About chenbc

chenbc · 03-26-2011

Hello all,Our ASA has inside IP: A.A.A.A, outside IP: B.B.B.Band we want to make smtp servers at inside network: A.A.A.C, which sending mails through a different outside IP: B.B.B.DThus the other mail servers would treat these mails from A.A.A.C as B...

chenbc · 01-23-2011

Hello AllWe have an ASA5550 as a nat server, it works fine, but some internet sites do not work.For example, we want to connect to site A, which ip is x.x.x.x (on internet)Because of some reasons, we need to route it to another router(ip: y.y.y.y) in...

chenbc · 12-12-2010

Hello All,We have ASA5510 as a NAT server, and it works correctly on NAT for inside computers.But for some concern, we want these inside hosts connecting to some outside network hosts with a different route.i.e.:inside_hosts ---------> Internet ...

chenbc · 11-11-2010

Hello all,our network scenario in below: ipsec lan A <---------> lan B (remote) & vpn pool ipsec lan A <---------> lan C (remote) & vpn poolwhere lan A is 192.168.3.0/24, vpn...

chenbc · 11-02-2010

Hello allOur ASA SSLVPN cannot connect on XP, but Win7 can.While using AnyConnect VPN Client on XP, it shows "The VPN client is unable to establish a connection"and debug message is:SVC Message: 16/ERROR: Failed to fully establish a connection to th...

chenbc · 04-08-2011

Hello,>> If you want the inside host to be ''seen'' as B.B.B.D when it sends outbound traffic you also need something like:>> nat (inside) 1 A.A.A.C>> global (outside) 1 B.B.B.D 255.255.255.255But we want the inside host to be seen as B.B.B.D only wi...

chenbc · 01-23-2011

Hello allWe have fixed it by using state-bypass-map.Refer to http://inetpro.org/wiki/ASA_Asymmetric_Routing

chenbc · 12-15-2010

Hello all,According to this post: https://supportforums.cisco.com/message/884739#884739We could achieve our goal.Thanks a lot for all

chenbc · 12-13-2010

Hello,For example, if the outside host ip is Y, router A inside ip is Xwe have do a static route like"route inside Y 255.255.255.255 X"and ensure "same-security-traffic permit intra-interface" is enabledBut while we set ASA5510 as default gateway for...

chenbc · 12-13-2010

Hello,Yes, we need PBR for some hosts on internet.but is there a way to make a SNAT from 10.1.1.0 to 10.1.1.0 in order to do PBR from ASA to Router A's outside?This way should be useful...Thanks a lot

Member Since	‎06-09-2010 03:36 AM
Date Last Visited	‎08-18-2017 03:54 AM
Posts	27

User Statistics

User Activity

ASA: inside smtp service known as a different IP from the one binding to the outside interface

Connect to internet with errors but ping is fine

Routing to different routes instead of default gateway

Unable to connect to remote LAN with SSLVPN established

Unable to connect to SSLVPN

Re: ASA: inside smtp service known as a different IP from the on

Re: Connect to internet with errors but ping is fine

Re: Routing to different routes instead of default gateway

Re: Routing to different routes instead of default gateway

Re: Routing to different routes instead of default gateway