Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dbuckley77
04-09-2019
dbuckley77
Member since
07-25-2013
Beginner
04-02-2019
10:59 AM
We have a 6807 switch that we're sending traps to a syslog server from. The interface down traps are not getting sent. below is the logging config logging trap notifications logging source-interface Vlan2 logging host 10.100.XX.XX
... View more
- Tags:
- logging
Labels:
03-27-2019
07:04 AM
#sh ver Cisco Internetwork Operating System Software IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA14, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2010 by cisco Systems, Inc. Compiled Tue 26-Oct-10 10:35 by nburra Image text-base: 0x80010000, data-base: 0x80680000 ROM: Bootstrap program is C2950 boot loader CH-IDF-2950G-1 uptime is 37 weeks, 2 hours, 58 minutes System returned to ROM by power-on System restarted at 07:07:23 EDT Wed Jul 11 2018 System image file is "flash:c2950-i6k2l2q4-mz.121-22.EA14.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. cisco WS-C2950G-48-EI (RC32300) processor (revision K0) with 19911K bytes of memory. Processor board ID FHK0717W1YN Last reset from system-reset Running Enhanced Image 48 FastEthernet/IEEE 802.3 interface(s) 2 Gigabit Ethernet/IEEE 802.3 interface(s) 32K bytes of flash-simulated non-volatile configuration memory. Base ethernet MAC Address: 00:0C:CE:B0:52:C0 Motherboard assembly number: 73-7409-12 Power supply part number: 34-0965-01 Motherboard serial number: FOC071802GR Power supply serial number: PHI06380H09 Model revision number: K0 Motherboard revision number: A0 Model number: WS-C2950G-48-EI System serial number: FHK0717W1YN Configuration register is 0xF
... View more
Created by
dbuckley77
in Policy and Access
in Policy and Access
03-27-2019
06:47 AM
03-27-2019
06:47 AM
We recently started seeing traps like the one below sent from our ASA. Need assistance interpreting them. %ASA-3-710003: TCP access denied by ACL from 37.79.108.72/11424 to outside_interface:xxx.xxx.xxx.xxx/23 They are coming from multiple different IPs.
... View more
Labels:
03-27-2019
06:34 AM
I tried logging trap informational but that did not work. I still get the interface up/down traps but not the login traps sent to the syslog.
... View more
03-27-2019
04:27 AM
I have these lines configured: logging trap notifications logging source-interface Vlan2 logging 10.100.6.56 I tried configuring these below but it will not let me. There are no commands for these on the switch. login on-failure log login on-success log
... View more
03-26-2019
10:36 AM
We have a number of 2950G switches on our network that we have set up syslog logging on. We can see messages coming into the syslog server when interfaces go up or down but cannot see messages for user logins. We have tried setting logging trap to both notifications and debugging but neither sends traps for user login. We have 2960's which are all logging user logins. Need assistance.
... View more
Labels:
01-03-2019
12:05 PM
On our network we have portfast and bpduguard enabled on all access ports and nothing configured on trunk ports for spanning-tree. Is this best practice or should we be doing something different?
... View more
Labels:
Created by
dbuckley77
in VPN and AnyConnect
in VPN and AnyConnect
12-12-2018
08:13 AM
12-12-2018
08:13 AM
We have an ipsec vpn tunnel between a Cisco ASA and PA firewall. The tunnel is fully functional as far as passing traffic in both directiosn but from the PA side I cannot ping the inside interface (default gateway for local networks) on the ASA and we need to be able to do so. Below is the config: ASA Version 9.1(7)23 ! hostname XXXXXXXXXXX domain-name XXXXXXXXX enable password XXXXXXXXX encrypted xlate per-session deny tcp any4 any4 xlate per-session deny tcp any4 any6 xlate per-session deny tcp any6 any4 xlate per-session deny tcp any6 any6 xlate per-session deny udp any4 any4 eq domain xlate per-session deny udp any4 any6 eq domain xlate per-session deny udp any6 any4 eq domain xlate per-session deny udp any6 any6 eq domain passwd XXXXXXXXXXX encrypted names ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 ! interface Ethernet0/6 ! interface Ethernet0/7 ! interface Vlan1 nameif inside security-level 100 ip address 10.100.14.1 255.255.255.128 ! interface Vlan2 nameif outside security-level 0 ip address XX.XX.XX.XX 255.255.255.248 ! boot system disk0:/asa917-23-k8.bin ftp mode passive dns server-group DefaultDNS domain-name XXXXXXXXXX object network obj-10.100.0.0 subnet 10.100.0.0 255.255.0.0 object network obj_any subnet 0.0.0.0 0.0.0.0 object network obj-0.0.0.0 host 0.0.0.0 object network obj-10.100.14.0 subnet 10.100.14.0 255.255.255.128 object network obj-10.100..0 object-group network DM_INLINE_NETWORK_1 network-object 10.100.6.0 255.255.255.0 network-object 10.100.95.0 255.255.255.192 network-object 10.100.5.0 255.255.255.0 access-list vpn extended permit ip 10.100.14.0 255.255.255.128 object-group DM_INLINE_NETWORK_1 access-list inside_nat0_outbound extended permit ip 10.100.14.0 255.255.255.128 10.100.0.0 255.255.0.0 pager lines 24 mtu inside 1500 mtu outside 1500 icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-792.bin no asdm history enable arp timeout 14400 no arp permit-nonconnected nat (inside,any) source static obj-10.100.14.0 obj-10.100.14.0 destination static obj-10.100.0.0 obj-10.100.0.0 no-proxy-arp route-lookup ! object network obj_any nat (inside,outside) dynamic obj-0.0.0.0 object network obj-10.100.14.0 nat (inside,outside) dynamic interface route outside 0.0.0.0 0.0.0.0 XX.XX.XX.XXX 1 timeout xlate 3:00:00 timeout pat-xlate 0:00:30 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 dynamic-access-policy-record DfltAccessPolicy user-identity default-domain LOCAL aaa authentication ssh console LOCAL http server enable 8080 http server idle-timeout 30 http 10.100.14.0 255.255.255.128 inside http 10.100.95.0 255.255.255.0 inside http 10.100.6.23 255.255.255.255 inside http 71.181.12.192 255.255.255.224 outside snmp-server host inside 10.100.5.114 poll community ***** version 2c snmp-server host inside 10.100.5.40 poll community ***** version 2c snmp-server host inside 10.100.95.50 community ***** version 2c snmp-server location Arlington snmp-server contact City IT snmp-server enable traps syslog snmp-server enable traps entity config-change crypto ipsec ikev1 transform-set Trans1 esp-aes esp-md5-hmac crypto ipsec ikev1 transform-set Trans2 esp-aes esp-sha-hmac crypto ipsec security-association pmtu-aging infinite crypto map vpnmap 10 match address vpn crypto map vpnmap 10 set peer XX.XX.XX.XXX crypto map vpnmap 10 set ikev1 transform-set Trans2 crypto map vpnmap 10 set security-association lifetime seconds 14400 crypto map vpnmap interface outside crypto ca trustpool policy crypto ikev1 enable outside crypto ikev1 policy 10 authentication pre-share encryption aes hash sha group 5 lifetime 28800 telnet timeout 5 ssh stricthostkeycheck ssh 10.100.6.23 255.255.255.255 inside ssh 10.100.95.0 255.255.255.0 inside ssh 10.100.5.34 255.255.255.255 inside ssh 10.100.14.0 255.255.255.128 inside ssh XX.XX.XX.XXX 255.255.255.224 outside ssh timeout 5 ssh key-exchange group dh-group1-sha1 console timeout 0 dhcpd dns 10.100.5.11 10.100.6.4 dhcpd lease 7200 ! dhcpd address 10.100.14.50-10.100.14.81 inside dhcpd enable inside ! threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept username admin password Eoye1oGYHaZPfpfC encrypted tunnel-group XX.XXX.XX.XXX type ipsec-l2l tunnel-group XX.XXX.XX.XXX ipsec-attributes ikev1 pre-shared-key ***** ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum client auto message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect ip-options inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp ! service-policy global_policy global prompt hostname context no call-home reporting anonymous call-home profile CiscoTAC-1 no active destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address email callhome@cisco.com destination transport-method http subscribe-to-alert-group diagnostic subscribe-to-alert-group environment subscribe-to-alert-group inventory periodic monthly subscribe-to-alert-group configuration periodic monthly subscribe-to-alert-group telemetry periodic daily Cryptochecksum:83cda4102f25185d01dd356ebbe8cc5f : end
... View more
Labels:
12-07-2018
05:59 AM
I will be going onsite today to trouble shoot this some more. NOt sure what you're talking about wiht the missing default gateway on the lan side. The inside interface IP is the lan dg an dit is getting passed onto the lan clients. So why would I need to add a line int he dhcp config with option 3 for the gateway? Also you said I should remove the NAt statement: object network obj_any no nat (inside,outside) dynamic obj-0.0.0.0 But what is the reason for removing? Do the other NAT statements look good for translating the inside client IPs to the outside int IP? Thanks for your time, consideration and assistance.
... View more
12-06-2018
10:51 AM
I am having an issue setting up an ASA behind a Comcast Gateway box for internet access and a ipsec vpn tunnel. I have placed the Comcast box in bridge mode and configured the ASA but cannot get out to the internet. Here is the info . The WAN IP on the ASA is 50.208.131.41/29. The default gateway is 50.208.131.46. DNS servers are 75.75.75.75 and 75.75.75.76. On the inside interface of the ASA the IP is 10.100.14.1/25 with DHCP enabled for LAN clients. The VPN tunnel needs to provide access from the 10.100.14.0/25 network on this end to networks 10.100.95.0/24, 10.100.5.0/24 and 10.100.6.0/24 on the other end where there is a Palo Alto 3020. With eth0/0 plugged intot the Comcast box I cannot even get out to the internet let alone bring up the tunnel. I am confused how to configure DNS properly on the ASA to pass along to clients on the inside. We want the clients to be able to resolve both internet and network resources on the inside of the other side of the VPN. So do I use public DNS or private DNS that lives on servers on the other side of the tunnel? I currently have it configured to use the private DNS servers but I did hardcode the clients with the public DNS and still didnt work. below is the ASA config. I appreciate the help. I want to get internet connectivity working then the vpn tunnel. XXXXXXXX-ASA# sh run : Saved : : Serial Number: JMX1426Z048 : Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz : ASA Version 9.1(7)23 ! hostname XXXXXXXXX-ASA domain-name XXXXX enable password XXXXXXXXXXX encrypted xlate per-session deny tcp any4 any4 xlate per-session deny tcp any4 any6 xlate per-session deny tcp any6 any4 xlate per-session deny tcp any6 any6 xlate per-session deny udp any4 any4 eq domain xlate per-session deny udp any4 any6 eq domain xlate per-session deny udp any6 any4 eq domain xlate per-session deny udp any6 any6 eq domain passwd a17y3PDNg5MOaAxQ encrypted names ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 ! interface Ethernet0/6 ! interface Ethernet0/7 ! interface Vlan1 nameif inside security-level 100 ip address 10.100.14.1 255.255.255.128 ! interface Vlan2 nameif outside security-level 0 ip address 50.208.131.41 255.255.255.248 ! boot system disk0:/asa917-23-k8.bin ftp mode passive dns server-group DefaultDNS domain-name nashua.city object network obj-10.100.0.0 subnet 10.100.0.0 255.255.0.0 object network obj_any subnet 0.0.0.0 0.0.0.0 object network obj-0.0.0.0 host 0.0.0.0 object network obj-10.100.14.0 subnet 10.100.14.0 255.255.255.128 object network obj-10.100..0 object-group network DM_INLINE_NETWORK_1 network-object 10.100.6.0 255.255.255.0 network-object 10.100.95.0 255.255.255.192 network-object 10.100.5.0 255.255.255.0 access-list vpn extended permit ip 10.100.14.0 255.255.255.128 object-group DM_INLINE_NETWORK_1 access-list inside_nat0_outbound extended permit ip 10.100.14.0 255.255.255.128 10.100.0.0 255.255.0.0 pager lines 24 mtu inside 1500 mtu outside 1500 icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-792.bin no asdm history enable arp timeout 14400 no arp permit-nonconnected nat (inside,any) source static obj-10.100.14.0 obj-10.100.14.0 destination static obj-10.100.0.0 obj-10.100.0.0 no-proxy-arp route-lookup ! object network obj_any nat (inside,outside) dynamic obj-0.0.0.0 object network obj-10.100.14.0 nat (inside,outside) dynamic interface route outside 0.0.0.0 0.0.0.0 50.208.131.46 1 timeout xlate 3:00:00 timeout pat-xlate 0:00:30 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 dynamic-access-policy-record DfltAccessPolicy user-identity default-domain LOCAL aaa authentication ssh console LOCAL http server enable 8080 http server idle-timeout 30 http 10.100.14.0 255.255.255.128 inside http 10.100.95.0 255.255.255.0 inside http 10.100.6.23 255.255.255.255 inside http 71.181.12.192 255.255.255.224 outside snmp-server host inside 10.100.5.114 poll community ***** version 2c snmp-server host inside 10.100.5.40 poll community ***** version 2c snmp-server host inside 10.100.95.50 community ***** version 2c snmp-server location Arlington snmp-server contact City IT snmp-server enable traps syslog snmp-server enable traps entity config-change crypto ipsec ikev1 transform-set Trans1 esp-aes esp-md5-hmac crypto ipsec ikev1 transform-set Trans2 esp-aes esp-sha-hmac crypto ipsec security-association pmtu-aging infinite crypto map vpnmap 10 match address vpn crypto map vpnmap 10 set peer 71.181.12.194 crypto map vpnmap 10 set ikev1 transform-set Trans2 crypto map vpnmap 10 set security-association lifetime seconds 14400 crypto map vpnmap interface outside crypto ca trustpool policy crypto ikev1 enable outside crypto ikev1 policy 10 authentication pre-share encryption aes hash sha group 5 lifetime 28800 telnet timeout 5 ssh stricthostkeycheck ssh 10.100.6.23 255.255.255.255 inside ssh 10.100.95.0 255.255.255.0 inside ssh 10.100.5.34 255.255.255.255 inside ssh 10.100.14.0 255.255.255.128 inside ssh 71.181.12.192 255.255.255.224 outside ssh timeout 5 ssh key-exchange group dh-group1-sha1 console timeout 0 dhcpd dns 10.100.5.11 10.100.6.4 dhcpd lease 7200 ! dhcpd address 10.100.14.50-10.100.14.81 inside dhcpd enable inside ! threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept username admin password Eoye1oGYHaZPfpfC encrypted tunnel-group 71.181.12.194 type ipsec-l2l tunnel-group 71.181.12.194 ipsec-attributes ikev1 pre-shared-key ***** ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum client auto message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect ip-options inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp ! service-policy global_policy global prompt hostname context no call-home reporting anonymous call-home profile CiscoTAC-1 no active destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address email callhome@cisco.com destination transport-method http subscribe-to-alert-group diagnostic subscribe-to-alert-group environment subscribe-to-alert-group inventory periodic monthly subscribe-to-alert-group configuration periodic monthly subscribe-to-alert-group telemetry periodic daily Cryptochecksum:83cda4102f25185d01dd356ebbe8cc5f
... View more
Labels:
Created by
dbuckley77
in Other Network Architecture Subjects
in Other Network Architecture Subjects
12-04-2018
06:38 AM
12-04-2018
06:38 AM
I'm sorry but that did not help. Are you saying I should set the outside interface on the ASA to DHCP so it will pull an IP from the Comcast modem and then just point the tunnel to the public IP of the peer at the other end of the tunnel?
... View more
Created by
dbuckley77
in Other Network Architecture Subjects
in Other Network Architecture Subjects
12-04-2018
06:07 AM
12-04-2018
06:07 AM
I setup a Cisco ASA vpn tunnel a while back with a PA firewall on the other end where the ASA was behind a comcast modem that had a block of 5 public static IPs so the Comcast modem had one fromthe block and I was able to use another fromthe block for the outside interface on the ASA. I am setting another VPN tunnel up but the ASA at this site is behind a Comcast modem with only a single DHCP IP so what do I use for the IP on the outside int of the ASA?
... View more
Labels:
06-29-2018
05:34 AM
Currently we have logging level set to 7 debugging on our switches and we're seeing mostly interface up/down messages coming through to our syslog server. I have been asked to setup logging so that we also see traps sent any time a user logs into a switch in our syslog server. Is this possible to do and which logging level should I set to accomplish this?
... View more
Labels:
Created by
dbuckley77
in VPN and AnyConnect
in VPN and AnyConnect
04-30-2018
05:18 PM
04-30-2018
05:18 PM
what would that line do? the tunnel is up i think there is an issue with my nat
... View more
Created by
dbuckley77
in VPN and AnyConnect
in VPN and AnyConnect
04-30-2018
04:55 AM
04-30-2018
04:55 AM
I ran the packet-tracer input inside icmp 172.128.32.3 8 0 10.100.160.1 detail again and got this:
AMR-ASA-5505# packet-tracer input inside icmp 172.128.32.3 8 0 10.100.160.1 de$
Phase: 1 Type: ROUTE-LOOKUP Subtype: input Result: ALLOW Config: Additional Information: in 0.0.0.0 0.0.0.0 outside
Phase: 2 Type: NAT Subtype: Result: ALLOW Config: object network obj_any nat (inside,outside) dynamic obj-0.0.0.0 Additional Information: Forward Flow based lookup yields rule: in id=0xcb210a50, priority=6, domain=nat, deny=false hits=1, user_data=0xcb210558, cs_id=0x0, flags=0x0, protocol=0 src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0 dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0 input_ifc=inside, output_ifc=outside
Phase: 3 Type: NAT Subtype: per-session Result: ALLOW Config: Additional Information: Forward Flow based lookup yields rule: in id=0xcae00e50, priority=0, domain=nat-per-session, deny=true hits=6204, user_data=0x0, cs_id=0x0, reverse, use_real_addr, flags=0x0, protocol=0 src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0 dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0 input_ifc=any, output_ifc=any
Phase: 4 Type: IP-OPTIONS Subtype: Result: ALLOW Config: Additional Information: Forward Flow based lookup yields rule: in id=0xcb470940, priority=0, domain=inspect-ip-options, deny=true hits=146415, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0 src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0 dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0 input_ifc=inside, output_ifc=any Result: input-interface: inside input-status: up input-line-status: up output-interface: outside output-status: up output-line-status: up Action: drop Drop-reason: (nat-xlate-failed) NAT failed
... View more
2 weeks ago
We have a 6807 switch that we're sending traps to a syslog server from.
The interface down traps are...
3 weeks ago
#sh verCisco Internetwork Operating System SoftwareIOS (tm) C2950
Software (C2950-I6K2L2Q4-M), Versi...
Created by
dbuckley77
in Policy and Access
3 weeks ago
3 weeks ago
We recently started seeing traps like the one below sent from our ASA.
Need assistance interpreting ...
3 weeks ago
I tried logging trap informational but that did not work. I still get
the interface up/down traps bu...
3 weeks ago
I have these lines configured: logging trap notificationslogging
source-interface Vlan2logging 10.10...
3 weeks ago
We have a number of 2950G switches on our network that we have set up
syslog logging on. We can see ...
01-03-2019 12:05 PM
On our network we have portfast and bpduguard enabled on all access
ports and nothing configured on ...
Created by
dbuckley77
in VPN and AnyConnect
12-12-2018 08:13 AM
12-12-2018 08:13 AM
We have an ipsec vpn tunnel between a Cisco ASA and PA firewall. The
tunnel is fully functional as f...
Created by
dbuckley77
in Routing
12-07-2018 05:59 AM
12-07-2018 05:59 AM
I will be going onsite today to trouble shoot this some more. NOt sure
what you're talking about wih...
Created by
dbuckley77
in Routing
12-06-2018 10:51 AM
12-06-2018 10:51 AM
I am having an issue setting up an ASA behind a Comcast Gateway box for
internet access and a ipsec ...
Created by
dbuckley77
in Other Network Architecture Subjects
12-04-2018 06:38 AM
12-04-2018 06:38 AM
I'm sorry but that did not help. Are you saying I should set the outside
interface on the ASA to DHC...
Created by
dbuckley77
in Other Network Architecture Subjects
12-04-2018 06:07 AM
12-04-2018 06:07 AM
I setup a Cisco ASA vpn tunnel a while back with a PA firewall on the
other end where the ASA was be...
06-29-2018 05:34 AM
Currently we have logging level set to 7 debugging on our switches and
we're seeing mostly interface...
Created by
dbuckley77
in VPN and AnyConnect
04-30-2018 05:18 PM
04-30-2018 05:18 PM
what would that line do? the tunnel is up i think there is an issue with
my nat
Created by
dbuckley77
in VPN and AnyConnect
04-30-2018 04:55 AM
04-30-2018 04:55 AM
I ran the packet-tracer input inside icmp 172.128.32.3 8 0 10.100.160.1
detail again and got this: A...
Public Statistics
| Date Registered | 07-25-2013 11:46 AM |
| Date Last Visited | 04-09-2019 11:19 AM |
| Total Messages Posted | 141 |
