About gjackson

gjackson · 03-15-2009

Does anyone know if the "crypto isakmp nat-traversal" command is mutually exclusive with the "crypto isamkp ipsec-over-tcp" command? We use ipsec-over-tcp in our VPN configuration, but one of our users is having difficulty with large file copy via s...

gjackson · 03-13-2009

I have an ASA that uses a static NAT ex:static (inside,outside) 192.0.2.178 10.192.100.178 netmask 255.255.255.255 I am running OSPF between the ASA and a border router. I have a static route on the border router pointing traffic for 192.0.2.178/32 ...

gjackson · 10-26-2017

Apologies if this is an inappropriate thread to post this request... searches for "Prime Infrastructure Expert " only lead here. We recently had a catastrophic failure of our Cisco Prime host and we need an expert on quick contract opportunity (rem...

gjackson · 03-15-2009

Andrew,Thanks, you got the issue as you described it. And, yes, understood on all points. That is precisely what I did the very first time to try to get it working. I didn't metric the subnets specifically in the redistributed statement, but that's...

gjackson · 03-13-2009

no.. the NAT statement is there because the host is addressed privately behind the firewall. The NAT is necessary. The issue remains... how to you "announce" an IP route upstream for an IP that is assigned as the "outside" element of a static NAT. ...

gjackson · 03-13-2009

Andrew,Not sure I follow the question.... but I think your asking if the IP address specified as the "inside" component of the ASA's NAT statement is in the same subnet as the ASA's "outside" interface. No, the inside IP is 10.192.100.178 as defined...

gjackson · 03-13-2009

Hi Andrew,Yes, the outside IP of the ASA is 10.172.253.x and the public IP being used in the static NAT statement, lets say is 192.0.2.178/32.Yes, we do own the public space and yes, the border router will always be one hop away, and a static route o...

Member Since	‎03-13-2009 10:02 AM
Date Last Visited	‎10-26-2017 06:50 PM
Posts	9

User Statistics

User Activity

NAT traversal vs. ipsec-over-tcp.

How to announce (OSPF) the public IP address of a static NAT...

Re: Ask the Expert: Cisco Prime Infrastructure - Implementation and Deployment

Re: How to announce (OSPF) the public IP address of a static NAT

Re: How to announce (OSPF) the public IP address of a static NAT

Re: How to announce (OSPF) the public IP address of a static NAT

Re: How to announce (OSPF) the public IP address of a static NAT