On 2821ISR 12.4.24T3, how can you explain ACE line 20 hit count, this should be 0 hit because matching should be done in ACE line 10it looks like some isakmp packets are not matched within object-group service OGs_VPNthis is why I added classical ace...

Hello,I am looking for a solution to carry one L2 Internet vlan on 10 remote dsl/Atm connected sites.For security, this L2 Vlan has no IP add and is not routable across internal networkOn each remote site, is a C870 router used for internal people.I ...

Hello CCIEs or not,2821 ISR IOS Firewall 12.4(24)T2 is connected to a second ISP through Vlan304 and cable router I added nat inside source route-maps in order to nat in each ISP addressing subnetsProblem is that inside FTP clients successfully conne...

Hello CCIEs or not,On my 2821 ISR IOS Firewall 12.4(24T2), since I added a new ISP and then nat inside source route-maps, inside FTP clients successfully connect to outside servers using active FTP but no more with previous passive mode.Many debugs w...

Hello all,On Cisco 2821 12.4(24)T1, this service Object-group in ACE lines 10 or 20 should be enough to filter IPsec activityI had to add lines 30 - 65 to get it working.Why line 30 or 35 see some isakmp packets ?Extended IP access list Acl_Outside ...