Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi
How can i permit ping between two hosts on a different subinterface using the same physical interface on cisco ASA? It is also using the same ACL.
FW/pri/act# sh ipSystem IP Addresses:Interface Name IP address Subnet mask Method GigabitEtherne...
Hi
Please help on what's the best conversion method for the 8.2 configuration below. This is for VPN traffic.
8.2 config:
access-list crypto_Eclipx extended permit ip 10.164.61.0 255.255.255.128 host 10.88.64.31
nat(inside) 0 nonat
access-lis...
Hello
I'm really confused right now, as a background, i need to do a dynamic pat from network with security level 95 to network with security level 100 as seen below.
FW/sec/act# sh run all nat-controlno nat-control
interface GigabitEthernet0/3...
Sorry for my noob question, i have a config below from 8.2
access-list NO-NAT extended permit ip 10.0.0.0 255.0.0.0 10.172.8.224 255.255.255.224
nat (inside) 0 access-list NO-NAT
FW# packet-tracer input inside tcp 10.3.3.3 443 10.172.8.224 $...
Hello
Sorry for my noob question, i have a config below from 8.2
access-list NO-NAT extended permit ip 10.0.0.0 255.0.0.0 10.172.8.224 255.255.255.224
nat (inside) 0 access-list NO-NAT
FW# sh route | i 10.172.8.224D 10.172.8.224 255.255.255.24...
Hi PatrickCan you help me with this? There are no mismatch on both sides as confirmed. This has been working for a long time then suddenly the phase 1 tunnel is not going upMar 05 02:38:05 [IKEv1 DEBUG]: IP = 3.3.3.3, constructing ISAKMP SA payloadMa...
@Francesco Molino
Yes, 10.88.64.31 is on the outside.
I'm curious why option 2 will not work?
This is my first time to migrate config from 8.2 to 8.4. So option 1 nat statements will both appear on the packet tracer result?
