Hello Nwag,When you perform a NAT translation, the prefix that you define is not added to the translation, it simply narrows down to source and destination IP addresses, the prefix or mask is used more details to static network translations and to de...
In fact, both PAP and CHAP can use unidirectional authentication, so it depends from the authentication type that you use that will define if you need both or just one.CHAP has three authentication types:Both, by the peer and by this end.PAP has two:...
Mukesh,The only problem I can see is that you have VLAN 5 on the subinterface, but not on the main interface, this means that the traffic might not get to the other end due to the Dot1q encapsulation. If you were to set both to the same dot1q tag it ...
Hello Jay,This question should be directed to the Security area, feel free to upload the configuration from the ASA for further reference.Regards,Alex SanchezCCIE R&S #37454
The only possible way is if the tunnel goes down completely, by that I mean a up/down state, if this happens you can use tracking for that interface Tunnel state and decrease the HSRP priority on the router where the tunnel fails, using preempt on th...
