Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Diego Maciel Gomes
08-18-2017
Stats
Member since
07-17-2012
84
Posts
0
Helpful
0
Solutions
06-27-2014
05:45 AM
Hello Guys, Is possible to get " Group Policy " for the user? I cannot do it. Thanks, Diego
... View more
Created by
Diego Maciel Gomes
in VPN and AnyConnect
in VPN and AnyConnect
06-22-2014
07:28 AM
06-22-2014
07:28 AM
Hello Guys! I configured the new tunnel, with the same PSK. I edited the crypto map and inserted the new Peer Bkp. I noticed that a new Connection Profile was created... so I entered to check and when I try to change inside the options, just to check, I received some messages that follow attached... Is it normal??? I changed the IPs for "Peer Prod" and "Peer Bkp" just for security. The same message appears when I try to edit the Peer Prod Connection Profile as well. Thanks! Diego
... View more
Created by
Diego Maciel Gomes
in VPN and AnyConnect
in VPN and AnyConnect
06-20-2014
09:33 AM
06-20-2014
09:33 AM
Thanks guys! With your help, I did a plan for it and I will test it next weekend! I will post it on Monday!! Thanks one more time! Diego
... View more
06-17-2014
07:22 PM
Hi Marvin, thanks for help too! I did not know about a secondary peer. I will insert the secondary in the respective crypto map. I will take a look about the tunnel-group! But, if the protected traffic is different in the remote network, I cannot use it? Because in the Production the remote network is X and in the backup VPN, the remote network is Y.. so they are differents.
... View more
Created by
Diego Maciel Gomes
in VPN and AnyConnect
in VPN and AnyConnect
06-17-2014
02:18 PM
06-17-2014
02:18 PM
Hello all! I want to know how to make a VPN disable. I have a VPN configured and working fine. But, I needed to create a second VPN for the same company, just for backup, so, in that case, I have a different peer. That backup VPN, I want to configure it, but, Im looking for a way to make it disable. For example, we can disable an ACL, we can disable a NAT... How to disable a VPN? The idea is, when I need to make backup works, I just make it Enable, something like this. Thanks, Diego
... View more
Labels:
05-14-2014
07:50 AM
yeah, probably because I changed it before send... well... I recreated the tunnels and now it is working fine.... I think when we changed the outside IP and recreate the tunnels, maybe some dirty kept in the config... so I removed all and created it again.. thanks!!!
... View more
Created by
Diego Maciel Gomes
in VPN and AnyConnect
in VPN and AnyConnect
05-13-2014
01:24 PM
05-13-2014
01:24 PM
In the HQ log I can see it... 3 May 13 2014 17:23:08 713061 Group = 189.7.7.7, IP = 189..7.7.7, Rejecting IPSec tunnel: no matching crypto map entry for remote proxy 192.168.90.0/255.255.255.0/0/0 local proxy 10.175.26.23/255.255.255.255/0/0 on interface outside
... View more
Created by
Diego Maciel Gomes
in VPN and AnyConnect
in VPN and AnyConnect
05-13-2014
11:30 AM
05-13-2014
11:30 AM
My bad. I forgot to change it. The crypto map is number 4
... View more
05-13-2014
09:35 AM
Hello, Follow attached! The network that I need to reach from Branch is "name 10.175.26.0 REDE_Client" The Tunnel group of the Client is 200.200.200.200 The NAT IP from my network to reach client is 172.19.0.5
... View more
Created by
Diego Maciel Gomes
in VPN and AnyConnect
in VPN and AnyConnect
05-12-2014
06:56 AM
05-12-2014
06:56 AM
Hello Guys, I need a help with this scenario. Branch --> HQ --> Site Remote, where: Branch: Internal = 192.168.50.0/24 HQ: Internal = 192.168.40.0/24 Site Remote = 10.175.26.0/24 Branch + HQ = Both ASA with ESP-3DES-MD5. (Here, we are using the real LAN IP range for encryption domain) HQ + Site Remote = My side ASA with ESP-AES-256-SHA. (Here, to reach the Site remote 10.175.26.0/24 we are NAT our LAN IP range to 172.18.0.10, so the encryption domain is 172.18.0.10 --> 10.175.26.0/24) Now, we need that Branch reachs the Remote Site, under the VPN with Branch to HQ and HQ to Remote Site. My actions: Branch Firewall: - In the VPN Site to Site configuration I added the 10.175.26.0/24 for Tunnel between Branch and HQ in the Remote Network. - I added the EXEMPT for 10.175.26.0/24 in the inside. HQ Firewall: - In the VPN Site to Site configuration I added the 10.175.26.0/24 for Tunnel between Branch and HQ in the Remote Network. - I created a Dynamic Policy in the outside from source = Branch IP range to = Site Remote IP range translated to 172.18.0.10. I already have it working for another Site Remote, but that another has IPsec proposal ESP-3DES-MD5. (the same of Branch) I do not know if it is the problem, but I tried to use both proposal, together, 3DES-MD5 and AES-256-SHA. Firewall rules are ok too. Where are the mistake in that configuration? Thanks, Diego
... View more
- Tags:
- #asa #VPN #NAT
Labels:
Created by
Diego Maciel Gomes
in VPN and AnyConnect
in VPN and AnyConnect
03-31-2014
06:23 PM
03-31-2014
06:23 PM
Hello guys! I need to know what is the difference between those VPN... In which environment is better to use one... If I can use it Router to Router, Router to ASA, ASA to ASA? Can anyone explain it to me? Thanks! Diego
... View more
- Tags:
- vpn
Labels:
Created by
Diego Maciel Gomes
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
02-19-2014
07:45 AM
02-19-2014
07:45 AM
Hum... Very weird, I never see it before! I think you have a missmatch configuration, like, something is not matching with anything so, the filter does not apply.. I know you did, but, maybe a new double-check in the configuration? Src Addr, Signature ID... Is everything correct?
... View more
Public Statistics
| Date Registered | 07-17-2012 12:10 PM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 84 |
.jpg "Hall of Fame Master"){kind=icon}
