About brettborschel

brettborschel · 02-05-2011

I have a 100 site GETVPN network with 3 KS in my three datacenters. I want to modify the GDOI ACL by adding a couple extra lines for some new subnets that we are aquiring.What will the impact of these changes be? Will the remotes just get the new ACL...

brettborschel · 02-05-2011

If this is going over the internet your QoS will be pretty much worthless.

brettborschel · 10-07-2010

Everything else looks fine. Two last ideas...1. Maybe the PSK got mistyped. Remove and replace on both sides.2. Reload on the hub site firewall?

brettborschel · 10-07-2010

that is true. They also will not respond to pings on their outsideinterfaces by default and block traceroutes.

brettborschel · 10-07-2010

hmmm, strange...The command from the CLI is: packet-tracer input [src_int] protocol src_addr src_port dest_addr dest_port detailedGive that a shot for the other office.ASA's and PIX are a bit buggy with VPN. Try reloading the remote firewall. I know ...

brettborschel · 10-07-2010

I only saw that line on the remote site. Are you saying it was configured on the hub router too?Try using the packet tracer. That will tell us right off the bat where our problem lies.

Member Since	‎07-28-2005 09:27 AM
Date Last Visited	‎03-21-2021 02:25 PM
Posts	13

User Statistics

User Activity

GET VPN modifying KS ACL

Re: Lan-to-Lan Dynamic VPN with IPSec and QOS on Physical Interf

Re: VPN Tunnel up, But cannot ping across it??

Re: VPN Tunnel up, But cannot ping across it??

Re: VPN Tunnel up, But cannot ping across it??

Re: VPN Tunnel up, But cannot ping across it??