Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have an ASA5510 connected to a computer running Windows 7 (the NTP Server) on its "inside" interface.Using the ASDM, I have configured the ASA5510 to use the Windows 7 as its NTP server (my architecture forces me to use a local machine as an NTP se...
I am testing VPN tunnels in a lab. I have the following (simple) setup: -one ASA5505 has an "inside" interface with address 192.16.99.40/24 and an "outside" interface with address 205.192.0.2/24 -one computer with address 192.16.99.1/24 ("Client") ...
good day,I am setting up a site-to-site VPN between a SonicWALL NSA2400 and a Cisco ASA5505. I am in a test lab with a simple setup:"Server" computer with IP address 192.0.99.1/24, connected to NSA2400 on its LAN interface, IP address 192.0.99.40/24N...
me again...I guess that the Windows implementation of NTP does not satisfy the ASA:CCG-SHIP-FWL(config)# show ntp associations detail192.16.99.1 configured, insane, invalid, stratum 1ref ID .LOCL., time d34abbb0.b985b0ae (19:44:48.724 GMT Tue May 1 ...
I have turned on all ntp debugging, and run "show ntp status" and "show ntp assoc":CCG-SHIP-FWL(config)# show debugdebug ntp adjust enabled at level 1debug ntp authentication enabled at level 1debug ntp events enabled at level 1debug ntp packets ena...
yes, I have tried sniffing NTP requests are received from the ASA NTP replies are sent by the NTP ServerI have also turned off the firewall on Windows (couldn't get my VPN to work otherwise).
In my very limited experience, both sides have to have NAT-T enabled, otherwise the side that doesn't have NAT-T enabled won't be able to read part of the IP header, since it is encrypted.Good luck!Pedro
