About shell_uk_

shell_uk_ · 03-19-2015

Hi all I can't quit hit the nail on the head with this one. Any help would be very much appreciated please :) Cisco ASA 5505Running 8.4(1) Example of what I am trying to do (I've basically ran out of public IPs and need to direct access to certain ho...

shell_uk_ · 09-18-2011

Hi AllMy setup..Site 1: Cisco ASA 5505 Firewall running 8.4.1Site 2: Cisco 877 RouterBetween the 2 of these I have a working site to site VPN setup. The only issue is if a NAT rule is set up on the remote office, to access that I have to use to the e...

shell_uk_ · 04-04-2011

Hi AllAm I doing something daft/misunderstanding here?Configuring a Cisco ASA 5505 from the CLI. "ssh ?" shows:hostname or A.B.C.D The IP addres of the host and/or network authorized to login to the systemYet whe...

shell_uk_ · 03-03-2011

Hi AllI am trying to configure two site to site VPNs on a Cisco 877 but I can only apply one crypto map to the dialer interface. How can I get around this?Thank youShell

shell_uk_ · 03-20-2015

Right, that ignoring thing was a bug. I found it on this (looks handy to go through too in full). http://www.slideshare.net/CiscoRu/understanding-andtroubleshootingasanat11finalapprovedSlides 38/39. So there's a bug in my version so they don't get ap...

shell_uk_ · 03-20-2015

All making a lot more sense now. That article is very good.I think I'm going to have to leave this in section one though because SOURCE-ADDRESSES-2 is an object-group so I can't apply NAT to it (can't put it in section 2). I can't make it with a rang...

shell_uk_ · 03-20-2015

Hi JonChange made. Makes sense to be doubley safe.Is there any downsides of this over what you then said about basically doing this in section 2 (because static wins over dynamic there, with no ordering) but moving the general LAN NAT to section 3 (t...

shell_uk_ · 03-20-2015

Thanks again Jon :-) In between your posts (so before seeing this one) I've done this and it appears to work. I've basically stuck it all in section one at the end of it... Am I missing something that will have broken here? I've done various checks a...

shell_uk_ · 03-20-2015

Hi JonNo I don't understand why it works. I've even gone as far as visiting a site like ipchicken.com from that machine and it definitely shows 12.34.56.1. Hmm. Reading the docs you link to atm.Thanks

Member Since	‎09-11-2010 04:49 AM
Date Last Visited	‎08-18-2017 03:54 AM
Posts	20

User Statistics

User Activity

NAT with multiple external IPs and multiple internal IPs sharing public specific IPs

VPN and NAT

SSH access list and hostname

Cisc 877 - two site to site VPNs?

Right, that ignoring thing

All making a lot more sense

Hi JonChange made. Makes

Thanks again Jon :-)

Hi JonNo I don't understand