About chris

chris · 04-09-2014

Hi,I have a production network that I can't take down for maintenance. There is an ASA5505 in site A and a C800 router in site B. There is a leased line between the sites but the client also has an ADSL line which is currently being used as a backup ...

chris · 02-22-2012

Hi,I have two Cisco C2960 switches attached to each other using two ports configured as a port-channel. These are connected to two ASA5505's set up as active/standby. There are redundant connections between both switches and the firewalls. The firewa...

chris · 02-10-2012

Hi,I have an ASA5510 running version 8.2(5). I have set up a new network on interface Ethernet0/1.777 of the fwl. The firewall works perfectly with remote access VPNs but has now given me the error with the new network that has been set up:%ASA-5-305...

chris · 11-30-2011

Hi,We currently have a HP blade platform which has two Cisco CBS30X0 switches built into it running Version 12.2(55)SE. These are connected to two Cisco C2960 aggregation switches running Version 12.2(44)SE6. According to this article I need to upgra...

chris · 10-24-2011

Hi,I am going to try and set up a VPN using Easy-VPN between a Cisco 837 router and ASA 5520. Both devices are live and any downtime would need to take place out of hours. The router would need to be the server. I see that I will need to enable NEM o...

chris · 02-07-2013

Very clear as always, thanks Peter!

chris · 03-09-2012

Hi Vivek,Sorry about the delay on this answer but here is all the information I am sure you will need:SWT01#interface FastEthernet0/1description FWL01A/01switchport trunk allowed vlan 30,40,47,48switchport mode trunkspeed 100duplex fullinterface Fast...

chris · 03-05-2012

Hi,1. It is connected to the bottom firewall.2. Yes, SWT03 needs to stay the root bridge. I want 'normal' behaviour from the firewalls, so, as FWL02 is the standby (I have checked), the switches should always see the root ports pointing towards the ...

chris · 02-22-2012

Hi Peter,Thanks for the reply you were very helpful once again! I will get back to you if I need any more help.Kind regards,Chris

chris · 02-22-2012

Hi,Thanks for trying to help. I managed to get it working by just getting more specific with the the no nat ACL and added a new ACL for just that entry:access-list acl_no-nat-777 extended permit ip 10.1.34.0 255.255.255.248 10.159.159.0 255.255.255.0...

Member Since	‎11-24-2010 04:47 AM
Date Last Visited	‎04-11-2018 03:10 AM
Posts	35

User Statistics

User Activity

Policy Based Routing

Switch sees path through standby ASA5505 as preferred

%ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for tcp src outside:10.159.159.3/49204 dst tru777:10.1.34.19/3389 denied due to NAT reverse path failure

Private VLAN's interaction with firewall

Repercussions of enabling NEM for Easy-VPN

etherchannel mode ON or LACP/PagP

Re: Switch sees path through standby ASA5505 as preferred

Switch sees path through standby ASA5505 as preferred

Private VLAN's interaction with firewall

Re: %ASA-5-305013: Asymmetric NAT rules matched for forward and