Hello Folks, We have Cisco 1841 router which is used to connect our isolated LAN for internet access . We have configured the device without any issues and kept that in network . Topology is | Private LAN <--> Router <-->ISP | But after few minutes (12-13 mins max) we are observing below 1) Cannot ping the default gateway who is neighbor to our WAN interface. 2) That causes all the traffic to stop and we had to bounce the WAN interface to make it work . again it works for 13 mins max. 3) Did some debug , but no luck 4) No logs were recorded at the router during the issue. 5) Changed to another brand new router , but the issue remains same. Any suggestions from your end ? Configuration snap ---------Truncated-------------- interface FastEthernet0/0 description WAN-INF no ip address ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/0.1234 description WAN encapsulation dot1Q 1234 ip address 5.5.5.2 255.255.255.252 ip nat outside ip virtual-reassembly ! interface FastEthernet0/1 description **** Private LAN **** ip address 192.168.0.254 255.255.255.0 ip access-group nat in ip nat inside ip virtual-reassembly duplex auto speed auto ! ip nat inside source list nat interface FastEthernet0/0.1234 overload ip route 0.0.0.0 0.0.0.0 5.5.5.1 ! ip access-list extended nat permit ip 192.168.0.0 0.0.0.255 any -------------------End------------------------------------------------------------------ ... View more

Hi Folks, I have created Dynamic Access Policies (DAC) for our remote access VPN users in ASA. these policies includes checks for A/V only for now. We have recently got two requirement w.r.t pre-login checks as follows, 1) To check the WIN updates in the users system who is trying to access through VPN , the update shouldn't be older than 30 days. 2) Another is to verify the specific system drive is encrypted or not. If above condition doesn't meet the requirement , then they are not allowed to access the corporate resources. Pls clarify Thanks in advance ... View more

Hi Friends,   We have Cisco 3825 router which we are using as the VPN Gateway for remote VPN users.   During an audit, it is found that the router seems to be affected with POODLE vulnerability , As a workaround we are trying to disable SSLV3 but we unable to do the same even after upgrading to the bug fixed version.    The referred cisco site is http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle   Please suggest on this. Thanks is advance :) ... View more

Hello everyone,   We are setting up a Remote access VPN from our end user machine to cisco 2900 series router, till now we are able establish the VPN tunnel and can access all the local IP's of the router. but when we try accessing the internal subnet/ the network device IP  where the router is connected , it seems to be not reachable. Few observations are listed here :- 1. On VPN client statistics window , Encryption counter seems to be increasing  but the decryption count becomes stable when we try to ping other     networks through the VPN. 2. The routing is proper at the internal network. 3. ACL also seems to be correct.   expecting you suggestions ...! Thanks in Advance :)         ... View more

Hello Everyone, I intend to Configure two ACE appliance in one arm mode, Post configuration I have tried to test the functionalities of the same. Below are the queries which I am having now. >Post reboot of the appliance it popped with the error ,pls clarify .      Starting sysmgr processes.. Please wait...tg3: tg3_reset_hw timed out for eth1, firmware will not restart magic=4b657654 tg3: tg3_reset_hw timed out for eth1, firmware will not restart magic=4b657654 Done!!! > Please confirm whether SNAT is compusory for one-arm mode setup . as our requirement is to loadbalance only the requests from the clients .      the reply from server should go back to the client directly . > How can I achieve the HA config with out dedicated port . as I have configured port channel for all the 4 ports . I am not interested to provide the seperate port for HA. Thanks in advance ... View more

Hi , We have recently installed the WAAS Mobile server 3.0 in our datacenter as one arm mode,Now we have two more WAAS server with ver 3.0 which is to be managed. When I am trying to access the two WAAS server from newly installed one. I am unable to view the server's listed on the Manager. In order to generate traffic report ,I need to manage the WAAS servers.Hence seek your help AEAP. Thanks in advance Solai.k           ... View more

Hi, Recently I faced a problem as mentioned below. CSC-SSM module was unrechable and even unable to take a control,hence we raised a RMA and got back the new one .post replacing the same,we can able to ping the ASDM PC IP address from module and viceversa. the main issue is that while accessing the module on ASA (running 8.2[5]) through asdm 6.4 , we are getting the error below. IP address of the management port is not reachable,check the management port setup and network connectivity before trying again. We have done factory defaults ,password reset, firmware upgrade.but no luck. If you have any idea,kindly suggest.:) Thanks in Advance :). ... View more