Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have set up a router as a web server (enabled ip http server, loaded an index.html to flash) to serve a single small web page. This works fine as long as I enter a pre-defined username/password. The problem I have is that I want to serve up this pa...
Hi folks,We have a number of VPN clients connecting in with no problems but in addition we have a site-to-site vpn connection that needs xauth turned off. The PIX config is as follows (no real IP's or key's included!) -crypto ipsec transform-set test...
I have DMZ1 (security50) which needs access to DMZ2 (security20). However, for this access to work I need to modify the access-list which controls access from DMZ1 to Inside (security 100). My understanding was that you only needed access-list statem...
Hi,We're using the following:Cisco PIX Firewall Version 6.2(2)Cisco PIX Device Manager Version 2.1(1)After defining some network object-groups I've found that when you simply open PDM it creates a new bunch of object-groups appended with "_real". If ...
Hi all,Is it possible to do conditional destination NAT as follows:IF SOURCE = NETWORK X AND DESTINATION = IP ADDRESS YTHEN NAT DESTINATION IP ADDRESS Y TO DESTINATION IP ADDRESS ZI've tried all kinds of NAT/access-lists/policy routing t...
thanks Paddy - I guess this would work but I should have explained that I just need to unsecure the http process, not the whole aaa mechanism.For example, on vty lines you can do aaa authentication "list" - what I'd like to do is something like ip ht...
Hi Ursula,I finally got a reply from Cisco about this issue, summarised as follows:"It's not possible to use ezvpn without xauth if xauth is enabled for vpnclients - To do this you need to manually create the vpn, making sure the crypto map sequence ...
Although you can't do this directly you can if you have a proxy server on a dmz. In this case the client makes all it's connections to the proxy and the proxy makes all the internet connections. You don't then have to use split-tunnelling.Andrew.
Here's the problem:The router is NAT'ing the source port from 138 to a low number (e.g. 7) but the PDC only ever replies to port 138 even when the source port is 7. I can see the packet getting decrypted but as there won't be a NAT translation for th...
