About Stuart Gall

Stuart Gall · 11-30-2013

Hello,We have 3 asa,aAsa 1 has a VPN with asa 2Asa 2 has a VPN with asa 3Asa 2 is hairpinning traffic from 1 to 3 through the VPNsPings however are not working.on a packet capture on the far end I see echo requests and replies but the replies do not ...

Stuart Gall · 02-07-2013

Hello,is there a way to get the FULL version revision on the ASA or any other IOS device for that matter.e.g.Cisco security advisory states Recommended release 8.2(5.33)show version displays 8.2(5)Cisco Download just shows Latest release 8.2.5 EDSo I...

Stuart Gall · 11-08-2012

Hello,I have several working VPNs between ASAs 8.4 and 8.3The way this was set up is with cryptomaps that match whole subnets and ACL on the outside interface to permit from/to the RFC 1918 addresses.I notice that the hit count is zero on these rules...

Stuart Gall · 10-24-2012

In the docs it says that ignores occur when the interface hardware runs low on buffers.What does it mean when I see ignores (lots of them) on a Vlan but I do not see them on the trunk interface.This is the management VLAN on a switch.Is it possible t...

Stuart Gall · 10-04-2012

Hi I tried to upgrade ASA5510 to 8.3.1 (from 8.2.5)The configuration migration did not appear to work. My VPNs were up but mostly would not pass traffic.I saved the migrated configuration (for referenec) and backed out the change.Now I am looking at ...

Stuart Gall · 06-21-2016

If a device on vlan 1 sends an arp it only broadcasts to vlan1 directed broadcast will not help because arp requests are not directed broadcasts. a host on vlan1 will realise from its ip and subnet mask that the host on vlan 2 is on a different subn...

Stuart Gall · 06-20-2016

Broadcasts are limited to the VLAN on which they originate. Trunks do not block broadcasts I am not sure what you are asking when you say do SVIs support L3 and L2 protocols. An SVI will receive the broadcast, and can be configured in some circumstan...

Stuart Gall · 06-20-2016

Are you sure this configuration is legal for NSSA ? You have multiple connections to area 0 so I would have thought that it can't be a stub area. NSSA allows you to inject external routes I don't think it allows multiple connections to area 0. If you...

Stuart Gall · 06-20-2016

personaly in this case I would use a routed port. Though as you say it makes little difference. The SVI approach gives you more flexability because you can add more devices on the subnet later if you need to. With a routed port you are not running sp...

Stuart Gall · 12-01-2013

Thanks Julio,Yes it was only icmp that was affected. But your capture which showed the replies being dropped helped me to figure out the issue.It was the ordering of the twice nat rules.Sent from Cisco Technical Support iPad App

Member Since	‎03-06-2012 12:18 AM
Date Last Visited	‎08-18-2017 04:01 AM
Posts	56
Total Helpful Votes Received	37

User Statistics

User Activity

VPN hairpinning

How do I check the FULL release number

asa VPN question

interface ignores on a vlan

ASA Upgrade to 8.3.X

If a device on vlan 1 sends

Broadcasts are limited to the

Are you sure this

personaly in this case I

Re: VPN hairpinning