Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I've got a microwave ethernet network that connects 7 different sites around our city in a ring-like topology. Each site has two microwave antennas and transceivers to implement the ring. Presently we are using industrial Moxa switches at each micr...
I have several remotes sites connected to "home" with Cisco 891 routers at each remote site."Home" actually consites of two different data center sites, each with a Cisco 3845 router terminating the IPSec tunnels there. One home site provides VOIP ph...
I've got a Hub & Spoke VPN network set up with an ASA 5520 at the Hub/Headquarters location, and a 5505 at each of two remote "Spoke" sites, A & B. I wish to have all my Internet-destined traffic from PCs at the remote sites forced thru the tunnels b...
I don't know if this is can be made to work or not, or if it's a mutually excluded NAT configuration that's not possible, but I have an ASA 5520 at my central office site with a 20Mbps fiberoptic Internet feed, and two remote offices with ASA 5505 un...
I have a situation where I'm needing to allow an IPSec client (Windows, software-based classic IPSec using ESP+AH+UDP) to be able to reach a site out over the public Internet. The problem is that the Windows workstation is nested three levels deep in...
Been looking into Q-in-Q. It seems that you have to reconfigure your switches to use (at minimum) 1504 byte MTU.My entire microwave system does not support larger ethernet frame sizes. Some of its ethernet interface components have a hard max MTU of...
I think I've decided just to roll back the IOS to 12.4 instead. That way I'll be truly consistant with IOS and configs across all my 891 remote site routers. 12.4 has been working perfectly well at the other locations. I really don't have time to fo...
A Cisco "Air-LAP" access point is useless standalone by itself. It must participate on a network with a Cisco Wireless Lan Controller appliance to configure and manage it.And it's just an access point, not a router too, like a typical home unit is. L...
Finally got it working.I had to first add a destination "any" to the cryptomap acls on the 5505's and then add explicit inside and outside incoming rules to the firewall access rules on the 5520 for the remote site PCs and the credit card server out...
The Android built-in IPSec client is only a partially-implemented client and does not support the concept of "Group Authentication" and therefore is not compatible with connecting to an ASA as a VPN concentrator server. Period.This lack has been a so...
