Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
In my enviroment lab, I´ve configured multiples vlans servers in CSM module, each vlan server belongs to a different subnet.Is there some way to prevent real servers from a vlan server to access real servers from a different vlan server?
Configurationvlan 14 clientvlan 20 servervlan 15 clientvlan 21 serverI wanna know, How can I enable access-lists to prevent vlan 14 client to access vlan 21 server.Is it possible?
NAT 0 for a interface vlan doesn't work, but for a interface without tag works.From Firewall console I'm able to access all computers in different vlan, this proves that there isn't no L2 problem... Have some experienced this situation?---------- ///...
Is it possible have two global commands for only one nat command?global (outside1) 1 172.16.20.1global (outside2) 1 172.20.21.1nat(inside) 1 0.0.0.0 0.0.0.0
Is it possible?I have Ospf configurated with a router internet and I have second router that it isn´t running ospf on that.I have a static default route configured on second router with metric 120(upper than OSPF)The router configured with ospf is se...
The document is too good, but I don't know if resolve my problem 'cause if you have noticed the Firewall has two different interfaces.Do you know if this config works?
I have exacly the same problem, after 3 to 4 days the traffic between both sides 515(Hun) 501(spoke) disapper... I input the comando sh isakmp sa and the status is IDLE but no traffic is able to pass...Have you already solved your issue?Jefferson
I've followed the recommendation, but unfortunatly my the problem persists...---------------------------crypto ipsec transform-set certset esp-des esp-md5-hmaccrypto ipsec transform-set myset esp-3des esp-md5-hmaccrypto dynamic-map dynmap 20 set tran...