Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
hello i'm little confused about argument "source" and "destination" behind object service protocal.here is simple example:ASA-FW01(config)# object service 3389 ASA-FW01(config-service-object)# service tcp ?service-object mode commands/options: dest...
hi hope i'm on right place.we have two N5K and serveral N2K single homed to each of the Nexus 5000.vPC with Two Ports (sever) from Two Fabric Extenders. diagram like below , very classic design.we have a mass of VLANsmy question are :1. how to setup ...
helloi just configued a L2L tunnel between ASA 5510 and ASR 1004. tunnel is up but got serious packet lost (more than 70%)and isakmp always up-down intermittently.i compared parameters on both sides again and again but no luck.here is simple diagram ...
hellothis is ASA5520 associate with 8.4(1). very simple scenario , three ports: inside . outside . DMZmy problem is how to use network object NAT to perform Regular Dynamic PAT and Identity NAT. for example, this is my configuration **** first i conf...
Hellowe are going to build L2L IPSEC VPN on ASR 1004 at our new datacenter edge. but i don't find any familiar CLI on my 1004.any special license,IOS-XE version or processor is required ?ASR1000-ESP10 is necessary ?thanks a lot for any help !
actually , you are not depolying really NAT due to you defined protocal argument "TCP".you just use static NAT form to handle a PAT translation.yes , if you move "TCP" just like you presented secondary CLI , ICMP will works properly , that's really ...
hi jcarvaja can you advise why there is "source" key word defined in object service ?service tcp source range ftp telneti'm confusing the different between "source" and "destination"thanks a lot !
are the rest servers pingable ? i mean somehow icmp could be blokced by windows firewall. did you try to ping these servers from internal ?otherwise you try below access-list untrust_access_in extended permit icmp any host 124.xxx.180thanks
