You need a "nat (outside,inside)" as well which mirrors your other NAT statement for the Remote Access VPN clients. That's the trick that usually throws everyone for a loop. ;-) I usually do one that looks like this:nat (inside,outside) source stat...
A lot of CCIE's including myself have adopted a common practice of re-using the same hsrp group # on multiple vlans. It simplifies configuration, administration, troubleshooting, etc. plus on various platforms you may be limited to as few as 16 group...
When we upgraded from ACS 3.1 to 3.2, replication broke. There's a registry fix & patch for that. Basically replication took too long so the CSMon service thought ACS died and would reset the services thus breaking the replication in process. The r...
I have found that for enable pass functionality to work when using IAS with Radius, you define a user account in Active Directory called $enab15$ and whatever password you give that account is the enable password used by Cisco devices (i.e. IOS) when...