Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About brierleyIT
Stats
Member since
05-18-2011
25
Posts
0
Helpful
0
Solutions
01-28-2014
08:19 AM
I have a Cisco SA520W that has several "Clock kew detected" messages appearing in the logs. Does this indicated a device problem? The system time appears to be accurate on the device.
... View more
Labels:
Created by
brierleyIT
in Small Business Security
in Small Business Security
12-20-2012
01:36 PM
12-20-2012
01:36 PM
Tom, I was able to create the 2nd IKE on both routers and then disabled the VPN policies on both sides, switched 1 set on each to use the 2nd IKE and then enabled the policies again on both sides. Both tunnels connected, however I have the same results - not able to ping hosts in the 10.15.0.0 network from the 192.168.1.0 subnet and vice versa. When I attempt to access a shared folder \\10.15.0.x\share the path cannot be found. When I view the status of the IPSec VPNs, I did notice that the counter shows activity through the connection from Site A, but nothing from Site B
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
12-20-2012
07:59 AM
12-20-2012
07:59 AM
Hello Tom, Both routers have 2 VPN Polices (1 for each subnet in Site A) which point back to 1 IKE policy. Regards, Doug
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
12-20-2012
07:43 AM
12-20-2012
07:43 AM
I am having an issue with passing traffic through the VPN tunnel on one of two subnets. A site-to-site VPN has been established throught 2 SA520W's running 2.1.71 firmware. Site A Subnet 1 : 192.168.1.0/24 Subnet 2: 10.5.0.0/24 Site B Subnet 1: 10.15.0.0/24 There are 2 VPN Policies created for each subnet that share the IKE Policy for the VPN Tunnel. When I display the IPSec VPN Status, both VPN Tunnel/Polices show that they are established from both sides. From Site B, I cannot ping or access remote resources in subnet 1. From Site A, I am not able to ping or access remote resources in Site B from a host on subnet 1. I have disabled/enabled the policies on both sides (and have also restarted the SA520W's) without success. I have not seen any issues reported in the logs.
... View more
Labels:
Created by
brierleyIT
in Small Business Security
in Small Business Security
09-20-2012
05:28 AM
09-20-2012
05:28 AM
Jason, that would be great if you could take a look at this for me. I look forward to your response.
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
09-12-2012
06:58 AM
09-12-2012
06:58 AM
Would enabling RIP v2 help out in this scenario to advertise/publish the routes to the other networks through the remote access connection? I also have a layer 3 Cisco SF300-24 switch that sits behind the SA520W.
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
09-12-2012
06:54 AM
09-12-2012
06:54 AM
I have been trying to accomplish the same task without success.
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
07-30-2012
01:21 PM
07-30-2012
01:21 PM
Can hairpinning be configured/enabled on the SA520W to resolve this issue?
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
06-26-2012
08:58 AM
06-26-2012
08:58 AM
This is still presently an unresolved issue for me, and I have more time to work on it now. Does anyone have a solution using the IPSec VPN client?
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
02-21-2012
07:24 AM
02-21-2012
07:24 AM
Hello Randy, The site-to-site tunnel A-B has 2 IPSec policies: 1. Local Traffic 10.10.0.0/24 -> Remote Traffic 10.0.0.0/24 2. Local Traffic (from mode config range) 192.168.12.0/24 -> Remote Traffic 10.0.0.0/24 The remote access VPN for site A has 1 IPSec policy: 1. Local Traffic 0.0.0.0 -> Remote Traffic "Any" Let me know if you would like me to send the config file. Doug
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
02-21-2012
06:03 AM
02-21-2012
06:03 AM
Is this a limitation on the SA520W? When I connect with the IPSec client and observe the secured routes I see the local subnet 10.10.0.0 and there is also 192.168.25.0 (this is the default VLAN assigned to the cisco-quest wireless network). How is that route being published to the IPSec client?
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
02-17-2012
11:28 AM
02-17-2012
11:28 AM
Randy, Thanks for the response. Here is my configuration in more detail. The remote access VPN policy on the SA520W is using mode config with a range of 192.168.12.100-.254 (Split Tunnel is also enabled).
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
02-17-2012
08:46 AM
02-17-2012
08:46 AM
I have tried adding static routes on both the client and router but have not had success. Is this a configuration issue or a device limitation? The dynamically assigned IP addresses on the SA520W under the VPN configuration cannot be associated with a VLAN.
... View more
Created by
brierleyIT
in Small Business Security
in Small Business Security
02-07-2012
10:19 AM
02-07-2012
10:19 AM
At site A, I have a SA520W with site-to-site connections to sites B, C, D and E. From within the office I can ping all of the remote subnets. Using the Cisco VPN client and connecting to the router at site A, I would like to be able to access the subnets from B, C, D and E. Can this be done by adding additional VPN polices for the IPSec client?
... View more
Labels:
Created by
brierleyIT
in Small Business Security
in Small Business Security
11-08-2011
05:46 AM
11-08-2011
05:46 AM
Hello Julio, We are running the 2.1.51 firmware on the SA520W now and the application server is running the Sentinel RMS License Manager. I will need to enable the logging and run some tests again. Regards, Doug
... View more
01-28-2014
I have a Cisco SA520W that has several "Clock kew detected" messages
appearing in the logs. Does thi...
Created by
brierleyIT
in Small Business Security
12-20-2012
12-20-2012
Tom, I was able to create the 2nd IKE on both routers and then disabled
the VPN policies on both sid...
Created by
brierleyIT
in Small Business Security
12-20-2012
12-20-2012
Hello Tom,Both routers have 2 VPN Polices (1 for each subnet in Site A)
which point back to 1 IKE po...
Created by
brierleyIT
in Small Business Security
12-20-2012
12-20-2012
I am having an issue with passing traffic through the VPN tunnel on one
of two subnets. A site-to-si...
Created by
brierleyIT
in Small Business Security
09-20-2012
09-20-2012
Jason, that would be great if you could take a look at this for me. I
look forward to your response.
Created by
brierleyIT
in Small Business Security
09-12-2012
09-12-2012
Would enabling RIP v2 help out in this scenario to advertise/publish the
routes to the other network...
Created by
brierleyIT
in Small Business Security
09-12-2012
09-12-2012
I have been trying to accomplish the same task without success.
Created by
brierleyIT
in Small Business Security
07-30-2012
07-30-2012
Can hairpinning be configured/enabled on the SA520W to resolve this
issue?
Created by
brierleyIT
in Small Business Security
06-26-2012
06-26-2012
This is still presently an unresolved issue for me, and I have more time
to work on it now. Does any...
Created by
brierleyIT
in Small Business Security
02-21-2012
02-21-2012
Hello Randy,The site-to-site tunnel A-B has 2 IPSec policies:1. Local
Traffic 10.10.0.0/24 -> Remote...
Created by
brierleyIT
in Small Business Security
02-21-2012
02-21-2012
Is this a limitation on the SA520W? When I connect with the IPSec client
and observe the secured rou...
Created by
brierleyIT
in Small Business Security
02-17-2012
02-17-2012
Randy,Thanks for the response. Here is my configuration in more detail.
The remote access VPN policy...
Created by
brierleyIT
in Small Business Security
02-17-2012
02-17-2012
I have tried adding static routes on both the client and router but have
not had success. Is this a ...
Created by
brierleyIT
in Small Business Security
02-07-2012
02-07-2012
At site A, I have a SA520W with site-to-site connections to sites B, C,
D and E. From within the off...
Created by
brierleyIT
in Small Business Security
11-08-2011
11-08-2011
Hello Julio,We are running the 2.1.51 firmware on the SA520W now and the
application server is runni...
Public Statistics
| Date Registered | 05-18-2011 06:41 AM |
| Date Last Visited | 08-18-2017 03:55 AM |
| Total Messages Posted | 25 |
