Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi People,I have a trouble with static nat statements in ASA 5510. Follow the cenario:Public IP 1 => 1.1.1.1Public IP 2 => 1.1.1.2Internal cluster IP => 2.2.2.2I have to do that when the public connections arrive to outside interface, ASA use static ...
Exactly, but when IKE messages are exchange between peers, they keep up and try recovery if this goes down. If this tunnel doesn't have any traffic, so can be down depending setup configuration.For example, in my environment, i use only ike keepalive...
Hi,If you trying use ip sla for only keep de tunnel established or active traffic, why you don´t use IKE Keepalive and DPD ?Look this document to check if it´s possible in your environment.http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guid...
Hi,Try look this document "http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml".First IKE message can indicate some problem with tunnel, although "icmp permit any outside" should be work if don't have any special setup...
Ok, the firewall accepted commands, but i believe that acl order is reverse.1)access-list pnat1 extended permit tcp host 2.2.2.2 eq www anyThis, the connection from 2.2.2.2 tcp port 80 is allowed to any.2)access-list pnat1 extended permit tcp any hos...
