About fmugambi

fmugambi · 07-22-2024

Hello Team,I have a network as attached,I have a different thread on community to be assisted on the "passive-site" to redistribute the ipsec static routes from the vFTD to the core sw site 2. -This is still on progress as still not working as expect...

fmugambi · 07-18-2024

Hello Team,I have a network as below,Asa peers with isp using bgp.theres ospf for downstream and upstream routing.there is natting on asa public interface to ftd 40.18 interface, with 4500,500 services.Is it possible to use this FTDs 40.18 interface...

fmugambi · 07-15-2024

Hello Team,I have a setup as attached,I recently added isp b for redudancy. My vpns terminata at ftd level, on [66.0.10.10] - this is an example IP.on asa have done an acl called outside_in allowing any to connect to 66.0.10.10. and equivalent access...

fmugambi · 06-19-2024

Hello Team,I have a cisco asa firewall connected to ISP. I have allowed internet access of downstream devices on the asa.I have a case where, servers downstream are able to browse internet, but not able to ping for example 8.8.8.8.is there an acl res...

fmugambi · 05-28-2024

Hello guys, below is my topology,I have added internet fw and introduced ISP on site B.Before site B resources/ servers would go via mpls to site a to access internet.I introduced the above to make each site use its own isp respectively.I ran to cha...

fmugambi · 08-01-2024

Hi, thanks for your time on this,i understood how conditional routing comes into play here,but question on my end, which condition do i use? my remote ipsec networks are very diverse, they are not /24 networks, some are some are less. how do i cater ...

fmugambi · 07-26-2024

kindly share, not found solution for how active-routing will happen.

fmugambi · 07-25-2024

will test this by applying the as prepend attribute, and update here on the findings.its on prod net, so am waiting for the cr to be approved.thank you.

fmugambi · 07-25-2024

for initial test case, have used private IP on FTD natted at ASA.but on final prod network, i will have a public IP on FTD; p2p IP of /30 between ftd and asa.

fmugambi · 07-23-2024

am using bgp for this failover using as prepend. i make passive site less-prefferable than active site.

Member Since	‎07-17-2023 01:27 AM
Date Last Visited	‎08-07-2024 01:09 AM
Posts	220
Total Helpful Votes Received	19

User Statistics

User Activity

ROUTE MANIPULATION

IPSEC VPN

BGP

CISCO ASA

IP ROUTING

Re: ROUTE MANIPULATION

Re: ROUTE MANIPULATION

Re: BGP

Re: BGP

Re: ROUTE MANIPULATION