Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About lcambron
Stats
Member since
04-11-2011
239
Posts
57
Helpful
38
Solutions
04-11-2014
09:08 AM
As per: http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/97853-Transparent-firewall.html#backinfo Only two interface can be used for data, and a 3rd one for failover. Regards, Felipe. Remember to rate useful posts.
... View more
03-31-2014
11:45 AM
Hello, Maybe the reply is kind of late, but I dont see why it wouldn't work. Regards, Felipe. Remember to rate useful posts.
... View more
03-31-2014
11:42 AM
Hello, The problem doesn't seem to be related with DRAM but with flash memory. Can you run a 'show flash' and try 'fsck flash' Also I can see you are running 8.2 and 256 MB RAM, be aware of recommended memory: http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/release/notes/asarn82.html#wp37821 Regards, Felipe. Remember to rate useful posts.
... View more
03-31-2014
11:35 AM
Hello, Try this: object network obj-103.15.62.X host 103.15.62.x object network obj-10.0.0.10 host 10.0.0.10 nat (inside,inside) source dynamic any interface destination static obj-103.15.62.X obj-10.0.0.10 Regards, Felipe. Remember to rate useful posts.
... View more
03-24-2014
10:18 AM
Hello,
What I meant by NAT issue is that it could be hitting the wrong NAT rule or asymmetric NAT.
You can confirm the proper NAT and ACL are being used with the packet tracer:
packet-tracer input [src_int] protocol src_addr src_port dest_addr dest_port
Example:
packet-tracer input outside tcp 10.x.x.x 1025 192.168.x.x 2000
Regards,
Felipe.
Remember to rate useful posts.
... View more
03-20-2014
04:56 PM
Hello,
Here's what you need:
same-security permit intra-interface
nat (inside,inside) source static any any destination static External-www.domain.com www.domain.com
Regards,
Felipe.
Remember to rate useful posts.
... View more
03-18-2014
04:46 PM
Hello, The ACLs do override the security level. What version are you running, it could be a NAT issue. Have you tested with packet tracer? Also, did you allow all ports on the ACL, there could be child connections on different ports, what do you see on the logs? Regards, Felipe.
... View more
03-05-2014
05:35 PM
Hello Karl, Why would want to use asdm 5.2? You can use 6.x and 7.x versions with ASA v8.0. What version are you running? Regards, Felipe. Remember to rate useful posts.
... View more
02-28-2014
05:26 PM
Hello, I guess this is something to confirm with your ISP. They need to setup DHCP on their end. Regards, Felipe. Remember to rate useful posts.
... View more
Created by
lcambron
in Network Security
in Network Security
02-28-2014
09:07 AM
02-28-2014
09:07 AM
Hello, Release notes for 6.6 states you need at least 6.3.1172.4 Release notes for 6.3.1172.4 states you need at least 6.3.1172.0 Release notes for 6.3.1172.0 states you need at least 6.2.1599.6 So that is your upgrade path. You can do this using the .pkg files or re-image the Device directly with the latest using the .bin file (You must backup the configuration since it will be wipe out). Regards, Felipe. Remember to rate useful posts.
... View more
Created by
lcambron
in Network Security
in Network Security
02-26-2014
08:35 AM
02-26-2014
08:35 AM
See this post: https://supportforums.cisco.com/docs/DOC-40231 Regards, Felipe. Remember to rate useful posts.
... View more
02-25-2014
11:02 AM
John, You can have the SLA Monitor and Failover at the same time, no special considerations. Once this is configured, just stop monitoring on the outside interface for Failover: - no monitor-interface outside So if the outside link fails on primary ASA, no failover will happen but the ASA will switch to the secondary ISP. Regards, Felipe. Remember to rate useful posts.
... View more
02-25-2014
10:08 AM
Hello John, You can have dual ISP but must have the same configuration on both ASAs, meaning you cannot have one ISP on primary and the other on the secondary. Because SLA Monitor and Failover are both for redundancy, the best practice is NOT to monitor the outside interface, since it will be tracked by the SLA(if outside fails then the backup takes over, if another interface fails then the entire ASA fails over). The ASA does not support PBR (routing based on source), therefore you can only have one default route active at the time. However for L2L VPN, you can configure static routes using the back link (for the peer IP and remote network). Regards, Felipe. Remember to rate useful posts.
... View more
02-25-2014
09:03 AM
Hello Kanes, At this point it will be better to open a case with TAC since I read on similar cases that this may end up with an RMA. Regards, Felipe. Remember to rate useful posts.
... View more
Created by
lcambron
in Network Security
in Network Security
02-24-2014
06:45 PM
02-24-2014
06:45 PM
Hello, Also be aware of CSCsy89178, telnet and ssh work to the backup but icmp doesnt. Regards, Felipe. Remember to rate useful posts.
... View more
04-11-2014
As per:
http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/97853-...
03-31-2014
Hello, Maybe the reply is kind of late, but I dont see why it wouldn't
work. Regards, Felipe. Rememb...
03-31-2014
Hello, The problem doesn't seem to be related with DRAM but with flash
memory.Can you run a 'show fl...
03-31-2014
Hello, Try this: object network obj-103.15.62.X host 103.15.62.xobject
network obj-10.0.0.10host 10....
03-24-2014
Hello, What I meant by NAT issue is that it could be hitting the wrong
NAT rule or asymmetric NAT. Y...
03-20-2014
Hello, Here's what you need: same-security permit intra-interface nat
(inside,inside) source static ...
03-18-2014
Hello, The ACLs do override the security level.What version are you
running, it could be a NAT issue...
03-05-2014
Hello Karl,Why would want to use asdm 5.2?You can use 6.x and 7.x
versions with ASA v8.0.What versio...
02-28-2014
Hello,I guess this is something to confirm with your ISP.They need to
setup DHCP on their end.Regard...
Created by
lcambron
in Network Security
02-28-2014
02-28-2014
Hello,Release notes for 6.6 states you need at least 6.3.1172.4Release
notes for 6.3.1172.4 states y...
Created by
lcambron
in Network Security
02-26-2014
02-26-2014
See this
post:https://supportforums.cisco.com/docs/DOC-40231Regards,Felipe.Remember
to rate useful p...
02-25-2014
John,You can have the SLA Monitor and Failover at the same time, no
special considerations.Once this...
02-25-2014
Hello John,You can have dual ISP but must have the same configuration on
both ASAs, meaning you cann...
02-25-2014
Hello Kanes,At this point it will be better to open a case with TAC
since I read on similar cases th...
Created by
lcambron
in Network Security
02-24-2014
02-24-2014
Hello,Also be aware of CSCsy89178, telnet and ssh work to the backup but
icmp doesnt.Regards,Felipe....
Public Statistics
| Date Registered | 04-11-2011 05:50 PM |
| Date Last Visited | 08-18-2017 04:27 AM |
| Total Messages Posted | 239 |
| Total Helpful Votes Received | 57 |
Helpful Votes From
