Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About vinodk_gupta
Stats
Member since
10-07-2010
26
Posts
0
Helpful
0
Solutions
Created by
vinodk_gupta
in Network Security
in Network Security
12-18-2013
01:45 AM
12-18-2013
01:45 AM
Hi, while creating site to site VPN/IPSec Tunnel on cisco ASA, can we put two peer ip address, one will be primary & other ip wiil be secondary when primary ip will not rechable.
... View more
Labels:
12-17-2013
09:50 PM
Hi, We have Three ISP Link (20 Mbps each) at HO Location & respectively connected on three seperate Internet Router below them connected to three Cisco ASA. we have published many application like web, SAP, mail on these links.Also we have IPSec VPN connectivity between HO to Branch Location through Cisco ASA to Cisco ASA.we have configured IPSec VPN on 1st ISP over cisco ASA. My two pain area. 1. in case of 1st ISP goes down then Branch location down. 2. in case of any ISP goes down then web application which are published on that ISP, is not accessible from out side. 3. is there any way to make all three ISP in a single group/Link (20MBX3= 60 Mbps).. Please suggest what will be the best possible way to achive maximum network performance & uptime.
... View more
Labels:
Created by
vinodk_gupta
in Network Security
in Network Security
04-23-2012
12:11 AM
04-23-2012
12:11 AM
Hi, We have already implemented Cisco client VPN service on Cisco ASA. My Cisco VPN ip pool is configured 174.26.4.0/22 & My corporate network pool is 172.26.4.0/22. which is working perfectly. My concern is VPN pool 174.26.4.0/22 is comes under public range so i want to change this pool into private range (172.30.100.0/24) so i changed below configuration. no access-list nonat extended permit ip 172.26.4.0 255.255.252.0 174.26.4.0 255.255.252.0 no ip local pool testpool 174.26.4.0-174.26.4.253 access-list nonat extended permit ip 172.26.4.0 255.255.252.0 172.30.100.0 255.255.255.0 ip local pool testpool 172.30.100.1-172.30.100.254 After changing, i am able to connect vpn & vpn machine got ip address 172.30.100.1. during VPN connection, vpn machine (172.30.100.1) is pinging from corporate network & even take the remote also but from VPN machine (172.30.100.1) I am not able to ping corporate network. For your information i have added the route on corp machine towards ASA inside which are earlier doing. i am not able to understand where is my mistake? I am attaching the existing config & public ip & natting of server command is removed for security purpose. Please help us Regards vinod Gupta 9810966625
... View more
Labels:
Created by
vinodk_gupta
in Network Security
in Network Security
04-21-2012
12:27 AM
04-21-2012
12:27 AM
Hi, We have already implemented Cisco client VPN service on Cisco ASA. My Cisco VPN ip pool is configured 174.26.4.0/22 & My corporate network pool is 172.26.4.0/22. which is working perfectly. My concern is VPN pool 174.26.4.0/22 is comes under public range so i want to change this pool into private range (172.30.100.0/24) so i changed below configuration. no access-list nonat extended permit ip 172.26.4.0 255.255.252.0 174.26.4.0 255.255.252.0 no ip local pool testpool 174.26.4.0-174.26.4.253 access-list nonat extended permit ip 172.26.4.0 255.255.252.0 172.30.100.0 255.255.255.0 ip local pool testpool 172.30.100.1-172.30.100.254 After changing, i am able to connect vpn & vpn machine got ip address 172.30.100.1. during VPN connection, vpn machine (172.30.100.1) is pinging from corporate network & even take the remote also but from VPN machine (172.30.100.1) I am not able to ping corporate network. i am not able to understand where is my mistake? Please help us Regards vinod Gupta 9810966625
... View more
Labels:
Created by
vinodk_gupta
in Network Security
in Network Security
04-03-2012
09:41 PM
04-03-2012
09:41 PM
Hi, My internet link is connected on Internet Router & below downwards Cisco ASA 5520 is connected.ASA is connected with core switch cisco 4510 on downwards. our webbased mail url owa.test.com is hosted outside. Lets suppose ISP pool is 4.4.4.0/28.suppose owa server is Static natted on ASA with 4.4.4.4. my machine traffic is going to internet with same ISP with the help of PAT on Cisco ASA & internet is working on my machine. if i want to access owa.test.com or ip base for mail access, its not working & also it is not pinging. i suppose to ASA is blocking for returning traffic. is there any way to traffic will go via same Firewal & comeback on same firewall port? Please help us how to resolve it. Thanks Vinod Kumar Gupta 9810966625
... View more
Labels:
04-03-2012
12:17 AM
Existing Network setup: ************************* we have core switch (cisco 4510) & its default route is towards core router (cisco 3845) only.we have one Bharti & Tulip internet link. Bharti internet link is connected on Bharti internet router (Cisco 2821) & downward Bharti Cisco ASA 5520 is connected. Bharti Cisco ASA5520 is connected with core switch. In same manner tulip internet link is connected on seperate tulip internet router (cisco 2821) & downwards Tulip cisco ASA5510 is connected.Tulip cisco ASA5510 is connected with same core switch. We have two nos of Microsoft ISA proxy server, one is connected on Bhartis ASA & other is connected on tulip ASA. Every users are accessing internet via ISA proxy server. we do not provide the access to any users to ping any public ip from internal network. On Bharti ASA we have natted mail owa server with bharti public ip address. from home every thing is working fine. Problematic area & Requirement: ********************************** when users are using tulip proxy server, then they are accessing owa publically while users are seated in internal network. Traffic is going as below--- users vlan->Core switch-->Tulip ASA via proxy---> Tulip Internet router-->Internet cloud-->OWA Bharti public ip its tracert is attached. But when they are using Bharti proxy server then they are unable to access owa Bharti ip publically. we have also checked without proxy & result was same & in this case we are unable to ping OWA Bharti Public ip also. Traffic is going as below----- users vlan->Core switch-->Bharti ASA--->Bharti Internet router its tracert is attached. I am attaching tulip internet router, Tulip ASA , Bharti Internet Router, Bharti ASA config also. conclusion is this that when we want to access Bharti ip when sitting in bharti network not success & Same problem is occuring in Tulip also. our management want to use Bharti Proxy & use OWA Bharti public ip. So please help us how to get resolve this issue? Thanks Vinod Gupta 9810966625
... View more
Labels:
Created by
vinodk_gupta
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
03-08-2012
10:32 PM
03-08-2012
10:32 PM
Hi, I have one WLC 4402 & arround 29 Access point (1130) in our enterprise network. Wireless users LAN segment is diffrent from wired users.Wireless users like Laptop users, Mobile users & ipad users which are connetced with this wireless & using enterprise network. Presently we are using WEP mode for security key. This WEP key are week & can be cracked easily. so security point of view i want to put strong encription mode. Presently i do not have any radius server. I found there are some modes are available Like WPA, WPA2 with PSK etc. will there any problem with wireless users to access application after changing the mode? Please suggest us which mode will be stronger & could not be crack. Could we achieve without radius server or not? Thanks Vinod Kumar Gupta 9810966625
... View more
01-28-2012
08:11 AM
Hi Neeraj, Thank, I am getting fallback also. Now my problem has been comletly resolved. once again thanks for your support. Regards vinod Gupta
... View more
01-27-2012
02:05 AM
Hi Neeraj, Thank you very much our problem has been resolved. For redundancy purpose, lets suppose our multilink got down , then in this case we need to put following steps AT HO end router: ip route 172.26.48.191 255.255.255.255 T56 int t56 ip policy route-map PBR_LABMATE In this condition , i seems that every users can reach internet directly where as we have policy that every users can access internet through microsoft ISA proxy.. Is there any way to control this issue.
... View more
01-25-2012
05:04 AM
Hi, neeraj Thanks a lot. Now its working as per your suggestion but facing one problem after applying this policy. Problem : we are unable to ping 172.26.4.0/22 LAN subnet from 172.26.48.191 machine. we require this facility also. please helpus what should i do additionally. Rehards Vinod Gupta 09810966625
... View more
01-23-2012
02:51 AM
Hi, our branch Location is connected with Head office via two different ISP. one is Reliance Leased line link & second is MPLS link. By default primary link is MPLS & incase MPLS goes down then Leased line link will be use as a backup.we have internet link at Head office only & our LAN is behind the ASA.There is no any default route towards ASA from any HO router. I want to static NAT of one ip from Branch location (172.26.48.191) with public ip address on Cisco ASA & its traffic is to & fro via leased line link. Let suppose Head office LAN segment is 172.26.4.0/22 Branch location LAN Segment is 172.26.48.0/22 Cisco ASA inside ip address is 172.26.4.203/22 T56 is MPLS Link between Head office to Branch Location Multilink is bundle of two leased line link between Head office to Branch Location Configuration: Head office router config: ip route 172.26.48.0 255.255.252.0 T56 ip route 172.26.48.0 255.255.252.0 Multilink1 100 access-list 108 permit ip host 172.26.48.191 any route-map LABMATE permit 30 match ip address 108 set ip next-hop 172.26.4.203 interface GigabitEthernet0/0 ip address 172.26.4.48 255.255.252.0 ip policy route-map LABMATE duplex full speed auto media-type rj45 no cdp enable Head Office ASA config: route inside 172.26.48.191 255.255.255.255 172.26.4.48 1 static (inside,outside) 116.214.24.20 172.26.48.191 netmask 255.255.255.255 access-list 100 extended permit tcp any host 116.214.24.20 eq 3389 Branch Location router configuration: interface Multilink1 description **** Reliance 4 Mbps Aggregated To KCO **** bandwidth 4096 ip address 172.26.0.14 255.255.255.252 ppp multilink ppp multilink group 1 ip route 0.0.0.0 0.0.0.0 Tunnel56 ip route 0.0.0.0 0.0.0.0 Multilink1 100 access-list 108 permit ip host 172.26.48.191 any route-map LABMATE permit 20 match ip address 108 set ip next-hop 172.26.0.13 interface FastEthernet0/0 ip address 172.26.48.1 255.255.252.0 ip policy route-map LABMATE duplex auto speed auto After doing this configuration, when i trace any public ip address from branch location, our packet came via multilink1 & landing at Head office routerbut not going toward cisco ASA.while we can ping ASA inside ip from branch location. whats going wrong, i could not understand. please help us.
... View more
Labels:
Created by
vinodk_gupta
in Network Security
in Network Security
12-26-2011
10:57 PM
12-26-2011
10:57 PM
Hi, we have cisco ASA 5510 with ios ver 8.0(4). we are getting following log. what is the root cause for this & what should we do to resolve. 2011-12-27 00:13:02 Local4.Warning 172.26.4.203 %ASA-4-108004: ESMTP Classification: Dropped connection for ESMTP Request from DMZ:192.168.150.21/3581 to outside:180.222.96.138/25; matched Class 4: header line length gt 998 2011-12-27 00:14:02 Local4.Warning 172.26.4.203 %ASA-4-108004: ESMTP Classification: Dropped connection for ESMTP Request from DMZ:192.168.150.21/3627 to outside:180.222.96.138/25; matched Class 4: header line length gt 998 These logg is frequently occured. note:192.168.150.21 is our MX server for mailing. Please help us to resolve it Regards vinod gupta
... View more
Labels:
12-14-2011
05:41 AM
Hi, we have cisco ASA 5510 with ios ver 8.0(4). we are getting following log. what is the root cause for this & what should we do to resolve. 2011-12-10 00:00:42 Local4.Warning 172.26.4.203 %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 39 per second, max configured rate is 5; Cumulative total count is 23497 2011-12-10 00:00:42 Local4.Warning 172.26.4.203 %ASA-4-733100: [ Scanning] drop rate-2 exceeded. Current burst rate is 8 per second, max configured rate is 8; Current average rate is 39 per second, max configured rate is 4; Cumulative total count is 140682 These logg is frequently occured. Please help us to resolve it Regards vinod gupta
... View more
Labels:
Created by
vinodk_gupta
in Switching
in Switching
12-13-2011
09:42 PM
12-13-2011
09:42 PM
Hi, we have cisco 4510R+E switch with IOS-XE Software Version 03.01.01.SG RELEASE SOFTWARE (fc1). our this switch is having two core & one core is always going to about 90% to 98% cpu utilization while other core is showing normal (about 5% to 10%) we check with- sh process cpu----- its shows iosd is taking 50.1 % sh platform health------ it show two process is taking too much cpu using 1. K5L3Unicast Adj Tabl ------ 43.14% 2. K5 L2 Hardware Addre ----- 56.93% Sh process cpu sorted------ its showing iosd is taking cpu utilization 52.25% sh platform cpu packet statistics all------- output is attached. all out put is attached. This switch is gateway of our LAN. what should further we take the action to resolve this issue. I do not understand how to diagnose further, please help us. Regards vinod 9810966625
... View more
Labels:
Created by
vinodk_gupta
in Network Security
12-18-2013
12-18-2013
Hi,while creating site to site VPN/IPSec Tunnel on cisco ASA, can we put
two peer ip address, one wi...
12-17-2013
Hi,We have Three ISP Link (20 Mbps each) at HO Location & respectively
connected on three seperate I...
Created by
vinodk_gupta
in Network Security
04-23-2012
04-23-2012
Hi,We have already implemented Cisco client VPN service on Cisco ASA. My
Cisco VPN ip pool is config...
Created by
vinodk_gupta
in Network Security
04-21-2012
04-21-2012
Hi,We have already implemented Cisco client VPN service on Cisco ASA. My
Cisco VPN ip pool is config...
Created by
vinodk_gupta
in Network Security
04-03-2012
04-03-2012
Hi,My internet link is connected on Internet Router & below downwards
Cisco ASA 5520 is connected.AS...
04-03-2012
Existing Network setup:*************************we have core switch
(cisco 4510) & its default route...
03-08-2012
Hi,I have one WLC 4402 & arround 29 Access point (1130) in our
enterprise network. Wireless users LA...
01-28-2012
Hi Neeraj,Thank, I am getting fallback also. Now my problem has been
comletly resolved.once again th...
01-27-2012
Hi Neeraj,Thank you very much our problem has been resolved.For
redundancy purpose, lets suppose our...
01-25-2012
Hi, neerajThanks a lot. Now its working as per your suggestion but
facing one problem after applying...
01-23-2012
Hi,our branch Location is connected with Head office via two different
ISP. one is Reliance Leased l...
12-26-2011
Hi,we have cisco ASA 5510 with ios ver 8.0(4).we are getting following
log. what is the root cause f...
12-14-2011
Hi,we have cisco ASA 5510 with ios ver 8.0(4).we are getting following
log. what is the root cause f...
Public Statistics
| Date Registered | 10-07-2010 12:32 AM |
| Date Last Visited | 08-18-2017 03:54 AM |
| Total Messages Posted | 26 |
