Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,we are trying to migrate from CBAC to ZBF to ease our firewall management. We translated all the ACLs to ZBF and it was a breeze. Everything went fine except one thing (the VPNs stopped working) which I'm hoping someone with more experience wil...
Well it's been some time (almost a year) and I don't remember the specific changes.But something like this should do the trick:ip access-list extended PPTP permit tcp any host XXX.XXX.XXX.XXX eq 1723 permit gre any host XXX.XXX.XXX.XXX (same host as ...
Ok we figured this out. For some reason the above policy has been blocking GRE replies from the Vlan1 going out to the peer through F0/1 (consumed by Firewall as we noticed in the debug logs).We did a couple of changes in the policy-maps and everythi...
