Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About cadet alain
06-12-2019
cadet alain
Advisor
WAN engineer based in Belgium
CCNP,CCNA Security, CCNA Voice Certified
Awards
4
Recent Badges
Stats
Member since
12-27-2007
6846
Posts
4343
Helpful
1026
Solutions
06-24-2015
11:22 AM
Hi, Are you doing webfiltering or application control on the Fortigate ? What happens if you take out the Proxy out of the equation ? Regards, Alain
... View more
06-19-2015
11:57 AM
Hi, If Fortigate is natting and there is a permit policy then everything should be working. You should be able to ping 8.8.8.8 from a PC in the inside interface of the Fortigate. If you can do this but can't ping www.google.com then indeed you have a DNS problem. Is the Fortigate the DHCP server for inside machines ? If so what are the dns servers they are getting from dhcp ? Regards, Alain
... View more
06-18-2015
01:28 PM
Hi, Are you natting on the Fortigate ? if not then the traffic from inside interface of fortigate won't be natted on the Cisco router and won't get routed on the Internet. You could edit your ACL 101 to permit this ip subnet too. You'll also have to put a static route towards this subnet on the Cisco router pointing towards the Fortigate. Also on the Fortigate you have to create a policy for permitting traffic from inside to outside. Regards, Alain
... View more
06-18-2015
01:08 PM
Hi, The rule is that crypto ACLs aka Proxy-ids should be mirrored on each side so you have to put 192.168.1.0 to 192.168.2.0 on one side and 192.168.2.0 to 192.168.1.0 on the other side or any to any on both sides like you did.But best practice is to specify the specific subnets. Regards, Alain
... View more
06-13-2015
10:52 AM
Hi, In version 12 , you can see the RID of the router advertising external routes whereas in version 15.0 you should see it for all routes (internal and external) if I reckon correctly. Regards, Alain
... View more
06-13-2015
10:06 AM
Hi, show cdp neighbor detail should give you this info. Regards, Alain
... View more
06-13-2015
10:04 AM
Hi, Have you got SVIs or routed ports and are you passing transit ipv4 packets through the Switch ? You shouldn't see any packets if your switch is acting purely layer 2 and that your SVI is for management only as you are capturing cef traffic which is transit traffic. Regards, Alain
... View more
06-13-2015
08:48 AM
Hi, I think you've got " a chicken and egg " problem.the only way to get to 192.168.1.2 is via the static route you are tracking and once this route is away from RIB thenyour router still tries to ping 192.168.1.2 but as the route is not there it can't and so the route is not reinstalled. Either configure a more specific route for the IP you are pinging: ip route 192.168.1.2 255.255.255.255 10.1.1.2 Or use local PBR for pinging 192.168.1.2: access-list 100 permit icmp any host 192.168.1.2 route-map SLA permit 10 match ip address 100 set ip next-hop 10.1.1.2 ip local policy route-map SLA Regards, Alain
... View more
06-13-2015
08:34 AM
Hi, put the port connecting both switches in trunk mode and create an SVI for Vlan 110 on the 2960 Switch and you'll be able to connect to it. Regards, Alain
... View more
05-11-2015
12:25 PM
Hi, Windows Firewall should be turned off on the devices you are trying to communicate with because by default Windows machines won't reply to pings from another subnet. Regards, Alain
... View more
05-11-2015
11:40 AM
Hi, So your ping to 8.8.8.8 is working so the routing and NAT is working correctly. Try changing the DNS in your DHCP leases to the cable modem IP. Release/renew on client and then ping a web site by name and see if it succeeds. Regards, Alain
... View more
05-11-2015
11:31 AM
Hi Jon, I've started a new job as Wan engineer for a Service Provider and I've been very busy so it as difficult for me to visit the site but I'm slowly trying to come back to it. I hope everything is good for you too. Alain
... View more
05-11-2015
08:11 AM
Hi, Do this: clear log debug ip packet 100 conf t logging debug buffer logging buffer 100000 access-list 100 permit icmp any host 8.8.8.8 access-list 100 permit icmp host 8.8.8.8 any do ping 8.8.8.8 rep 2 do sh log And post output of debug Also post output of show ip route static and show arp | i 192.168.1.1 Regards, Alain
... View more
05-10-2015
01:10 PM
Hi, You don't need any routing on the Cable device as you are natting your LAN on the 2911. Post output of traceroute 8.8.8.8 from 2911 and same for your PC Regards, Alain
... View more
01-18-2015
10:18 AM
Hi, " the router will only ping at the max number provided which is 2147483647 times. I know the no exec-timeout is for the user login, but what is the command to allow continuous pings?" Use IP SLA icmp-echo and IP SLA logging traps to alert you when a certain condition is met. http://www.cisco.com/c/en/us/td/docs/ios/ipsla/command/reference/sla_book/sla_02.html#wp1052104 Regards Alain
... View more
06-24-2015
Hi,Are you doing webfiltering or application control on the Fortigate
?What happens if you take out ...
06-19-2015
Hi,If Fortigate is natting and there is a permit policy then everything
should be working.You should...
06-18-2015
Hi,Are you natting on the Fortigate ? if not then the traffic from
inside interface of fortigate won...
06-18-2015
Hi,The rule is that crypto ACLs aka Proxy-ids should be mirrored on each
side so you have to put 192...
06-13-2015
Hi,In version 12 , you can see the RID of the router advertising
external routes whereas in version ...
06-13-2015
Hi,Have you got SVIs or routed ports and are you passing transit ipv4
packets through the Switch ?Yo...
06-13-2015
Hi,I think you've got " a chicken and egg " problem.the only way to get
to 192.168.1.2 is via the st...
06-13-2015
Hi,put the port connecting both switches in trunk mode and create an SVI
for Vlan 110 on the 2960 Sw...
05-11-2015
Hi,Windows Firewall should be turned off on the devices you are trying
to communicate with because b...
05-11-2015
Hi,So your ping to 8.8.8.8 is working so the routing and NAT is working
correctly.Try changing the D...
05-11-2015
Hi Jon,I've started a new job as Wan engineer for a Service Provider and
I've been very busy so it a...
05-11-2015
Hi,Do this:clear logdebug ip packet 100conf tlogging debug bufferlogging
buffer 100000access-list 10...
05-10-2015
Hi,You don't need any routing on the Cable device as you are natting
your LAN on the 2911.Post outpu...
Public Statistics
| Date Registered | 12-27-2007 04:40 AM |
| Date Last Visited | 06-12-2019 05:53 AM |
| Total Messages Posted | 6,846 |
| Total Helpful Votes Received | 4343 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 4 | |
| 30 | |
| 5 | |
| 8 |
.jpg "Hall of Fame Expert"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
Awards
Cisco Designated VIPs
2015 LAN WAN
Cisco Designated VIPs
2014 LAN WAN
Cisco Designated VIPs
2013 LAN WAN
Cisco Designated VIPs
2012 LAN WAN
