Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello everyone !!
Our client is requesting to enable FQDN based ACL's (mostly because its easy to give a URL instead of multiple ip's for the same URL) but when i researched it looks like this feature has lot of shortcomings like i listed below , co...
Hello everyone ! I came to know that we can use the same public ip for creating multiple tunnels to different sites using crypto-maps with multiple lines each representing a reference to a particular tunnel and using vrf aware IPsec but I would like...
while inserting a new ACL in your case just use the existing line number of the other deny rule it will push the old ACL to n+1 line and you should be good
1) For NAT-T to work both ends should be enabled
https://supportforums.cisco.com/t5/security-documents/how-does-nat-t-work-with-ipsec/ta-p/3119442
2) sounds like a capacity issue
3) DPD should be enabled on both sides.
Thank You
Murali.
~Impo...
