Hi all,I have an ASA 5510 with several L2L VPNs configured. One of the L2L VPN needs me to configure "crypto isakmp identity key-id xxyyzz" instead of "crypto isakmp identity address". The problem is that this is a global command in the ASA and when ...
Hi all!I have a L2L VPN tunnel configured and working in an 837 router using this config:crypto isakmp peer address 10.10.10.10 set aggressive-mode password mypassword set aggressive-mode client-endpoint fqdn 20.20.hu.uiI need to configure this tunne...
Hi all,I am trying to establish two LAN-to-LAN VPN tunnels from my VPN 3000 Concentrator to the same peer address and I get an error message saying that it is not possible to have two LAN-to-LAN tunnels to the same peer address. The idea is that one ...
Hi all,Do you know of any bug in ASA SW where it is possible by default to pass traffic from an interface with a lower security level to an interface with a higher security level? Thank you,John
Hi all,Can someone please tell if it is possible to do software IDS/IPS in the ASA55xx series or do I need to buy the AIP-SSM module to do so?Thanks,John
By the way, in my tests I found out that in SW version 7.x the only command necessary to pass traffic from the outside interface to the inside interface is an ACL in the outside interface. NAT is not necessary. In SW version 6.x this did not happen, ...
