Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,I am trying to implement Authentication for a particular ACL on the ASA, i.e. whenever that particular ACL is matched, the ASA will authenticate the user with either local database or AAA server. I have seen the document "Configuring AAA for c...
Hi,I am trying to implement Authentication for a particular ACL on the ASA, i.e. whenever that particular ACL is matched, the ASA will authenticate the user with either local database or AAA server. I have seen the document "Configuring AAA for cut-t...
Is it possible to NAT a single Source IP to different IPs on per VPN tunnel?For instance, if 10.10.10.10/32 is server IP, and we want to nat this IP to 192.169.1.10/32 to VPN tunnel-x and 172.18.1.10/32 to VPN tunnel-y. It would be greatful if you co...
We need to block traffic coming from interface X to Interface Y on ASA with IOS 7.2(4)33.Lets say, 10.10.10.0/24 coming from Interface/zone X needs to communicate to 192.168.1.0/24 which resides on interface/zone Y (there are other subnets residing i...
Hi,I have a Juniper firewall config of 32,000 lines. I want to convert this into Cisco ASA v.8.3. Is there any pearl script available which can do that for me?regards,Mohsin
Hi Lucien,Thanks for being here with us for our help.Nexus 5K can support only 12 N2K fiber extenders at a time. That is out of 20 ports, only 12 ports can be used to connect to N2Ks. Is this a true statement, if yes then whats the purpose of remaini...
access-list SZ-1 deny ip 10.10.10.0 255.255.255.0 any (since any is on SZ-2 you need to define what any is)This is my point.. I don't want to care whatever is on SZ-2. How can we deny traffic coming from 10.10.10.0 from going to SZ-2 interface for AN...
Hi Maria,This is scenario where i have to migrate JunOS configuration of 32,000 lines to Cisco ASA config. How would you suggest me now, should i go command by command, or should i search for a perl script? i m not new to Cisco firewalls, but when it...