I've set up a remote access group for Anyconnect on a 5510 running 8.4.5.  Our company security policy prohibits split tunneling, but this particular location has no internal DNS (so I have to use a public DNS like google or something).   How do I get this to work, I'm assuming I need to do a NAT exemption but I'm not sure how this would look, especially under 8.4.5. Any help would be greatly appreciated. Thanks! ... View more

I know I'm forgetting something stupid.. Have the following configuration: router A: int g0/0.79 description to switch A g1/5 encap do1q 79 ip address 10.27.79.24 255.255.255.0 no shut switch A : int vlan 79 nterface Vlan79 description SWITCH MANAGEMENT VLAN ip address 10.27.79.4 255.255.255 int g1/5 desc to router A g0/0 switchport switchport trunk encap dot1q switchport trunk allowed vlan all All the interfacess are up, but I can't ping.. what did I forget???? ... View more

Am trying to spec out a router for a particular network setup so I can request.  Isn't there a online tool that helps with this (configuration tool)? whats the URL?? Thanks. ... View more

Considering using the SSM-20 modules in our 5520's configured in an Active/Standby configuration.  I have a question.. in 8.3 cisco did away with the need to have duplicate licenses for things like SSL VPN, is the same true for the SSM-20 signature files etc..?? or do I need to purchase two service contracts (one for each SSM in the 5520 pair)? Thanks ... View more

     I'm trying to turn up trunk ports to an ESX4.1 server, and must be missing something, because I can only ping from ESX setup menu when I have the switchports setup as an access-port. config is as follows when configured for trunking and it's not working: interface GigabitEthernet5/13 description server A switchport trunk allowed vlan 2,3 switchport mode trunk switchport nonegotiate speed 1000 duplex full spanning-tree portfast end But if I configure it as an access port in vlan 3 I can ping from the esx to the gateway just fine. Does ESX require something else for trunking to work? ... View more

Do I need the security plus license to do HA with two 5520's? I was told by our purchasing department that the 5520 was supposed to be able to do HA out of the box, but when I look I see only the VPN + license.  Does that mean I can download the security plus license?  Or do I even need it on the 5520. ... View more

I'm seeing a ton of underrun and overrun errors on g0/0 (outside) of an asa5540. It looks as though the utilization is only 51mpbs, so it should be able to keep up, right? I've verified both the ASA and my switch are set for 1000gbps full duplex, any ideas what might be causing this? sho int g0/0 Interface GigabitEthernet0/0 "outside", is up, line protocol is up   Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec         Full-Duplex(Full-duplex), 1000 Mbps(1000 Mbps)         MAC address 0022.90fe.07b8, MTU 1500         IP address 74.200.245.18, subnet mask 255.255.255.248         117882126 packets input, 61320497020 bytes, 0 no buffer         Received 45921540 broadcasts, 0 runts, 0 giants         149787 input errors, 1 CRC, 0 frame, 149786 overrun, 0 ignored, 0 abort         4273548 L2 decode drops         70740348 packets output, 57688384741 bytes, 546122 underruns         0 output errors, 0 collisions, 6 interface resets         0 late collisions, 0 deferred         0 input reset drops, 355 output reset drops, 1 tx hangs         input queue (blocks free curr/low): hardware (511/486)         output queue (blocks free curr/low): hardware (296/0)   Traffic Statistics for "outside":         36724232 packets input, 15846597931 bytes         45514606 packets output, 41549599250 bytes         674556 packets dropped       1 minute input rate 32698 pkts/sec,  17559783 bytes/sec       1 minute output rate 47494 pkts/sec,  56725332 bytes/sec       1 minute drop rate, 494 pkts/sec       5 minute input rate 33753 pkts/sec,  20708401 bytes/sec       5 minute output rate 46468 pkts/sec,  53553807 bytes/sec       5 minute drop rate, 496 pkts/sec ... View more

I heard that the NSEL license is now included with all ASA's; how do I get a PAK for my existing ASA's?  I'm assuming it's free for the asking too... like the VPN-3DES license. ... View more