Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Dear all,
I have a very basic question about logs. I'm unable to use logs in a useful way with my ASA..
My goal is to see the traffic going though one of my ACL. My ACL is like this:
Source Destination port
10.32.1.0/24 any ...
Hello,
Here is my setup. I have a running site to site VPN working from our office to a contractor company, the crypto map acl is configured to allow all the subnet on both side like:
access-list Outside_cryptomap_3 line 1 extended permit ip 10.50.1....
Thanks for your answer. Here is the output:
asa01p0/pri/act# sh run logginglogging enablelogging timestamplogging list BOTNET message 338006-338008logging list VPN level informational class svclogging list IDENTITY_AD message 746001-746019logging lis...
answering to myself again
I found this post which provide good information about VPN traffic filtering, apparently the procedure I described above is correct as I dont have no sysopt connection permit-vpn configured..
https://supportforums.cisco.c...
I might have found the answer, please correct me if I'm wrong. Here is what I think I must do (in asdm):
- under site-ti-site VPN -> Group Policies edit the existing policy used by my VPN
- Uncheck "Inherit" for filter and click manage
- Under the Ex...