About haiyingwei

haiyingwei · 06-01-2010

We have one remote ipsec tunnel group, the clients' address pool use 172.18.33.0/24 which setup from "ip local pool" command. The remote cliens have to use full ipsec tunnel.Due to ip overlap or route issue, we would like NAT this local pool from 172...

haiyingwei · 03-11-2008

We have a CSS11501 which do the load balance and SSL proxy for mail cluster. Mail servers behind CSS need originate traffic to outside through different tcp and udp ports. We setup source group which nat private ip adderss to public ip for outbound c...

haiyingwei · 08-20-2007

I can ping the FWSM interface that is directly connected to my inside network, but I am unable to ping outside interfaces. All applications(like http, ssh etc) from inside network to outside works fine. I can also ping switch's vlan interface which c...

haiyingwei · 06-02-2010

Federico;I just did test with these static command. It works perfect as we want.Thanks very much for your help!Haiying

haiyingwei · 06-01-2010

FedericoThanks for your reply!Yes, we want 172.18.33.0 nat to 192.168.3.0 when vpn clients access certain servers through asa outside interface. I am not sure if policy NAT can do this for vpn local pool.Due to complicated routing and other reason, w...

haiyingwei · 03-12-2008

Gilles;Thanks for your reply! We haven't changed anything as I know. We had problem with UDP packets before. When backend servers tried connect to outside DNS servers through udp 53, we saw packet drop. We rerouted DNS traffic bypass CSS.This time ba...

haiyingwei · 08-21-2007

Yes, I can ping FWSM's outside interface from a device outside. Thanks for your reply!

haiyingwei · 07-13-2005

We had same problem as you after we upgraded concentrator from 4.1.5.B to 4.1.7.F. Our Movian vpn client dropped connection after phase 1 completed.Did you find work around for your movian client or you downgrade concentrator's OS?Thanks

Member Since	‎01-02-2003 01:41 PM
Date Last Visited	‎08-30-2023 12:58 AM
Posts	8

User Statistics

User Activity

Can ASA setup NAT for vpn local pool

CSS leak un-natted ip address to outside.

Ping FWSM's outside insterface failed

Re: Can ASA setup NAT for vpn local pool

Re: Can ASA setup NAT for vpn local pool

Re: CSS leak un-natted ip address to outside.

Re: Ping FWSM's outside insterface failed

Re: Problems with VPN3005 OS 4.1.7.F and Movian Client