Hi Experts, Is it possible to create two site-to-site VPN with dual ISP on two ASA, for backup/redundancy purpose?   Please have a look at the attached diagram. Company B (right) has two internet links from two different ISP terminate on its two ASA. They would like to setup two site-to-site VPN to Company A (left) on the two ASA for backup/redundancy, so if ISP-2 or ASA-2 become unavailable the VPN can fail over to the backup link (ISP-3 and ASA-3), and vice versa.  If this is workable could you please briefly advise how to configure the ASA? Thank you very much! Regards, Jacky ... View more

Hi Experts, Is it possible to create two site-to-site VPN with dual ISP on two ASA, for backup/redundancy purpose?   Please have a look at the attachment. Company B (right) has two internet links from two different ISP terminate on its two ASA. They would like to setup two site-to-site VPN to Company A (left) on the two ASA for backup/redundancy, so if ISP-2 or ASA-2 become unavailable the VPN can fail over to the backup link (ISP-3 and ASA-3), and vice versa.  If this is workable could you please briefly advise how to configure the ASA? Thank you very much! Regards, Jacky ... View more

Hi, I attached a 7960 to a PoE switch. After booting up a message "tftp file not found" displayed on the screen. I pressed the settings button and tried to see if the phone can get the IP from DHCP but the button seems not functioning. Even I did a factory reset I got the same result.    My understanding is the setting button should be able to let me into the menu to check the configuration once it is power up, right? Or does it needs to load the correct firmware before the the setting button can be functioning?    Any suggestions? Thank you very much in advance for your help.   Regards, Jacky ... View more

Hi, We are building three small data centers. BGP and OSPF will be introduced to route the traffic. I have a question about configuring OSPF. We don't have many routers but only two or three routers in each DC. When configuring the OSPF area on the routers, can I put all the routes in the same area, like area 0? Or they have to be in different areas, for example, routers in DC0 with area 0,  routes in DC1 with area 1?  Thanks in advance for your help. ... View more

Hi, Currently our network has two circuits from two different ISPs, with two firewalls in the middle of the ISPs and the corporation internal network. We are thinking of purchasing a Cisco IPS 4360 and put the device between the ISPs and the two firewalls. We would like the traffic coming to/from ASA1 still use the circuit from ISP1, and ASA2 still use the circuit from ISP2. Is this possible? Can the 4360 route the traffic as we want? I drew a draft picture of this issue. Please have a look at the attachment. Thank you! Regards, Jacky ... View more

I have a 2960 switch with the following configuration to provide voice for Avaya phone. Without any third party tools, are there any useful Cisco commands can show the usage of the voice and data traffic of each port? Thanks in advance. interface GigabitEthernet1/0/4 switchport access vlan 20 switchport voice vlan 10 mls qos trust cos no cdp enable spanning-tree portfast spanning-tree bpduguard enable ... View more

What happen if I configure two trunk port on a switch? My network is like this: I am connecting a POE switch to ASA 5505. I am connecting an IP phone to the switch, behind the phone is computer. I would like to assign subnet 192.168.1.x/24 to the phone, and 192.168.2.x/24 to computer. Because 5505 does not support sub interface. I have to configure two physical interface as the gateway for the two subnets. Let's say E0/1 and E0/2. E0/1 belongs to vlan 10, E0/2 belongs to vlan 1074. interface Ethernet0/1 switchport access vlan 10 ! interface Ethernet0/2 switchport access vlan 1074 ! interface Vlan10 nameif PHONE security-level 100 ip address 192.168.1.1 255.255.255.0 interface Vlan1074 nameif Office security-level 100 ip address 192.168.2.1 255.255.255.0 The switch Port#1 connected to the phone. configuration as below switchport access vlan 1074 switchport voice vlan 10 switchport port-security switchport port-security maximum 2 no cdp enable spanning-tree portfast Switch Port#23 & #24 both configured as trunk port, and connected to ASA 5505 E0/1 and E0/2. I tested it but it didn't work. Can any one point out what's wrong with my thought?  Thanks a lot!!! ... View more