About ZoCaAdmin

ZoCaAdmin · 07-29-2016

Perhaps one of you can help me with the following challenge. I'm setting up a site-to-site VPN, the router at SiteB says 'connected'. But I cannot connect pc's from SiteB to SiteA or viceversa. Both sites have a cable modem in bridge/transparent-mode...

ZoCaAdmin · 08-22-2016

Great, whe're getting closer! ASA-01-RO-PRI# packet-tracer input RO-IT icmp 172.16.6.4 8 0 192.168.1.101 detailPhase: 1Type: ACCESS-LISTSubtype:Result: ALLOWConfig:Implicit RuleAdditional Information: Forward Flow based lookup yields rule: in id=0x7f...

ZoCaAdmin · 08-22-2016

Hi, I've changed the NAT-rule, but no luck yet. The RO-IT interface is the one I'm using for configuring and testing, which is on the 172.16.6.1 net. The 172.16.4.x net is one of the Guest networks (oGuest2). Both networks are added to 'SITE-A_NETS'....

ZoCaAdmin · 08-19-2016

Hi Cristian, I did indeed have two ACL's on the VPN traffic (derp), so I removed the old one. But packets still got dropped. no access-list OUTSIDE_cryptomap extended permit ip 172.16.15.0 255.255.255.128 object SiteB-Inside I've removed the old NAT ...

ZoCaAdmin · 08-15-2016

Hi, I've added both objectgroups, the acl and nat in the ASA at SiteA. ASA-01-RO-PRI# packet-tracer input INSIDE icmp 172.16.6.4 8 0 192.168.1.101 detailPhase: 1Type: ACCESS-LISTSubtype:Result: ALLOWConfig:Implicit RuleAdditional Information: Forwar...

ZoCaAdmin · 08-12-2016

Thanks. Cant try this right now, but I'll let you know what happens....

Member Since	‎07-27-2016 02:52 AM
Date Last Visited	‎08-18-2017 03:55 AM
Posts	9

User Statistics

User Activity

Site-to-Site VPN, pings being blocked by NAT/firewall?

Great, whe're getting closer!

Hi, I've changed the NAT-rule

Hi Cristian,

Hi,

Thanks. Cant try this right