Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all,We currently have two sites (A and B) with a private 20Mbps link between sites. Our primary Internet pipe is located at site A (Pipe A). We do have a secondary pipe at site B (Pipe B). We're using EIGRP to redistribute routes, including static...
Hi all,I have read that PIX version 7 and up allows "hairpinning" encrypted traffic. That's beautiful, but did someone find out how to route regular IP traffic through the same interface (same security level) on a PIX running version 7up? Alernativel...
Hi,Can you do a "show service-policy police" and tell me if you have any "conformed" or "exceeded" packets in there? (or just post the output). there you'll have a much better view of your policy...RegardsSimon LaurinPlease rate if it helps
Hi,Generally speaking, ICMP echo and echo-reply packets(types 8 and 0) will create a PAT xlate using port "0". The source IP of your ping request will be translated to the "global" or "PAT overload" address of your Cisco device and then the reply wil...
Hi,As stated in that document, "the two units in a failover configuration must have the same major (first number) and minor (second number) software version." So you're only half through your upgrade procedure, it is expected that failover won't resu...
Hi Jeff,I think that version 6 actually requires that the SCEP service run on port 80. From the command reference: ca identity ca_nickname [ca_ipaddress| hostname [:ca_script_location] [ldap_ip address| hostname]] Sorry I never actually used a differ...
Hi,did you also issue the "ca enroll somewhere.net" command? you can view the enrollment process with the "debug crypto ca 255" command. Kind regards,Simon Laurin
