About ddolbel

ddolbel · 09-01-2021

Hello All i'm hoping you can assist me, i'm trying to convert from the old ip inspect firewall rules to zone based policy'sI have worked out most of the setting however I can't seem to get outside icmp blocking to occurI want clients inside the netwo...

ddolbel · 04-22-2021

Hello Cisco Community, I'm hoping you can assist me...Don't know what happen, buy my post disappeared. I have a IR 829 router that can ping the internetGLE-CE-02#ping 8.8.8.8 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 8.8.8.8, t...

ddolbel · 03-08-2017

Hi All I'm having issues with this constant message appearing, and i'm stuck trying to find a way to clear it, 001012: Mar 9 08:48:50.655 AEST: %OSPF-4-NOVALIDKEY: No valid authentication send key is available on interface NVI0 I have a cisco 2921 r...

ddolbel · 10-12-2012

Hi, i'm experencing issues with 2 of my 1142n access points running autonomous iosall of a sudden they now longer load the configwhen ever I reapply the config and attempt to write it to memAP-RIE01#wr meBuilding configuration...% NVRAM memory full, ...

ddolbel · 01-18-2012

Hi, I'm having issues with one of my spoke routers connecting to the dmvpn, the 3g connection appears to be ok, its not droppinghowever the tunnel keep dropping and ospf has to keep learning again and again, this is my first site with a 3g connection...

ddolbel · 09-01-2021

@Rob Ingram not sure why but my asterisk server keep losing registration to external sip providers. i'm currently running ios 17.3.4a(MD) i checked the release notes and couldn't see any caveats relating to sip

ddolbel · 09-01-2021

@Rob Ingram i figured that so i created the following class-map type inspect match-any OUTSIDE-TO-SELF-REMOTE-SITES-POLICYmatch access-group name OUTSIDE-TO-SELF-REMOTE-SITES policy-map type inspect OUTSIDE-TO-SELFclass type inspect OUTSIDE-TO-SELF-...

ddolbel · 09-01-2021

@Rob Ingram thanks for the info, I have created the new zones class-map type inspect match-all SELF-TO-INSIDEmatch access-group name SELF-TO-INSIDEclass-map type inspect match-all INSIDE-TO-SELFmatch access-group name INSIDE-TO-SELF policy-map type ...

ddolbel · 09-01-2021

@Rob Ingram ThanksI have lost the ability to ping inside sites, would i be right in saying that i need to create a new zone pair self-to-inside?

ddolbel · 09-01-2021

@Rob Ingram ah ha!! policy-map type inspect OUTSIDE-TO-SELFclass type inspect OUTSIDE-TO-SELF-ICMP-POLICYdropclass class-default wan is now timing out nice!! do i need to do the same for this policy? policy-map type inspect SELF-TO-OUTSIDEclass type...

Member Since	‎07-19-2007 09:30 PM
Date Last Visited	‎09-03-2021 12:09 AM
Posts	59
Total Helpful Votes Received	10

User Statistics

User Activity

Zone-Based Firewall policy - not blocking icmp

IR 829 LAN ports not able to access internet

No valid authentication send key is available on interface NVI0

1142n NVRAM memory full, can't write config

DMVPN with spoke router on 3G Connection

Re: Zone-Based Firewall policy - not blocking icmp

Re: Zone-Based Firewall policy - not blocking icmp

Re: Zone-Based Firewall policy - not blocking icmp

Re: Zone-Based Firewall policy - not blocking icmp

Re: Zone-Based Firewall policy - not blocking icmp