About robertson.dias

robertson.dias · 10-06-2010

Hi People,I have a trouble with static nat statements in ASA 5510. Follow the cenario:Public IP 1 => 1.1.1.1Public IP 2 => 1.1.1.2Internal cluster IP => 2.2.2.2I have to do that when the public connections arrive to outside interface, ASA use static ...

robertson.dias · 10-08-2010

Exactly, but when IKE messages are exchange between peers, they keep up and try recovery if this goes down. If this tunnel doesn't have any traffic, so can be down depending setup configuration.For example, in my environment, i use only ike keepalive...

robertson.dias · 10-08-2010

Hi,If you trying use ip sla for only keep de tunnel established or active traffic, why you don´t use IKE Keepalive and DPD ?Look this document to check if it´s possible in your environment.http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guid...

robertson.dias · 10-07-2010

Hi,Try look this document "http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml".First IKE message can indicate some problem with tunnel, although "icmp permit any outside" should be work if don't have any special setup...

robertson.dias · 10-07-2010

Thanks PK, i'll try first option. I believe that it will work. Any notice i post here.

robertson.dias · 10-07-2010

Ok, the firewall accepted commands, but i believe that acl order is reverse.1)access-list pnat1 extended permit tcp host 2.2.2.2 eq www anyThis, the connection from 2.2.2.2 tcp port 80 is allowed to any.2)access-list pnat1 extended permit tcp any hos...

Member Since	‎09-14-2010 06:24 AM
Date Last Visited	‎08-18-2017 03:55 AM
Posts	6

User Statistics

User Activity

[ASA] Port redirect from multiple public IP to single inside IP

Re: IP SLA Monitor VPN

Re: IP SLA Monitor VPN

Re: Help with ASA 5510 and 8.3

Re: [ASA] Port redirect from multiple public IP to single inside

Re: [ASA] Port redirect from multiple public IP to single inside