Hi there, i've got a situation - i have an acl "xxx" with only 4 "permit" line's.When i try to apply this acl to the static address translation with command (static (SAP,outside) 3.3.3.3 access-list xxx) i get an error message (ERROR: access-list con...
hmm, on my asr 1002-x i had the same route and it showed me incomplete status, only reverse-route static helped in this situation. Now everything is working well. so, lots of platforms, lots of howto's:)
Alexey, the problem is in ios-xe, e.g.: https://tools.cisco.com/bugsearch/bug/CSCue78552I fixed this problem with removing static route from i-vrf, adding reverse-route remote-peer xxx.xxx.xxx.xxx static to crypto map and adding static route under f-...
Hello, Alexey.Is there any additional info about resolving this issue? I have the same problem - fvrf and ivrf are different and nothing is working:)In gns3 I resolved this problem by turning off and turning on cef on interface pointing to the inside...
you have to define a new group with vrf capabilities and announce it in aaa statementexample:aaa group server tacacs+ mgmtVrfTac server-private key 7 ******** ip vrf forwarding mgmtVrf ip tacacs source-interface FastEthernet1aaa authentication login...
