Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi ,
In have a Cisco ASA 5550 in which I have configured Gi0/0 as 10.51.20.5 mask 255.255.255.0
I am accessing it from 172.16.20.0/24 subnet.
I have NATed 10.51.20.5 to 172.16.20.5 IP. If I keep my system in 10.51.20.0/24 subnet, I am able to access...
Hi, I am having a requirement of restricting multiple vendors in same zone (same subnet) from communicating with each other. How can we segregate them at firewall level.
I have heard about PVLAN concept which can be implemented at Switch level. Is ...
Hi, I am trying to configure an unused firewall ASA 5550. For it, I am trying to load a new image through tftp server. Its getting booted up via rommon, but I am not able to copy it to flash or disk. I am not much familiar as to how to do this in fir...
Hi,
I have some unused routers being kept in the datacenter. I thought of making use of it and create a lab.
Now in that I have one Cisco2921 router which was configured by someone but he is no longer in our team. Now when i connect to the router thr...
Hi Ajay,
I have attached my network diagram.
So I am trying to access ASDM on Red Firewall. So when I ping 172.16.20.5 IP, it gets NAT to 10.51.20.5 on Blue Firewall and then reaches Red Firewall. As I said, ping is working so there is no issue in NA...
But if we enable communication between same security level, then the scenario will be - both interfaces are in same zone and same security level. Is it then possible to restrict via ACLs?
So suppose two interfaces of ASA- lets take Gig0/0 and Gi0/1 are in same zone called ABC. End user system is directly connected to these interfaces.
Gi0/0 - 192.168.1.1/30 UserA - 192.168.1.2/30
Gi0/1 - 192.168.2.1/30 ...
Hi Richard,
Thanks for all your help.
I went through some more documents and Cisco forum discussions and was able to resolve this issue.
The mistake which I was making was that once the ASA is rebooting, the Management0/0 interface is getting the 192...
Hi Richard,
Here is the configurations :
ROUTE INFORMATION
ciscoasa# sh route ?Current available interface(s): management Name of interface Management0/0 | Output modifiers <cr>ciscoasa# sh routeCodes: C - connected, S - static, I -...