Does anyone know which networks are selected by the harware client to be sent to the vpn headend device?  Are the networks select from the static routes? or from the routes on the routing table (received via a routing protocol?)? is there a way to influence this decision? thanks! Diogo ... View more

I have a newly stablished VPN between a ASA 5510 and the VPN3030 concentrator.  The session is successfully established, but traffic flows only from the ASA to the 3030 and never on the opposite direction.  From the VPN3030 point of view, the Bytes Received counter will increase over time while the Bytes Transmitted count will remain in 0. Any ideas? thanks Diogo ... View more

Hi, got into a dead end here. I have a pair of ASA firewalls running as active/standby. I'd like to use the 'failover exec' to issue commands on the standby firewall via the active one. This shouldn't be a problem, but we have AAA command authorization configured. And when the active ASA tries to issue a command on the stadby ASA, it gets a 'authorization denied' message. At the ACS we see the auth request being denied, the ASA sends the request using the 'enable_1' user, instead of using the same user connected to the active ASA. Any clues on how to go around this? thanks! ... View more