Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About jlkeys
Stats
Member since
10-24-2006
26
Posts
0
Helpful
2
Solutions
Created by
jlkeys
in Cisco Software Discussions
in Cisco Software Discussions
11-12-2019
11:40 AM
11-12-2019
11:40 AM
Did you have any luck finding an answer? I've been searching as well and haven't run across anything in the documentation yet.
... View more
05-03-2016
01:23 PM
You're creating the NAT for the source on port tcp/6000, so the service object would need to be set to source instead of destination:
object service SERVER1-TCP-6000
service tcp source eq 6000
nat (INSIDE,OUTSIDE) source static SERVER1 interface service SERVER1-TCP-6000 SERVER1-TCP-6000
Give that a try and see if it will work (you may have to do issue a clear xlate to clear the cache).
... View more
05-03-2016
10:44 AM
Your NAT statement looks good to me, but you may need to change the order so the dynamic statement will happen last (the rules are processed from the top down):
nat ( INSIDE , OUTSIDE ) source static SERVER1 interface service SERVER1 - TCP - 6000 SERVER1 - TCP - 6000
nat ( INSIDE , OUTSIDE ) source dynamic INSIDE - NET interface
Also the service objects need to be for source port (not destination).
... View more
12-12-2014
01:50 PM
Is it possible to create a global cos-map on a 3850, similar to the command used below on a 3750? mls qos map cos-dscp 0 8 16 24 32 46 48 56 The example above would essentially map CoS 5 to DSCP 46 (EF). I haven't found an example of how to do that (on a global basis) in a 3850 as it is available in the 3750.
... View more
Labels:
12-05-2014
12:23 PM
I have also noticed this and haven't ran across an equivalent match-all command. Has anyone else ran across this?
... View more
01-13-2014
07:26 AM
Here is an article someone wrote earlier, maybe it will help: https://supportforums.cisco.com/community/netpro/security/vpn/blog/2011/04/25/ipsec-vpn-redundancy-failover-over-redundant-isp-links
... View more
12-20-2012
07:32 AM
I had a similar problem with VPN clients not receiving an IP address from DHCP after upgrading from 8.4(2) to 8.4(5). I went back and forth with TAC for a few weeks and we narrowed it down to an identity NAT (nat exemption) statement for the VPN clients that required the route-lookup option to be checked.
... View more
11-15-2012
11:39 AM
Has anyone had any luck getting smart tunnels to work in IE 10 on Windows 8? Whenever I click on a link setup to run a smart tunnel, I get an message saying that Internet Explorer has stopped working, then it attempts to reload the page. I suspect this in an active X compatibility issue in IE 10/ASA. I'm running ASA 8.4(5), everything works fine in Firefox b/c it uses Java.
... View more
Labels:
10-02-2007
07:39 AM
We have two locations, separate VTP domains, with separate VLANS. These two locations are currently tied together via OC3 and a 7200. My question is, if we were to convert our OC3 connection over to metroethernet, would we be able to route between these locations using the layer 3 switches at each site (rather than using the 7200s)? And if so, how would you get around the VLAN mismatch/tagging problem between the two sites? (I assume we would need to carve out a VLAN on both ends and number/bridge them together with the ME connection to get a "routable" connection)
... View more
Labels:
11-15-2006
12:53 PM
Is it possible to assign an IP address on a per-user basis using Active Directory as your authentication method for a group within the 3000 series VPN Concentrator? I know this can be done with ACS/RADIUS, but I do not see any documentation on how this can be accomplished using Active Directory as your external authentication server.
... View more
Labels:
10-26-2006
10:38 AM
I agree with cratejockey 100%. The web interface doesn't give you any real control and there's isn't a "for sure" way to verify the settings without using the console. It can seem complex at first, but the managing the switch through the console is very straight forward once you get comfortable with the commands.
... View more
10-26-2006
08:46 AM
I would verify you have reset the switch back to default. The easiest way to do that is to erase the startup-config. The only instance I can think of that would cause this is if the two 2950 switches had port security enabled with a MAC address limit.
... View more
10-26-2006
08:20 AM
IDS would help but usually has to be placed in-line with the traffic.
... View more
10-26-2006
08:06 AM
You have two different trunk negotations in place, which could cause problems. Whenver I setup trunks, I usually set both ends static and define the trunk type rather than using any type of trunk negotation.
... View more
10-26-2006
07:59 AM
You could use the 1000BASE-T GBIC (WS-G5483=) in the 3550 and uplink at gigabit speed to the 2950T, otherwise you would have to use the 10/100 ports.
... View more
Created by
jlkeys
in Cisco Software Discussions
11-12-2019
11-12-2019
Did you have any luck finding an answer? I've been searching as well and
haven't run across anything...
05-03-2016
You're creating the NAT for the source on port tcp/6000, so the service
object would need to be set ...
05-03-2016
Your NAT statement looks good to me, but you may need to change the
order so the dynamic statement w...
12-12-2014
Is it possible to create a global cos-map on a 3850, similar to the
command used below on a 3750?mls...
12-05-2014
I have also noticed this and haven't ran across an equivalent match-all
command. Has anyone else ran...
01-13-2014
Here is an article someone wrote earlier, maybe it will
help:https://supportforums.cisco.com/communi...
12-20-2012
I had a similar problem with VPN clients not receiving an IP address
from DHCP after upgrading from ...
11-15-2012
Has anyone had any luck getting smart tunnels to work in IE 10 on
Windows 8? Whenever I click on a l...
10-02-2007
We have two locations, separate VTP domains, with separate VLANS. These
two locations are currently ...
11-15-2006
Is it possible to assign an IP address on a per-user basis using Active
Directory as your authentica...
10-26-2006
I agree with cratejockey 100%. The web interface doesn't give you any
real control and there's isn't...
10-26-2006
I would verify you have reset the switch back to default. The easiest
way to do that is to erase the...
10-26-2006
You have two different trunk negotations in place, which could cause
problems. Whenver I setup trunk...
Public Statistics
| Date Registered | 10-24-2006 08:17 AM |
| Date Last Visited | 01-31-2020 05:33 AM |
| Total Messages Posted | 26 |
