About CWF Netman

CWF Netman · 10-11-2012

I've got a microwave ethernet network that connects 7 different sites around our city in a ring-like topology. Each site has two microwave antennas and transceivers to implement the ring. Presently we are using industrial Moxa switches at each micr...

CWF Netman · 08-01-2012

I have several remotes sites connected to "home" with Cisco 891 routers at each remote site."Home" actually consites of two different data center sites, each with a Cisco 3845 router terminating the IPSec tunnels there. One home site provides VOIP ph...

CWF Netman · 11-18-2010

I've got a Hub & Spoke VPN network set up with an ASA 5520 at the Hub/Headquarters location, and a 5505 at each of two remote "Spoke" sites, A & B. I wish to have all my Internet-destined traffic from PCs at the remote sites forced thru the tunnels b...

CWF Netman · 11-11-2010

I don't know if this is can be made to work or not, or if it's a mutually excluded NAT configuration that's not possible, but I have an ASA 5520 at my central office site with a 20Mbps fiberoptic Internet feed, and two remote offices with ASA 5505 un...

CWF Netman · 08-09-2010

I have a situation where I'm needing to allow an IPSec client (Windows, software-based classic IPSec using ESP+AH+UDP) to be able to reach a site out over the public Internet. The problem is that the Windows workstation is nested three levels deep in...

CWF Netman · 10-16-2012

Been looking into Q-in-Q. It seems that you have to reconfigure your switches to use (at minimum) 1504 byte MTU.My entire microwave system does not support larger ethernet frame sizes. Some of its ethernet interface components have a hard max MTU of...

CWF Netman · 08-02-2012

I think I've decided just to roll back the IOS to 12.4 instead. That way I'll be truly consistant with IOS and configs across all my 891 remote site routers. 12.4 has been working perfectly well at the other locations. I really don't have time to fo...

CWF Netman · 02-09-2011

A Cisco "Air-LAP" access point is useless standalone by itself. It must participate on a network with a Cisco Wireless Lan Controller appliance to configure and manage it.And it's just an access point, not a router too, like a typical home unit is. L...

CWF Netman · 11-12-2010

Finally got it working.I had to first add a destination "any" to the cryptomap acls on the 5505's and then add explicit inside and outside incoming rules to the firewall access rules on the 5520 for the remote site PCs and the credit card server out...

CWF Netman · 11-10-2010

The Android built-in IPSec client is only a partially-implemented client and does not support the concept of "Group Authentication" and therefore is not compatible with connecting to an ASA as a VPN concentrator server. Period.This lack has been a so...

Member Since	‎02-02-2010 08:15 PM
Date Last Visited	‎08-18-2017 03:54 AM
Posts	23

User Statistics

User Activity

How do I transport multiple VLAN trunks over the same physical link?

Shutting down one tunnel shuts them all down

Spoke & Hub VPN topology: Getting strange log msgs on hub site ASA 5520 trying to filter NAT'ed traffic from remote site PCs

Spoke & Hub topology: Can I Route Internet traffic from a PC at a Spoke site thru the tunnel and NAT it out to the world on the Hub's 5520?

Solved: How can I accomplish this IPSec proxying/relaying/passthrough issue...?

How do I transport multiple VLAN trunks over the same physical l

Shutting down one tunnel shuts them all down

Re: Cisco Air-Lap1242AG

Re: Spoke & Hub topology: Can I Route Internet traffic from a PC

Re: Android IPSEC with ASA