About andrew.burns

andrew.burns · 08-03-2004

I have set up a router as a web server (enabled ip http server, loaded an index.html to flash) to serve a single small web page. This works fine as long as I enter a pre-defined username/password. The problem I have is that I want to serve up this pa...

andrew.burns · 07-21-2003

Hi folks,We have a number of VPN clients connecting in with no problems but in addition we have a site-to-site vpn connection that needs xauth turned off. The PIX config is as follows (no real IP's or key's included!) -crypto ipsec transform-set test...

andrew.burns · 05-15-2003

I have DMZ1 (security50) which needs access to DMZ2 (security20). However, for this access to work I need to modify the access-list which controls access from DMZ1 to Inside (security 100). My understanding was that you only needed access-list statem...

andrew.burns · 02-24-2003

Hi,We're using the following:Cisco PIX Firewall Version 6.2(2)Cisco PIX Device Manager Version 2.1(1)After defining some network object-groups I've found that when you simply open PDM it creates a new bunch of object-groups appended with "_real". If ...

andrew.burns · 02-18-2003

Hi all,Is it possible to do conditional destination NAT as follows:IF SOURCE = NETWORK X AND DESTINATION = IP ADDRESS YTHEN NAT DESTINATION IP ADDRESS Y TO DESTINATION IP ADDRESS ZI've tried all kinds of NAT/access-lists/policy routing t...

andrew.burns · 08-03-2004

thanks Paddy - I guess this would work but I should have explained that I just need to unsecure the http process, not the whole aaa mechanism.For example, on vty lines you can do aaa authentication "list" - what I'd like to do is something like ip ht...

andrew.burns · 07-25-2003

Hi Ursula,I finally got a reply from Cisco about this issue, summarised as follows:"It's not possible to use ezvpn without xauth if xauth is enabled for vpnclients - To do this you need to manually create the vpn, making sure the crypto map sequence ...

andrew.burns · 07-21-2003

Although you can't do this directly you can if you have a proxy server on a dmz. In this case the client makes all it's connections to the proxy and the proxy makes all the internet connections. You don't then have to use split-tunnelling.Andrew.

andrew.burns · 06-09-2003

Here's the problem:The router is NAT'ing the source port from 138 to a low number (e.g. 7) but the PDC only ever replies to port 138 even when the source port is 7. I can see the packet getting decrypted but as there won't be a NAT translation for th...

andrew.burns · 06-09-2003

Hi Naveen,Here's the complete config: (minus passwords, etc)version 12.2no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname Home_Router!logging queue-limit 100enable secret 5 !i...

Member Since	‎09-23-2002 02:14 AM
Date Last Visited	‎08-18-2017 03:51 AM
Posts	22

User Statistics

User Activity

Router as web server

Problem with no-xauth

Security Levels and Access Lists

PDM creating new network object-groups?

Conditional NAT

Re: Router as web server

Re: Problem with no-xauth

Re: Sending traffic from VPN clients through the PIX to the Inte

Re: VPN and Join Windows 2000 Domain

Re: VPN and Join Windows 2000 Domain