About Piotr Pawlowski

Piotr Pawlowski · 04-11-2014

Dear Experts, First of all I must say that I am noob in QoS so excuse for stupid questions. I have a 2911 router behaving as a edge one for my LAN.For some time users in LAN are facing issues with communication via Skype - both voice and video, inc...

Piotr Pawlowski · 02-24-2014

Guys,I have two WAN connection, on both I have two IPSEC VPN. For one VPN I would like to apply access list which will limit access from remote LAN to my LAN.My LAN: 10.0.0.0/23 , remote LAN: 192.168.220.0/24 .In example I tried to limit access to ho...

Piotr Pawlowski · 02-15-2014

Dear all,I have router wiht 2 WAN uplinks. On both of them I need to have VPN ipsec connection.With one VPN everythings works correctly. After adding second VPN configuration problem started.I fugred out, that problem is in default gateway. When I do...

Piotr Pawlowski · 02-13-2014

Guys,I have a problem with establishing site-to-site vpn connection between my 2911 and remote router.I have different site-to-site vpn on second WAN interface and it works like a charm. I performed same steps in order to configure new VPN to differe...

Piotr Pawlowski · 02-11-2014

Dear all,I have router with two WAN interfaces ('primary' and 'secondary') and one LAN. My LAN subnet is 10.0.0./23 .For some reasons I need to configure router in such way, that most of the LAN users should go out via 'primary' WAN uplink, but few L...

Piotr Pawlowski · 03-03-2014

Awesome, works like a charm!One more thing - ist it possible to apply this configuration on external interface rather on LAN one ?

Piotr Pawlowski · 02-25-2014

Hi Jon,It's the first time when I hear about reflexive ACL.After reading documentation and 'how-to's' I created something like this:ip access-list extended ACL-test-inpermit ip 192.168.220.0 0.0.0.255 host 10.0.0.100 reflect test-reflectpermit ip 192...

Piotr Pawlowski · 02-24-2014

Jon,jon.marshall wrote:Is there a reason you do not want to modify the crypto map acl ?Is it beacause it would have to be changed at the other end as well.I do not have cotrol over router in network 192.168.220.0/24 so I cannot use crypto map acl apr...

Piotr Pawlowski · 02-24-2014

Jon,I created following extended ACL: 10 permit ip 192.168.220.0 0.0.0.255 host 10.0.0.100 11 permit ip 192.168.220.0 0.0.0.255 host 10.0.0.101 12 permit ip 10.0.0.0 0.0.1.255 192.168.220.0 0.0.0.255 20 deny ip 192.168.220.0 0.0.0.255 any...

Piotr Pawlowski · 02-24-2014

Hi Jon,I am using crypto-map feature. Right now I have following ACL there:permit ip 10.0.0.0 0.0.1.255 192.168.220.0 0.0.0.255 Do I understand you correctly, that I should replace it with:permit ip 192.168.220.0 0.0.0.255 host 10.0.0.100 in order go...

Member Since	‎10-22-2012 11:10 PM
Date Last Visited	‎08-18-2017 06:45 PM
Posts	38
Total Helpful Votes Received	10

User Statistics

User Activity

QoS for Skype

Access list for VPN connection

2xWAN uplink with 2 VPN ipsec on each

Problem with site-to-site connection

Two WAN uplinks and routing based on LAN source IP

Re: Access list for VPN connection

Re: Access list for VPN connection

Re: Access list for VPN connection

Access list for VPN connection

Access list for VPN connection