Hi all, I want to ask the community if my understanding is correct.
Waht we have:
1. Centrale ASA with static Public-IP.IP-Address in LAN - 10.0.10.0/24
2. Remote FW-1 with dynamic Public-IP.IP-Address in LAN - 10.0.20.0/24ISAKMP-ID : fw-id-1PSK: xxx...
>> In this configuration, FW-1 can easily establish an IPsec Tunnel using the IP address of FW-2's LAN.!!That's exactly what I wrote in the description of my question
Regarding your notes 1,2,3. My question is not about how to configure the FW-1 or F...
Hi Sheraz,
thank you for your answer. But in my configuration I also use separate crypto maps: crypto dynamic-map ifw-id-1 1 match address outside-1_cryptomap crypto dynamic-map fw-id-2 2 match address outside-1_cryptomap_1But it don't resolve the ...
>> First word back from TAC is that PBR+pppoe as the secondary route is a known limitation but not documented as such. TAC was wrong. It works with PPPoE. For Example:route-map RM-NAME permit 10match ip address ACL_NAME set interface outside_2
