Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About jdleon
08-18-2017
Stats
Member since
05-29-2003
24
Posts
0
Helpful
0
Solutions
Created by
jdleon
in VPN and AnyConnect
in VPN and AnyConnect
05-10-2013
01:37 PM
05-10-2013
01:37 PM
Can a site-to-site vpn tunnel be create to connect a Cisco Small Business RV180 VPN Router with a Cisco ASA 5520?
... View more
Labels:
09-07-2011
05:55 AM
How can the command "show ip cache flow" help me troubleshoot network traffic problem, especially pinpointing a node hogging the bandwidth? Is there another command(s) I can also use?
... View more
Labels:
06-23-2011
03:32 PM
I have an ASA Firewall 5520 and to add or edit configuration, I use the ASDM interface. For some reason, the admin password that I use is no longer working. The last time I logged on to the firewall was last week and I am the only person with access to it. I used a backup account to login and was able to, but on the menu bar the "Configuration" button is missing.
... View more
Labels:
Created by
jdleon
in VPN and AnyConnect
in VPN and AnyConnect
02-13-2011
03:54 PM
02-13-2011
03:54 PM
The question is, it is arriving at the firewall, but is it leaving the firewall? If it is leaving the firewall, are you only seeing 1 of those packets? because UDP/500 consists of 6 exchanges (6 messages between the vpn peer). This capture - 1: 07:08:53.337674 c.500 > 71.42.77.66.500: udp 100, I got if from the ASA using the packet capture wizard, in which I specified to capture from the inside interface to the outside interface. There were 6 of these packets. Where is the VPN failing? can you run debugs on the vpn end point? I would have to ask the tech that manages it. Are you thinking that the firewall in between might be blocking the VPN connection? I have UDP/500 open for that vpn to go out and coming back in, but I never saw the traffic from the other end coming back. If it is failing, I'm thinking it might be because of the Linksys VPN router. About a year ago, I had a situation where a user need to VPN to a remote site using a Linksys VPN IPSec client and he was not able to. An in the network you can VPN out. So I went to his workstation, ran wireshark, and started this vpn client - it was using one port (60443) different than what IPSec uses. I opened that port but he still could not vpn out. I submitted a question about it on the Cisco support forums, and it turned out that the ASA will not support that client. So I had him use the micrsoft client and end of problem. So I am wondering if it is the same with the Linksys vpn router. Does the UDP/500 packet actually reach the other end of the tunnel? I did a capture for both traffic coming out and into the ASA, I never saw and traffic coming back from the other end of the tunnel.
... View more
02-13-2011
06:03 AM
I have this new department in my network that needs to create a site-to-site vpn tunnel to a remote site. I had offered for them the use of my Cisco VPN concentrator by they want to manage their VPN. They are using a Linksys VPN router (RV016) but the tunnel does not connect - they are using IPSec for the tunnel. I have an ASA firewall and have created a access-list to allow the IPSec tunnel to pass thru, and I also natted a public IP to the internal address of the Linksys VPN router, so the VPN router at the remote site can communicate to it. I used the packet capture wizard on the ASA to to see traffic and this is what I get on the inside only: 1: 07:08:53.337674 10.100.170.55.500 > 71.42.77.66.500: udp 100 (can someone elaborate on this statement a little more) 10.100.170.55 is the internal IP of the Linksys VPN rotuer and it trying to connect to 71.42.77.66, which is the VPN router at the remote site. I appreciate any help.
... View more
Labels:
02-11-2011
03:51 AM
Is there a way to limit a users access on the network by programming a port on a Cisco switch to shutdown at a certain time and enable at a certain time?
... View more
Labels:
09-10-2010
07:55 AM
I have a VLAN, 101, which is the only vlan on the network that is not configured to receive dhcp ip on the nodes. Yet, for some reason, it is receiving ip address, sent by the dhcp server. The ip address that are coming in are from another vlan. I have checked the core switch where the vlan interface for 101 is configured and there is no "ip helper address" setup. I check the dchp server and checked the scope, that vlan 101 is receiving the ip addresses, to make sure that the router scope option is not set to the vlan 101 interface, and it's not. As a temporary solution I am only allowing vlan 101 to enter into vlan 101. But can anyone tell me why all of a sudden IP address are coming into the vlan 101, which is not configured to receive ip addresses? I also had the dchp server rebooted.
... View more
Labels:
04-15-2010
02:22 PM
I will try this second solution also. I appreciate your help. Thank you.
... View more
04-15-2010
12:45 PM
If a network is subnetted, like for example 192.168.1.0/24 is subnetted to 192.168.1.0/25 & 192.168.1.128/25, can a router on a stick configuration be used?
... View more
- Tags:
- router_on_a_stick
Labels:
03-18-2010
07:18 PM
No it isn't. I asked the tech who installed the client and he doesn't know much. So, this QuickVPN client will not work with the Cisco ASA?
... View more
03-18-2010
03:07 PM
I have a user who needs to VPN out of the network to access a database server. He was told that he need to install the Cisco/Linksys Quick VPN Client, whicn uses ports 443 and 60443. I of course opened these ports on the ASA firewall, but he cannot connect. Has anyone had a similar problem? I have be researching on the net but have not found anything useful. I will contact Linksys support, but my guess is that this client only works with Linksys routers/vpn devices.
... View more
Labels:
03-08-2010
01:10 PM
Did you have sticky port security installed anywhere? Is it possible that some switch is still expecting to see his MAC address on his old port? No, I do not have sticky port security installed. No other switch is expecting to see his MAC address, because the PC is new.
... View more
Created by
jdleon
in VPN and AnyConnect
05-10-2013
05-10-2013
Can a site-to-site vpn tunnel be create to connect a Cisco Small
Business RV180 VPN Router with a Ci...
09-07-2011
How can the command "show ip cache flow" help me troubleshoot network
traffic problem, especially pi...
06-23-2011
I have an ASA Firewall 5520 and to add or edit configuration, I use the
ASDM interface. For some rea...
02-13-2011
The question is, it is arriving at the firewall, but is it leaving the
firewall? If it is leaving th...
02-13-2011
I have this new department in my network that needs to create a
site-to-site vpn tunnel to a remote ...
02-11-2011
Is there a way to limit a users access on the network by programming a
port on a Cisco switch to shu...
04-15-2010
If a network is subnetted, like for example 192.168.1.0/24 is subnetted
to 192.168.1.0/25 & 192.168....
03-18-2010
No it isn't. I asked the tech who installed the client and he doesn't
know much. So, this QuickVPN c...
03-18-2010
I have a user who needs to VPN out of the network to access a database
server. He was told that he n...
Public Statistics
| Date Registered | 05-29-2003 01:23 PM |
| Date Last Visited | 08-18-2017 04:00 AM |
| Total Messages Posted | 24 |
