About cpembleton

cpembleton · 09-07-2006

I'm doing a new VPN config on an ASA 7.2(1). Trying to find out if I should use IPSec over TCP, IPSec over UDP or NAT-T. Any comments on which is better?

cpembleton · 05-10-2013

*> 10.147.41.2/32 10.219.65.210 0 65000 64999 65156 iThe router in AS 65156 learned this route via iBGP from another router in AS 65156. iBGP being 2 routers in the same AS. *> 10.224.0.24/32 10.219.65.210 ...

cpembleton · 04-06-2012

@palomoj There was no intent to imply you didn't undrstand how failover works. You didn't even mention it so why would it be a dig? I was simply making a seperation of failover vs alternate routes so Thomas was clear. Was not to downplay your res...

cpembleton · 04-05-2012

Yes, you'll need to trunk s1 and s2 to s3. Without a trunk not all the vlans would be able to reach the router for ther vlan. And other hosts in the same vlan attached to s1 and s2 wouldnt be able to talk.HthChadSent from Cisco Technical Support iP...

cpembleton · 04-05-2012

Not exactly how failover works. Failover happens when there is an issue with the other asa not a path across the network. Even with route tracking or routing protocol the asa will not failover. That is just for route selection. Now if the primary...

cpembleton · 04-05-2012

Pings to the interface are permitted by default. Pings through the asa are denied by default.http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml#topic5hthChadSent from Cisco Technical Support iPad App

Member Since	‎06-01-2005 09:29 AM
Date Last Visited	‎07-18-2018 12:03 AM
Posts	284
Total Helpful Votes Received	193

User Statistics

User Activity

VPN and NAT

BGP table route origin codes

Re: ASA has to be failed over when primary ISP goes down.

Re: Need help with topology issues

Re: ASA has to be failed over when primary ISP goes down.

Re: Ping allowed but not configured