Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Dears
my users from core are able to access the server which is on L2L VPN connection but users accessing from MPLS are not able to access.
Firewall A has a Public IP from /29 which is NATTED to firewall outside interface private IPUsers from in...
Dears,
I have plenty of access switches 3850 IOS XE connected to core N7k directly. i have enabled ip dhcp snooping on the switch and also the arp inspection, My DHCP server is temporarily on one of the access switch later we will move to the window...
Dears,
I am following the below link to understand the NAT above 8.3 and I have fall into one question, when we should use dynamic & static keyword in the TWICE or MANUAL NAT commands. .
As I know the dynamic keyword is for dynamic nat and static key...
Dears
I am replacing the old router which is configured with GET VPN & DMVPN, and I can see the below commands in the old router, I just want to know what these commands are doing in the router,
crypto pki server ROUTER-CA database level complete da...
Dears,
As per the link below ISR 4331 supports GLC-SX-MMD i have inserted in gig0/0/2 and the media type seen on the interface is unknown the same sfp works fine in gig0/0/0 interface. i have checked the same SFP on another new router and status is s...
Dear francesco
Please find the attached topology
On your ASAs, does your acl have multiple ace (lines: 1 for inside subnet and 1 for mpls subnets)? If yes, by issuing show crypto ipsec sa peer x.x.x.x you can see if you have encaps/decaps traffic fo...
Dear aditya,
our source 10.129.100.47 want to reach a destination 172.16.3.0 , so as per your statement it is dynamically natted means what ???
It is natting with one ip 172.30.52.98 and not a pool of ip address so instead of dynamic I would use the...
Dear Julio,
Yes i have a 2 types of vpn on this GET VPN as a GM connecting to the Key server in HQ and DMVPN only for one site acting as a HUB,
so it this router is acting as a CA ?? or it is pulling information from CA, Please correct me if i m not...
