About Kirov11

Kirov11 · 03-26-2025

Dear Expert,I ran packet-tracer for traffic from 10.41.201.252:80 (VLAN 201) to 192.168.104.191:443. Initially, the packet was dropped at Phase 8 (VPN - Encrypt) due to an ACL restriction. However, when tested again, the traffic was allowed successfu...

Kirov11 · 04-08-2024

Dear Everyone,Cisco Firepower Extensible Operating System (FX-OS) v2.12.0 (build 499)Cisco Firepower 2130 Threat Defense v7.2.4 (build 165)Model : Cisco Firepower 2130 Threat Defense (77) Version 7.2.4 (Build 165)I need help configuring an IPsec VPN ...

Kirov11 · 11-11-2024

Hi Everyone, Issue has been solved by matching the Child SA between side.Thank you for the support.

Kirov11 · 04-14-2024

Hi,You're right that the 'ANY' rout should be specified. Yes, I've added the AWS prefix 10.16.0.0/13. There are two possible changes I need to make: following AWS's recommendation to use the CIDR 0.0.0.0/0 and removing the manually added static route...

Kirov11 · 04-09-2024

Hi @MHM Cisco World Thank you for reply here is Internal IP to Remote Site. > packet-tracer input vlan20-fwmgt tcp (172.21.11.26) (1024) 10.17.0.159 www detailedPhase: 1Type: ACCESS-LISTSubtype:Result: ALLOWElapsed time: 29855 nsConfig:Implicit Rule...

Member Since	‎04-08-2024 10:11 PM
Date Last Visited	‎05-05-2025 02:06 AM
Posts	5

User Statistics

User Activity

Inconsistent VPN Tunnel Traffic Behavior – Initial Drop, Then Allowed

VPN site-to-site (Amazon Web Services) : NAT Exempt

Re: VPN site-to-site (Amazon Web Services) : NAT Exempt

Re: VPN site-to-site (Amazon Web Services) : NAT Exempt

Re: VPN site-to-site (Amazon Web Services) : NAT Exempt