About Elijah Conn

Elijah Conn · 07-24-2015

I have a Nexus 5k with a 10k sfp configured for vlan 800 along with another port also configured for 800. This goes into an edge router which then goes into the outside interface of an asa 5545 (had to do it this way temporarily because I did not h...

Elijah Conn · 02-14-2014

The issue is that we can trace between networking equipment on tunnels involving the ISR routers using Firewall feature set, but we cannot trace to hosts. For example from (US)AS1, I can trace to (UK)CS1's 192.168.1.2 ip address, but not to host that...

Elijah Conn · 11-13-2012

We have configured WCCP on our L2 4507 in order to redirect traffic through the proxy. Recently we attempted to add exemptions to the rule through deny statements. For some reason the IP's that we denied still redirect through the proxy.ip wccp 0 g...

Elijah Conn · 07-25-2015

Ok, I figured it out. One word "overload", smhip nat inside source list NAT int g 0/0 over was added to the router and presto. as far as pinging the inside interface from the router, this will not be possible because of the translations on the fw. ...

Elijah Conn · 07-25-2015

That is correct (see router below). I have been scratching my head on this for two days now and cant figure it out. But I think it has something to do with the NAT statements on the FW or Router. cLAB-EF1# packet-tracer in inside icmp 10.200.0.2 8...

Elijah Conn · 07-24-2015

Thank you so much for your response. Yes this is an unorthodox setup. The only sfp port available to us was on the Nexus 5k so we had to use that as a L2 edge switch. I can ping the outside from the router, but cannot from the ASA. I am also able...

Elijah Conn · 02-18-2014

We were able to fix the traceroute problem by increasing the inspection timeout value to 20:ip inspect name insp-outbound icmp timeout 20thanks hunt-j

Member Since	‎11-13-2012 02:14 PM
Date Last Visited	‎08-18-2017 03:55 AM
Posts	7

User Statistics

User Activity

Another "(acl-drop) Flow is denied by configured rule" Issue

Cannot trace to hosts on ISR's using FW feature set

WCCP

Ok, I figured it out. One

That is correct (see router

Thank you so much for your

Cannot trace to hosts on ISR's using FW feature set