Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
On firewalls such as the Cisco ASA, is it sufficient to allow only port 21/tcp in order to permit FTP Active Mode data transfer?Client → Server (21/tcp)Server (20/tcp) → ClientIf I allow port 21/tcp, will the system track the data connection and auto...
For an IPsec SA established via route-based IPsec, if traffic ceases on the standby router, does the SA get deleted when its lifetime (86,400 seconds) expires?Please let me know if there are any other conditions or timer values that trigger deletion....
For our IPsec connection, our site uses policy-based IPsec, while the remote site uses route-based IPsec.When I changed our site from policy-based to route-based, the router’s tunnel interface went up and the connection was encrypted, but the count o...
In a policy-based IPsec redundant configuration, if Router 1 fails, an IPsec SA inconsistency occurs between Router 2 and the remote VPN device, preventing communication from resuming. Therefore, we have automated the execution of the clear command v...
When establishing multiple VPN peers with a single router, is it okay to configure the IKEv2 and IPsec profiles together?Or is it better to configure them separately for each peer?The peer addresses are different, but the PSK is the same. crypto ikev...
@Rob Ingram I didn't explain that clearly enough.When is the tunnel interface deleted if it goes down?Since two routers share a single virtual IP address and use this IP to establish a VPN peer connection with a single encryption device on the other ...
@Rob Ingram Thank you.So, the encapsulation types are different. Specifically, how should I configure the settings to prevent GRE from being used?Does that mean the other party is using transport mode?
@Rob Ingram We do not have details about the other party’s equipment.We are using an IOS router (ISR900 series).Since there were no issues when we used policy-based routing, the route to the peer’s IP address or network on the other device should be ...
