Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Dear Experts,
First of all I must say that I am noob in QoS so excuse for stupid questions.
I have a 2911 router behaving as a edge one for my LAN.For some time users in LAN are facing issues with communication via Skype - both voice and video, inc...
Guys,I have two WAN connection, on both I have two IPSEC VPN. For one VPN I would like to apply access list which will limit access from remote LAN to my LAN.My LAN: 10.0.0.0/23 , remote LAN: 192.168.220.0/24 .In example I tried to limit access to ho...
Dear all,I have router wiht 2 WAN uplinks. On both of them I need to have VPN ipsec connection.With one VPN everythings works correctly. After adding second VPN configuration problem started.I fugred out, that problem is in default gateway. When I do...
Guys,I have a problem with establishing site-to-site vpn connection between my 2911 and remote router.I have different site-to-site vpn on second WAN interface and it works like a charm. I performed same steps in order to configure new VPN to differe...
Dear all,I have router with two WAN interfaces ('primary' and 'secondary') and one LAN. My LAN subnet is 10.0.0./23 .For some reasons I need to configure router in such way, that most of the LAN users should go out via 'primary' WAN uplink, but few L...
Hi Jon,It's the first time when I hear about reflexive ACL.After reading documentation and 'how-to's' I created something like this:ip access-list extended ACL-test-inpermit ip 192.168.220.0 0.0.0.255 host 10.0.0.100 reflect test-reflectpermit ip 192...
Jon,jon.marshall wrote:Is there a reason you do not want to modify the crypto map acl ?Is it beacause it would have to be changed at the other end as well.I do not have cotrol over router in network 192.168.220.0/24 so I cannot use crypto map acl apr...
Hi Jon,I am using crypto-map feature. Right now I have following ACL there:permit ip 10.0.0.0 0.0.1.255 192.168.220.0 0.0.0.255
Do I understand you correctly, that I should replace it with:permit ip 192.168.220.0 0.0.0.255 host 10.0.0.100
in order go...
