About chris phillips

chris phillips · 02-16-2018

Our IP SLA udp-jitter for a number of devices beyond an ASA suddenly stopped working when the target OS was updated from 12.x to 15.x. We have since discovered that the target is responding back on a different IP than it received the connection on an...

chris phillips · 11-08-2017

We have a pair of ASA 5520's in a cluster running asa 8.2(5)13 where the primary member has been off line for ~ 6 months. I want to reintroduce the primary back into the cluster. There have been numerous changes made to the config of the secondary-...

chris phillips · 02-16-2018

I actually did it my way but got some downtime and wished I did it your way.I ensured no patch cables in the bad unit and powered it onon the running unit I told it to be the primaryi then patched the sync cable into the bad unit.despite me telling t...

chris phillips · 12-19-2017

As confirmed from Cisco: The cisco 3850 series does not support NAT, It might accept the commands, but it does not do NAT. https://supportforums.cisco.com/t5/lan-switching-and-routing/3850-nat/m-p/2479858#M294574 Unfortunately the platform does n...

chris phillips · 11-09-2017

that is weird that it works without the full config, PRTG is good but i don't think its good enough to defy the ASA config :) I can't test it right now but i'm wondering if you need the word "destination", maybe substitute "destination" for the act...

chris phillips · 11-08-2017

Ensure the new subnet 11.10.55.XXX is a level above the DMZ, for example the DMZ is level 50 so make 11.10.55.XXX level 60, that will permit 11.10.55.XXX access to the DMZ and prevent the DMZ access to 11.10.55.XXX

chris phillips · 11-08-2017

I think its a routing issue, how does the ASA know which interface to reply back to User_A? the ASA can choose to reply back via ASA INT_A or ASA INT_B. I'm guessing you want it to reply back on the same interface it received the connection on, but...

Member Since	‎05-22-2015 08:12 AM
Date Last Visited	‎02-23-2018 08:23 AM
Posts	13
Total Helpful Votes Received	10

User Statistics

User Activity

IP SLA stopped working

Advice on the correct way to reintroduce the failed primary cluster member back into the cluster

Re: Advice on the correct way to reintroduce the failed primary cluster member back into the cluster

Re: Connecting Internet to L3 Switch (3850) with ISP Modem

Re: ASA top talkers

Re: How-to access DMZ - ASA 5510

Re: Issue with remote connectivity over Leased Line and IPSec VPN (NAT/IP SLA issue?)