Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Somehow after upgrading the ASA Cluster 5520 from 8.03 to 8.04, I am not able to get ssh sessions through the tunnel.The handshake starts, and then it stops after a while, and the remote client does not get any packets through the tunnel.I this a kno...
Hi, I have an asa cluster, and saved the config on disk0 once a week.Now I would like to replay the config from last week, but it doesn ?t work.I thought when I configure the boot config statement pointing to the old config on disk0 it should work. b...
Hi, I have the following question:I have an asa 5520, and currently the box is pimarily setup for vpn remote access scenario. The IP adresses for the remote clients are lets say in the range 192.168.1.0/24 , assigned by Radius.I currently have a no n...
Hi, I am still looking for a solution to backup my configuration from several cisco devices with ssh/scp.Could anyone please provide a solution or script, since I was unable to get the ones I know to run.Thanks a lot.
Let me try again to describe my problem:I have vpn clients that will be assigned an IP address from the pool 192.168.1.1-126, and they should be able to access my cooperate network without any nat translation. So I assume I need a nat0 statement.Then...
Hi Jon, thanks for the answer.I would like to to present each customer network behind one IP address for the internal clients.Yes. Vpn clients should be in the first half of the /25 mask, site2 site beginninng with .129.I have only one C class availi...
Thank you for the answers, I will check out the advice you gave me! Based on Unix OS, I tried this:scp -v user@ip-address :running-config /directory/This works fine with ssh1 on normal IOS boxes, if you turn ip scp server on, but it sometimes fails ...
The asa look and feel of the gui is quite nice, but you can also configure by cli.The biggest advatage is probably stateful failover with vpn tunnels.Your questions:1)2)yes3)yes4)yes5) I would say yes.