Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have Secure Client VPN to FMC, and the FMC has separate tunnel (VTI) to FPR-1120 ASA. The VTI tunnel is up, I can ping the peer interface from the ASA. BGP output shows:BGP router identifier 10.10.1.2, local AS number 64535
BGP table version is 3,...
Here is the scenario. We have a webserver that has sub directories of which need to be accessed by all. One particular directly would be restricted to only one network. www.internalwebserver.com/directory/project/example1 > accessible to allwww.inter...
Hoping to get some help or guidance on next step. I have a C1111-4p configured as a spoke that is on a LAN (i.e. NAT). The router is configured with a static IP on it's "outside" interface. Beyond this I have no control or insight. What I do know is ...
I know a couple years back, and couple OS revisions back, there was a significant change to how one could access via SNMP the ASA's inside interface through a L2L tunnel. I have encountered now 2x FPR1010 (ASAs) with v9.18(2) that through the VPN I c...
A few days back I had asked a question here regarding use of Windows L2TP client and ASA. Someone kindly responded pointing me to using Powershell to change the encryption Windows would use (as 3DES is depreciated on v9.18). I created a test VPN conn...
Hi Rob,I just had one huge Homer "DOH!" moment, I forgot I was messing around before with the NAT exempt rules....and for some reason had removed route-lookup. Once I rechecked that everything took off. Thank you very much for your help, I appreciate...
That guide worked for me, I was not able to get a route map in place however. Ultimately I did follow the guide and added an aggregate address. B 10.50.1.0 255.255.255.192 [20/0] via 10.10.1.1, 00:03:04Now the only catch is I am back to the ac...
Took me a bit to figure out to show this on the FTD:################FTD################
interface Tunnel1
ip address 10.10.1.1 255.255.255.252
!
router bgp 64534
bgp log-neighbor-changes
bgp router-id 10.10.1.1
bgp router-id vrf auto-assign
addr...
THis would be users on the internet hitting the outside zone/interface being allowed to access web server on the inside zone/interface. At the moment there is a policy to allow https to the webserver (that works). Now I was trying to tune it to have ...
Real IPs (public WAN) are obfuscated, internal/LAN I just changed subnet.I think in this case the problem may be this. The path from remote side is through X (doing traceroute) but the IKE is failing when I see it is coming from path Y. The customer ...
