 switches can be.
Yes could do HSRP between both swithces for inter-vlan routing, but how about if you wanted both routers just to be the DG for both switches, say the internal int face for each switch connection to be 10.1.1.1? As you know I can't put same IP without overlapping. So is IRB one way to do it or what is best way it should be done?
... View more
Created by
CiscoBlueBelt
in Other Network Architecture Subjects
in Other Network Architecture Subjects
02-14-2019
06:22 PM
02-14-2019
06:22 PM
I did already but I can click on another again. Thanks!
... View more
Created by
CiscoBlueBelt
in Switching
in Switching
02-13-2019
08:22 PM
02-13-2019
08:22 PM
Let's say you have 2 routers for redundancy connected to 2 switches for redundancy (so each switch connects to each router). If I need the same sub-interfaces on each interface on the router since they are providing redundant connections for each switch as well as doing routing for certain subnets, I would have to configure IRB with the same BVI assigned to each redundant interface on the router correct? Is there another way to do this?
... View more
Labels:
02-13-2019
08:02 PM
I know this thread is pretty old, but are you saying to assign 3 different bridge-groups under the 2 interfaces he wants to use for redundancy? I am a bit new to BVI - so meaning each BVI you just assign an IP in the subnet for the particular VLAN you want to bridge correct?
... View more
Created by
CiscoBlueBelt
in Other Network Architecture Subjects
in Other Network Architecture Subjects
02-13-2019
09:52 AM
02-13-2019
09:52 AM
Awesome thanks!
... View more
Created by
CiscoBlueBelt
in Other Network Architecture Subjects
in Other Network Architecture Subjects
02-12-2019
06:03 PM
02-12-2019
06:03 PM
In the real world let's say you need to setup a connection with another company or something where they will be managing the connecting ASA via the ASDM/GUI let's say. How are the pre-shared keys determined meaning do we normally just agree what it should be over the phone then send a text file or something, or just agree on all parameters verbally or electronically via email or something, etc?
... View more
Labels:
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
02-12-2019
10:16 AM
02-12-2019
10:16 AM
Awesome!
Which command specifies which interface the tunnel traffic should use? Sorry I am having hard time finding good docs that explain how to configure this.
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
02-12-2019
08:47 AM
02-12-2019
08:47 AM
I was expecting an ACL for VPN traffic to be applied to an interface via crypto map.
Basically, if you have an ACL for a IPSEC tunnel, how do you apply it aside from applying it via crypto map to an interface such as below:
ASA1
ASA1(config)# tunnel-group 10.10.10.2 type ipsec-l2l ASA1(config)# tunnel-group 10.10.10.2 ipsec-attributes ASA1(config-tunnel-ipsec)# ikev2 local-authentication pre-shared-key 32fjsk0392fg ASA1(config-tunnel-ipsec)# ikev2 remote-authentication pre-shared-key 32fjsk0392fg
ASA1
ASA1(config)# crypto map cmap 1 match address ACL1 ASA1(config)# crypto map cmap 1 set peer 10.10.10.2 ASA1(config)# crypto map cmap 1 set ikev2 ipsec-proposal P1 ASA1(config)# crypto map cmap interface outside
... View more
Created by
CiscoBlueBelt
in Firewalls
in Firewalls
02-12-2019
08:18 AM
02-12-2019
08:18 AM
Ok yes this is for VPN Filtering.
... View more
02-12-2019
07:52 AM
I have an ACL that shows in Details window when looking at IPSEC connection on ASA, however from CLI I don't see the ACL applied to an interface via Crypto Map. Are there other ways to apply ACL on ASA interface?
... View more
02-11-2019
01:08 PM
Great thanks! This doc is missing Syslog IDs that I am seeing on my ASA such as ID 3135005. What I was looking for is anything that would help explain that the log message is e.g. user-indentity: [FQDN] crl.test.com resolved X.X.X.X and other messages.
... View more
02-11-2019
11:40 AM
I am looking for any good docs or resources I can use to assist and or research in regards to interpretation of log events in Real-Time Log Viewer in ASAs. Any help is appreciated.
... View more
02-06-2019
06:06 AM
Hi I know this thread is years old but do you remember what the actual fix was I don't see it on here?
... View more
02-03-2019
09:36 AM
Can you give me an example of the configs for a sub-int connection forming BGP neighborship with the ISP as you stated is usually done, but also including sending tunneled traffic across?
... View more
Thursday
I have seen this being done. You would need to do this let's say if you
are building a IPSEC or VPN ...
Created by
CiscoBlueBelt
in Switching
Thursday
Thursday
See drawing - sorry I don't have VISIO on this PC right now. Yes the 2
switches can be. Yes could do...
Created by
CiscoBlueBelt
in Other Network Architecture Subjects
Thursday
Thursday
I did already but I can click on another again. Thanks!
Created by
CiscoBlueBelt
in Switching
Wednesday
Wednesday
Let's say you have 2 routers for redundancy connected to 2 switches for
redundancy (so each switch c...
Wednesday
I know this thread is pretty old, but are you saying to assign 3
different bridge-groups under the 2...
Created by
CiscoBlueBelt
in Other Network Architecture Subjects
Tuesday
Tuesday
In the real world let's say you need to setup a connection with another
company or something where t...
Tuesday
Awesome! Which command specifies which interface the tunnel traffic
should use? Sorry I am having ha...
Tuesday
I was expecting an ACL for VPN traffic to be applied to an interface via
crypto map. Basically, if y...
Tuesday
I have an ACL that shows in Details window when looking at IPSEC
connection on ASA, however from CLI...
Monday
Great thanks! This doc is missing Syslog IDs that I am seeing on my ASA
such as ID 3135005.What I wa...
Monday
I am looking for any good docs or resources I can use to assist and or
research in regards to interp...
a week ago
Hi I know this thread is years old but do you remember what the actual
fix was I don't see it on her...
Public Statistics
| Date Registered | 09-06-2016 11:48 AM |
| Date Last Visited | 02-15-2019 12:08 PM |
| Total Messages Posted | 582 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 35 | |
| 76 | |
| 80 | |
| 5 | |
| 5 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
