Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi All,I have a network with multiple VLANs, all being firewalled on an ASA 5520. I want to be able to share drives and printers between subnets, yet even when I place a permit ip any any rule in both firewall policies, it doesnt work. It works fine ...
Hi All,I have a Cisco3560G switch that has a route map places on one of the SVI interfaces. I am trying to tftp from the switch to the NMS (which is on the same VLAN) yet when the route map is in place, it fails (although the NMS see's the traffic, i...
Hi All,I have my AIP-SSM set up working with my 5520 ASA, and the device is passing packets, but how do I actually confirm it is doing what it is supposed to? I can see that it is processing packets, but I can see no way of verifying what it is doing...
Hi All,I cannot seem to ping from the outside of my 5520 firewall to an inside network. I have a single physical outside interface connected to a Layer 2 switch, with a laptop connected to it. This is on network 10.11.131.0/28. From there, I cannot p...
Hi Everyone,Im a NAT newbie so any help would be greatly appreciated, but Im looking to NAT an internal address to the outside world. So, I have a remote host that I wish to connect to an internal host, but on a pseudo address. So I need the firewall...
Ok, then you need to tweak your priorities so that the secondary uplink to the Cisco is non favoured in STP. That will allow for STP to make the primary uplink and the new link to be forwarding.Dan
Ok, so changing the Spanning Tree mode to MST on the Cisco, enabling STP on the HPs, then issuing a Spanning Tree Root command on the Cisco should do the trick.Remember, one of the interfaces on the new link will not forward traffic.Dan
its ok, resolved it.I needed a deny statement in the route map for the traffic from NMS to switch. As below:SEP-CSW-01#sh ip access-list Management-Route-Map-ACLExtended IP access list Management-Route-Map-ACL 10 deny icmp any host 10.11.130.162 ...
