Hej and thanks in advance for helping out with any clues to resolve this issue... I'm a little confused and puzzeled about how to cover my trails, regarding to the Great China Firewall when using VPN/Zone Based Firewall.My goal is to be able to conne...
Hi guys and thanks again for taking you time to help explain..My goal is to only allow 5 ports through from INTERNET-ZONE to DMZ-ZONE and to specific ip addresses in object-groups.HTTP-HTTPS-DNS to my webserver IMAP-SMTP to my mailserverBut I'm a lit...
Hi again and thanks in advance.I had some good help from Georg Pauwen before and he found som issues and directed me in the right direction but I'm still stocked with this problem even after implementing his fixes My Zone Based Firewall setup. My pr...
Hi again and thanks in advanceI just vent from static firewall to Zone Based Firewall as sugested in another discussion and so far so god and my setup nearly works perfect !! and here is the schematic My issue is that when I connect remotely via VP...
Hi All and thanks for any clues or solutions. First Issue My VPN setup seems to work ( Connects fine to my Iphone and Ipad) even with some issues in the log !! ?? Should I just ignore those ?? %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mo...
Hey GeorgI’m a little challenged by the fact that the 2921 Router is a live production Router.But I’ll start to be 100% sure that the ZBF could be the problem by removing all the ZBF statements "zone-member security xxxx” from the interfaces - and se...
Thanks again George PauwenHere is the complete config..version 15.2hostname R2911boot-start-markerboot system flash c2900-universalk9-mz.SPA.154-3.M.binboot-end-marker! card type command needed for slot/vwic-slot 0/2no logging consoleenable secret 5 ...
Final and Full working config - regarding ZBFobject-group network GROUP_DMZ_FILEMAKER description FILEMAKER server in DMZ host XXX.XXX.XXX.99object-group network GROUP_DMZ_MAIL description EMAIL servers in DMZ host XXX.XXX.XXX.100 host XXX.XXX.XXX....
I finally found a solution to my problem ;-) My (DMZ) and (Remote VPN) are on the same IP range, BUT in different ZONES - AND that is a problem !! - when (Remote VPN) is in the INTERNET-ZONE. So I had to move (Remote VPN) into the (DMZ-ZONE) and then...
