Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Gajendra R'
Stats
Member since
06-26-2013
39
Posts
3
Helpful
1
Solution
Certifications
02-26-2015
10:04 PM
Hi Alexey Stytsenko, What I understood from your post that you want to have Dynamic tunnel by using IPsec.If am right then there are few changes require in your current config is ..... 1 Create crypto IPsec profile XXXX 2 set transform-set 3 Create a virtual-template XX 4 tunnel mode ipsec ipv4 5 tunnel protection IPsec profile 6 crypto isakamp profile XXX 7 assign virtual-template XX Or if you are trying to configure VTI with IP security... I will suggest you to please go through the below link.. http://www.cisco.com/en/US/technologies/tk583/tk372/technologies_white_paper0900aecd8029d629_ps6635_Products_White_Paper.html Hope this will help you.. Thanks
... View more
02-26-2015
09:10 PM
Thanks Rizwan Rafeek, As I do have this plan in mind; however looking for the any other solutions...... like to make both link active for VPN as well as Internet. Thanks
... View more
Created by
Gajendra R'
in VPN and AnyConnect
in VPN and AnyConnect
02-26-2015
02:32 AM
02-26-2015
02:32 AM
Hi, I have small confusion regarding the configurations and connection. As I have One ASA which is connecting to Two ISP router. now I want to make One ISP dedicated to Internet and One for site to site VPN....... By using the static routing in ASA, I can point default route to Isp1 router for Internet access however for VPN traffic what route should I Point to ISP2 router so the VPN traffic which is being use Private Ip address can be work. Or Please suggest me if any other option can work in this Scenario ? Thanks
... View more
Labels:
09-08-2014
10:00 PM
Hi Kanwal, I have tried as per your suggestion; unfortunately dint work. as i have created a new service called Redirect and then assign that service under the existing Content. as follow. service Redirect ip address 2.2.2.2 keepalive type none type redirect no prepend-http redirect-string https://abc.com active content Babu-80 advanced-balance sticky-srcip add service 192.168.202.148-cu-81 add service 192.168.202.149-cu-81 add service Redirect vip address 192.168.202.202 port 80 protocol tcp url "/*" no persistent balance leastconn active Could you please tell me, whether am missing something Thanks Gajendra
... View more
09-05-2014
02:20 AM
Hi Kanwal, Thanks for your suggestion. Let me try this and see... Moreover would like to ask you that; should i create new service for redirect and give the ip address same as its given to service 192.168.202.148-cu-81 and then add this service to the content.......... content Babu-80.
... View more
09-04-2014
04:28 AM
Hi Inayath, Thanks for your email. content Bapu-443 add service 192.168.202.148-web1-451 vip address 192.168.202.202 port 443 protocol tcp no persistent balance leastconn advanced-balance sticky-srcip active content Babu-80 advanced-balance sticky-srcip add service 192.168.202.148-cu-81 add service 192.168.202.149-cu-81 vip address 192.168.202.202 port 80 protocol tcp url "/*" no persistent balance leastconn active As i have tried to configure DQL as well as the Redirect string for URL redirection from http://abc.com?xym=1 to https://abc.com however not got succeeded If possible please suggest the configurations. Thanks
... View more
Created by
Gajendra R'
in Application Networking
in Application Networking
09-03-2014
10:08 PM
09-03-2014
10:08 PM
Hi , Can we redirect the URL which client from outside type to the original domain URL. Let me explain (as there are 10 url are working on two server which is under two content port 80, and 443) User sitting outside type the url like :- http://abc.com?xyz=1 this url should be redirect to https://abc.com Thanks
... View more
Labels:
04-17-2014
01:25 AM
hi I have tried to configure ISAKMP with Group 2 and Group 5...at my end but unfortunately not resolved ...could you please suggest me that what config i need to configure at my end.. as i have tried with crypto isakmp policy 1 authentication pre-share encryption aes-256 hash sha group 2 lifetime 86400 crypto isakmp policy 2 authentication pre-share encryption 3Des hash md5 group 2 lifetime 86400 crypto isakmp policy 3 authentication pre-share encryption aes-256 hash sha group 5 lifetime 86400
... View more
04-16-2014
10:23 PM
Hi , I have 5 S2S vpn configured on ASA ; from last two days am observing Phase1 flapping . However when i do debug crypto iskamp 127 or 200 am getting logs like below. [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 1 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 2 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 5 Cfg'd: Group 1 Apr 17 00:15:55 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Group 2 Cfg'd: Group 5 My configuration for the VPN Phase 1 is :-...... fw-999967-353904/pri/act# sh run crypto isakmp crypto isakmp identity address crypto isakmp enable outside crypto isakmp policy 5 authentication pre-share encryption aes-256 hash sha group 2 lifetime 86400 crypto isakmp policy 10 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 crypto isakmp policy 20 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400 crypto isakmp policy 30 authentication pre-share encryption aes-256 hash sha group 5 lifetime 86400 crypto isakmp policy 40 authentication pre-share encryption aes-256 hash sha group 2 lifetime 86400 crypto isakmp policy 50 authentication pre-share encryption 3des hash md5 group 1 lifetime 28800 crypto isakmp ipsec-over-tcp port 10000 i can not check other site configuration .. anyone please suggest me to get rid of this problem. Thanks
... View more
Labels:
04-14-2014
11:32 PM
Hi, hi Team, we have VPN configured in PRTG however we are facing the problem is that whenever there is no traffic on vpn tunnel prtg shows that this vpn is down more ever at this time vpn is up not becuase of no traffic on tunnel its does not participate in ipsec phase2.. i would request you to please suggest us how i can configure prtg or asa that will help us to get rid of this problem . awaiting for your kind response . Thanks Gajendra
... View more
Labels:
01-28-2014
04:18 AM
The bootps(67) is the port that your ISP uses to send out DHCP information and that router recieves on 68(bootpc) on your WAN interface. ISP renewing your connection lease via a DHCP server which will result in a broadcast from them on ports 67/68. These bootpc/bootps broadcasts from your ISP are used to renew (keep active) your connection and assign dynamic IP's. I hope you should try with this command; it may help you permit udp any any eq bootpc permit udp any any eq bootps Thanks
... View more
01-27-2014
08:58 PM
hi, Could you please pest you DHCP config ? or please verify that UDP Bootpc or Bootps is permited ?
... View more
08-27-2013
07:34 AM
hi Jouni, Thanks for your response. actually once i type crypto map outside 5 match address ACL it gives me this error however my tunnel is up but data is not transmitting Thanks in advance
... View more
02-26-2015
Hi Alexey Stytsenko, What I understood from your post that you want to
have Dynamic tunnel by using ...
02-26-2015
Thanks Rizwan Rafeek, As I do have this plan in mind; however looking
for the any other solutions......
Created by
Gajendra R'
in VPN and AnyConnect
02-26-2015
02-26-2015
Hi, I have small confusion regarding the configurations and connection.
As I have One ASA which is c...
09-08-2014
Hi Kanwal, I have tried as per your suggestion; unfortunately dint
work.as i have created a new serv...
09-05-2014
Hi Kanwal, Thanks for your suggestion. Let me try this and see...
Moreover would like to ask you tha...
09-04-2014
Hi Inayath, Thanks for your email. content Bapu-443 add service
192.168.202.148-web1-451 vip address...
09-03-2014
Hi , Can we redirect the URL which client from outside type to the
original domain URL. Let me expla...
04-17-2014
hi I have tried to configure ISAKMP with Group 2 and Group 5...at my end
but unfortunately not resol...
04-16-2014
Hi , I have 5 S2S vpn configured on ASA ; from last two days am
observing Phase1 flapping .However w...
04-14-2014
Hi,hi Team,we have VPN configured in PRTG however we are facing the
problem is that whenever there i...
01-28-2014
The bootps(67) is the port that your ISP uses to send out DHCP
information and that router recieves ...
01-27-2014
hi, Could you please pest you DHCP config ? or please verify that UDP
Bootpc or Bootps is permited ?
Public Statistics
| Date Registered | 06-26-2013 03:33 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 39 |
| Total Helpful Votes Received | 3 |
