Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About henry_niekoop
08-14-2019
Stats
Member since
10-31-2016
12
Posts
0
Helpful
0
Solutions
Created by
henry_niekoop
in IP Telephony and Phones
in IP Telephony and Phones
07-23-2019
11:41 AM
07-23-2019
11:41 AM
WE are looking to move from analog phones to VOIP with the service provider Ring Central. I understand we need internet to keep the VOIP phones connected to Ring Central. They recommend we use QOS on our network equipment. We have a mix of 3850(L3 Switch), 2960X, 2960S and 2960C switches. Currently we have no QOS configured on any of the switch and routers. Any recommendations how to implement this (multiple sites)? THank you.
... View more
Created by
henry_niekoop
in VPN and AnyConnect
in VPN and AnyConnect
07-19-2019
10:35 AM
07-19-2019
10:35 AM
Hi, can you create 2 separate tunnels (for different networks of course) for 1 VPN peer? WE are having a tunnel between an ASA and sonicwall to connect 2 of our internal sites (ASA) to an outside vendor (sonicwall VPN device). THe tunnel was working fine when the outside vendor was connecting to only 1 of our internal sites. However when the networks of the second internal site were added to the tunnel the tunnel keeps disconnecting. So I wonder what this issue could be and actually also wonder if we can create two separate tunnels for each internal site to the outside vendor using the same peer address.
... View more
Labels:
Created by
henry_niekoop
in Switching
in Switching
11-05-2017
08:11 PM
11-05-2017
08:11 PM
How does using the DefaultL2LGroup to setup a site to site VPN with a DHCP ip address on one side affect other site to site VPN's on the same ASA?
And I understand when creating a new tunnel group (not the DefaultL2LGroup) you have to configure the following command Can this negatively affect or conflict with the existing VPN settings (if multiple site to site VPN's are configured) on an ASA in anyway?
crypto isakmp identity key-id DynamicSite2Site1
... View more
Labels:
09-21-2017
10:55 AM
Forgot to ask, can this be done with L3 switches (ege 3850s or 3750s?) too? Or would q in q tunneling work to accomplish this?
... View more
09-20-2017
06:29 PM
Hi, are there ways to extend a subnet that's configured on one router to another router that's in a different building or site?
... View more
Labels:
07-11-2017
01:51 PM
Fro company B I added "access-list outside_cryptomap extended permit ip interface outside object Outside_RealA"
and for company A I added "access-list outside_cryptomap extended permit ip object Inside_RealA host ipaddressremotefirewall"
It still does not work. not sure what I'm missing.
... View more
07-10-2017
02:42 PM
When I test this with the packet tracer I see that packets get dropped by an access list. Are these access lists correct?
Company A:
object network Inside_RealA
subnet 172.16.10.0 255.255.255.0
object network Remote_subnet5
subnet 172.16.5.0 255.255.255.0
object network Remote_subnet6
subnet 172.16.6.0 255.255.255.0
object network Remote_subnet7
subnet 172.16.7.0 255.255.255.0
object-group network subnets5-6-7
network-object object subnet5
network-object object subnet6
network-object object subnet7
access-list outside_cryptomap etended permit ip object Inside_RealA object object-group subnets5-6-7 nat (inside,outside) after-auto source static Inside_RealA Inside_RealA destination static subnets5-6-7 subnets5-6-7
Comany B:
object network Outside_RealA
subnet 172.16.10.0 255.255.255.0
object network Inside_subnet5
subnet 172.16.5.0 255.255.255.0
object network Inside_subnet6
subnet 172.16.6.0 255.255.255.0
object network Inside_subnet7
subnet 172.16.7.0 255.255.255.0
object-group network subnets5-6-7
network-object object subnet5
network-object object subnet6
network-object object subnet7
access-list outside_cryptomap etended permit ip object-group subnets5-6-7 object Outside_RealA nat (inside,outside) source dynamic subnets5-6-7 pat-pool Interface destination static Outside_RealA Outside_realA
... View more
Created by
henry_niekoop
in VPN and AnyConnect
in VPN and AnyConnect
07-09-2017
08:11 AM
07-09-2017
08:11 AM
Hi, I need to setup a site to site VPN with an external vendor but the vendor has a local subnet that is overlapping with our network. We would not like to use additional subnets for mapping. I'm thinking about configuring PAT (use one of the interfaces of the ASA), it's ok if communication only gets initiated by the external partner.
How do I configure PAT in this scenario and the access lists?
Company A
subnet 172.16.10.0/25. Need access to subnets 172.16.5.0/24, 172.16.6.0/24 and 172.16.7.0/24 in company B's network
Company B (large network)
subnet 172.16.0.0/16
... View more
Labels:
Created by
henry_niekoop
in Firewalls
in Firewalls
06-18-2017
08:36 AM
06-18-2017
08:36 AM
Which version of the ASA software actually has the fix for this vulnerability? HTTP Strict-Transport-Security Header CSCvc82150.
... View more
Labels:
05-05-2017
01:59 PM
THanks, how do I lock the restricted users to one policy/profile?
... View more
Created by
henry_niekoop
in VPN and AnyConnect
in VPN and AnyConnect
04-27-2017
08:17 PM
04-27-2017
08:17 PM
How do you restrict some users to some internal subnets on an ASA? Are VPN filters the only way? And would you have to create a separate profile for the restricted VPN users? THank you.
... View more
Labels:
Created by
henry_niekoop
in IP Telephony and Phones
07-23-2019
07-23-2019
WE are looking to move from analog phones to VOIP with the service
provider Ring Central. I understa...
07-19-2019
Hi, can you create 2 separate tunnels (for different networks of course)
for 1 VPN peer? WE are havi...
Created by
henry_niekoop
in Switching
11-05-2017
11-05-2017
How does using the DefaultL2LGroup to setup a site to site VPN with a
DHCP ip address on one side af...
09-21-2017
Forgot to ask, can this be done with L3 switches (ege 3850s or 3750s?)
too? Or would q in q tunnelin...
09-20-2017
Hi, are there ways to extend a subnet that's configured on one router to
another router that's in a ...
07-11-2017
Fro company B I added "access-list outside_cryptomap extended permit ip
interface outside object Out...
07-10-2017
When I test this with the packet tracer I see that packets get dropped
by an access list. Are these ...
Created by
henry_niekoop
in VPN and AnyConnect
07-09-2017
07-09-2017
Hi, I need to setup a site to site VPN with an external vendor but the
vendor has a local subnet tha...
06-18-2017
Which version of the ASA software actually has the fix for this
vulnerability? HTTP Strict-Transport...
Created by
henry_niekoop
in VPN and AnyConnect
04-27-2017
04-27-2017
How do you restrict some users to some internal subnets on an ASA? Are
VPN filters the only way? And...
Public Statistics
| Date Registered | 10-31-2016 07:34 AM |
| Date Last Visited | 08-14-2019 10:20 AM |
| Total Messages Posted | 12 |
.jpg "VIP Advisor"){kind=icon}
