Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Does anyone know if the "crypto isakmp nat-traversal" command is mutually exclusive with the "crypto isamkp ipsec-over-tcp" command? We use ipsec-over-tcp in our VPN configuration, but one of our users is having difficulty with large file copy via s...
I have an ASA that uses a static NAT ex:static (inside,outside) 192.0.2.178 10.192.100.178 netmask 255.255.255.255 I am running OSPF between the ASA and a border router. I have a static route on the border router pointing traffic for 192.0.2.178/32 ...
Apologies if this is an inappropriate thread to post this request... searches for "Prime Infrastructure Expert " only lead here. We recently had a catastrophic failure of our Cisco Prime host and we need an expert on quick contract opportunity (rem...
Andrew,Thanks, you got the issue as you described it. And, yes, understood on all points. That is precisely what I did the very first time to try to get it working. I didn't metric the subnets specifically in the redistributed statement, but that's...
no.. the NAT statement is there because the host is addressed privately behind the firewall. The NAT is necessary. The issue remains... how to you "announce" an IP route upstream for an IP that is assigned as the "outside" element of a static NAT. ...
Andrew,Not sure I follow the question.... but I think your asking if the IP address specified as the "inside" component of the ASA's NAT statement is in the same subnet as the ASA's "outside" interface. No, the inside IP is 10.192.100.178 as defined...
Hi Andrew,Yes, the outside IP of the ASA is 10.172.253.x and the public IP being used in the static NAT statement, lets say is 192.0.2.178/32.Yes, we do own the public space and yes, the border router will always be one hop away, and a static route o...
