Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello all!I have the following topology:The main task for me - is to configure the VPN without port-forwarding. Because my ASA 5505 has only one interface with public IP-address - it was decided to use it (1.1.1.1). But neither from the inside nor ou...
Hello all!I have a problem with the ASA 5512-X configuration. As I understand it does not support VLAN trunks (as ASA 5505). Аnd this is a big problem for me. =(I have the following scheme (and unfortunately, I can not add L3 switch):Using subinterfa...
Hello!I have two branch routers. Between them GRE tunnel is configured. Traffic successfully routed from one segment to another.I need to set up port forwarding (static NAT) so that the packets to the external interface of the branch 1 router are for...
In the situation with multi-host access to one port of Cisco 2960 Lan Lite by another simple L2 switch, is it possible that we could control per user access by authentication for each?What happens if I connect to the switch (which already has some tr...
Jouni, thank you again!They have second ASA 5512-X for cold standby and do not want to see any other "single point of failure".This complicates the work, even for all the equipment and purchased SMARTnets.In the original version I offered them to use...
Thank you, Jouni!This is what I expected. =(By strange coincidence, my customer does not want to change the upper part of the topology.What do you think if I will use the following scheme:
Hi all!I solved the problem.Solution:####### Router 2 #######ip access-list extended PORT_FW permit ip host 10.51.231.72 any!route-map PORT_FW permit 10 match ip address PORT_FW set ip next-hop 172.20.100.2!interface GigabitEthernet0/0 ip policy rout...