Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About tamilvanan.saravanan
09-07-2018
Stats
Member since
03-03-2010
40
Posts
0
Helpful
0
Solutions
Created by
tamilvanan.sara
in VPN and AnyConnect
in VPN and AnyConnect
12-12-2014
07:33 AM
12-12-2014
07:33 AM
Hello Friends, I have multiple IPsec VPN tunnels created in CISCO 3845 rotuer. would like to monitor the bandwidth utilization of individual IPSec tunnel. Can someone give the OID value to monitor them in MRTG or PRTG ?. Thanks, Tamil
... View more
Labels:
Created by
tamilvanan.sara
in Network Management
06-21-2014
02:37 AM
06-21-2014
02:37 AM
Any suggestion ?. Please.
... View more
Created by
tamilvanan.sara
in Network Management
06-19-2014
02:07 AM
06-19-2014
02:07 AM
Ok.! How to do that ?. Can you suggest some options or commands.. Please.
... View more
Created by
tamilvanan.sara
in Network Management
06-18-2014
10:32 PM
06-18-2014
10:32 PM
Hi Friends, We would like to configure broadcast storm control in our LAN to detect/avoid mac-address flooding. What is the best way and Can I know how to decide the raising threshold & falling threshold values ?.. Please suggest. Regards, S.Tamilvanan
... View more
Labels:
Created by
tamilvanan.sara
in Network Management
03-19-2014
11:33 PM
03-19-2014
11:33 PM
Thanks Vinod..! I already have MRTG installed and monitoring link bandwidth utilization. Now, Wanted to capture the CPU utilization for those devices. Can i know the configuration detail needs to be applied in MRTG / Routers or Switches. Provided URL don't have much detailed configuration needs to be done at both the side (MRTG / CISCO Devices). Please. Thanks, Tamil
... View more
Created by
tamilvanan.sara
in Network Management
03-19-2014
08:16 AM
03-19-2014
08:16 AM
Hi, I’m using CISCO Switches / Routers and wanted to capture the CPU Utilization of those devices in MRTG. Can anyone help me to get step by step information. Please.!
... View more
Labels:
02-05-2014
02:35 AM
Hello, We recently bought CISCO4500X Switches and planning to configure them as core switches. Unfortunately, these swithces are not supporting NAT. Here is the sh version result. Is this because of hardware limitation or IOS ?. Will it be resolved if we upgrade the license ?. if yes, What license.. Any suggestion ?. Please.! CORE-SWITCH32#sh version Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.04.02.SG RELEASE SOFTWARE (fc1) Technical Support: _ http://www.cisco.com/techsupport Copyright (c) 1986-2013 by Cisco Systems, Inc. Compiled Thu 05-Sep-13 19:06 by prod_rel_team Cisco IOS-XE software, Copyright (c) 2005-2010, 2012 by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. ROM: 15.0(1r)SG6 CORE-SWITCH32 uptime is 5 days, 2 hours, 37 minutes Uptime for this control processor is 4 days, 9 hours, 18 minutes System returned to ROM by SSO Switchover Running default software Jawa Revision 2, Winter Revision 0x0.0x1C Last reload reason: Stateful Switchover This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: _ http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. License Information for 'WS-C4500X-32' License Level: entservices Type: Permanent Next reboot license Level: entservices cisco WS-C4500X-32 (MPC8572) processor (revision 4) with 4194304K/20480K bytes of memory. Processor board ID XXXXXXXXX MPC8572 CPU at 1.5GHz, Cisco Catalyst 4500X Last reset from Reload 6 Virtual Ethernet interfaces 80 Ten Gigabit Ethernet interfaces 511K bytes of non-volatile configuration memory. Configuration register is 0x2101 Tz, Tamil
... View more
Labels:
Created by
tamilvanan.sara
in VPN and AnyConnect
09-07-2012
02:39 AM
09-07-2012
02:39 AM
Thank you much Javier.! Post adding these commands my problem got fixed. Can you explain me about those commands what you have suggested.!
... View more
Created by
tamilvanan.sara
in VPN and AnyConnect
09-06-2012
08:25 AM
09-06-2012
08:25 AM
Thanks Javier.! Have done the configs as suggeested by you. now, i able to connect the vpn with out any issue post changing crypto map name. but i'm not able to access any of the lan resources. should i need to modfiy any acl or route required?. Please help.
... View more
Created by
tamilvanan.sara
in VPN and AnyConnect
09-06-2012
05:52 AM
09-06-2012
05:52 AM
Thanks Javier. But i have revised the VPN confuration. Below are the latest configs. with this latest configs. I'm getting username & password screen while connecting cisco vpn client software. once we entered the login credential. it shows "security communication channel" then it goes to "not connected" state. Can you help me to fix this. access-list ACL-RA-SPLIT standard permit host 10.10.1.3 access-list ACL-RA-SPLIT standard permit host 10.10.1.13 access-list ACL-RA-SPLIT standard permit host 10.91.130.201 access-list nonat line 1 extended permit ip host 10.10.1.3 172.30.10.0 255.255.255.0 access-list nonat line 2 extended permit ip host 10.10.1.13 172.30.10.0 255.255.255.0 access-list nonat line 3 extended permit ip host 10.91.130.201 172.30.10.0 255.255.255.0 ip local pool CO-C2S-VPOOL 172.30.10.51-172.30.10.254 mask 255.255.255.0 group-policy CO-C2S internal group-policy CO-C2S attributes vpn-tunnel-protocol IPSec split-tunnel-policy tunnelspecified split-tunnel-network-list vlauel ACL-RA-SPLIT dns-server value 10.10.1.3 tunnel-group TUN-RA-SPLIT type remote-access tunnel-group TUN-RA-SPLIT general-attributes default-group-policy CO-C2S address-pool CO-C2S-VPOOL tunnel-group TUN-RA-SPLIT ipsec-attributes pre-shared-key sekretk3y username ra-user1 password passw0rd1 priv 1 group-policy CO-C2S internal group-policy CO-C2S attributes vpn-tunnel-protocol IPSec split-tunnel-policy tunnelspecified split-tunnel-network-list vlauel ACL-RA-SPLIT dns-server value 10.10.1.3 tunnel-group TUN-RA-SPLIT type remote-access tunnel-group TUN-RA-SPLIT general-attributes default-group-policy CO-C2S address-pool CO-C2S-VPOOL tunnel-group TUN-RA-SPLIT ipsec-attributes pre-shared-key ********* username ******* password ******** priv 1 crypto ipsec transform-set 3DES esp-3des esp-sha-hmac crypto dynamic-map dynmap 10 set transform-set 3DES crypto map Outside_Map 500 ipsec-isakmp dynamic dynmap crypto isakmp identify address crypto isakmp enable outside crypto isakmp policy 100 authentication pre-share encr 3des hash sha crypto ipsec transform-set 3DES esp-3des esp-sha-hmac crypto dynamic-map dynmap 10 set transform-set 3DES crypto map Outside_Map 500 ipsec-isakmp dynamic dynmap crypto map vpn interface outside crypto isakmp identify address crypto isakmp enable outside crypto isakmp policy 100 authentication pre-share encr 3des hash sha group 1 lifetime 3600
... View more
Created by
tamilvanan.sara
in VPN and AnyConnect
09-05-2012
10:09 AM
09-05-2012
10:09 AM
Hi Friends, I'm trying to built client to site VPN in CISCO ASA 5510 8.4(4) and getting below error while connecting cisco VPN client software. Also, I'm getting below log in ASA. Please help me to reslove. Error in CISCO VPN Client Software: Secure VPN Connection Terminated locally by the client. Reason : 414 : Failed to establish a TCP connection. Error in CISCO ASA 5510 %ASA-7-710005: TCP request discarded from <Public IP> /49276 to outside:<Outside Interface IP of my ASA> /10000 ASA Configuration: XYZ# sh run : Saved : ASA Version 8.4(4) ! hostname XYZ domain-name XYZ enable password 3uLkVc9JwRA1/OXb level 3 encrypted enable password R/x90UjisGVJVlh2 encrypted passwd 2KFQnbNIdI.2KYOU encrypted names ! interface Ethernet0/0 nameif outside_rim security-level 0 ip address 1.1.1.1 255.255.255.252 ! interface Ethernet0/1 duplex full nameif XYZ_DMZ security-level 50 ip address 172.1.1.1 255.255.255.248 ! interface Ethernet0/2 speed 100 duplex full nameif outside security-level 0 ip address 2.2.2.2 255.255.255.252 ! interface Ethernet0/3 speed 100 duplex full nameif inside security-level 100 ip address 3.3.3.3 255.255.255.224 ! interface Management0/0 shutdown no nameif no security-level no ip address ! boot system disk0:/asa844-k8.bin ftp mode passive dns domain-lookup outside dns server-group DefaultDNS name-server xx.xx.xx.xx name-server xx.xx.xx.xx name-server xx.xx.xx.xx name-server xx.xx.xx.xx domain-name XYZ object network obj-172.17.10.3 host 172.17.10.3 object network obj-10.1.134.0 subnet 10.1.134.0 255.255.255.0 object network obj-208.75.237.0 subnet 208.75.237.0 255.255.255.0 object network obj-10.7.0.0 subnet 10.7.0.0 255.255.0.0 object network obj-172.17.2.0 subnet 172.17.2.0 255.255.255.0 object network obj-172.17.3.0 subnet 172.17.3.0 255.255.255.0 object network obj-172.19.2.0 subnet 172.19.2.0 255.255.255.0 object network obj-172.19.3.0 subnet 172.19.3.0 255.255.255.0 object network obj-172.19.7.0 subnet 172.19.7.0 255.255.255.0 object network obj-10.1.0.0 subnet 10.1.0.0 255.255.0.0 object network obj-10.2.0.0 subnet 10.2.0.0 255.255.0.0 object network obj-10.3.0.0 subnet 10.3.0.0 255.255.0.0 object network obj-10.4.0.0 subnet 10.4.0.0 255.255.0.0 object network obj-10.6.0.0 subnet 10.6.0.0 255.255.0.0 object network obj-10.9.0.0 subnet 10.9.0.0 255.255.0.0 object network obj-10.11.0.0 subnet 10.11.0.0 255.255.0.0 object network obj-10.12.0.0 subnet 10.12.0.0 255.255.0.0 object network obj-172.19.1.0 subnet 172.19.1.0 255.255.255.0 object network obj-172.21.2.0 subnet 172.21.2.0 255.255.255.0 object network obj-172.16.2.0 subnet 172.16.2.0 255.255.255.0 object network obj-10.19.130.201 host 10.19.130.201 object network obj-172.30.2.0 subnet 172.30.2.0 255.255.255.0 object network obj-172.30.3.0 subnet 172.30.3.0 255.255.255.0 object network obj-172.30.7.0 subnet 172.30.7.0 255.255.255.0 object network obj-10.10.1.0 subnet 10.10.1.0 255.255.255.0 object network obj-10.19.130.0 subnet 10.19.130.0 255.255.255.0 object network obj-XXXXXXXX host XXXXXXXX object network obj-145.248.194.0 subnet 145.248.194.0 255.255.255.0 object network obj-10.1.134.100 host 10.1.134.100 object network obj-10.9.124.100 host 10.9.124.100 object network obj-10.1.134.101 host 10.1.134.101 object network obj-10.9.124.101 host 10.9.124.101 object network obj-10.1.134.102 host 10.1.134.102 object network obj-10.9.124.102 host 10.9.124.102 object network obj-115.111.99.133 host 115.111.99.133 object network obj-10.8.108.0 subnet 10.8.108.0 255.255.255.0 object network obj-115.111.99.129 host 115.111.99.129 object network obj-195.254.159.133 host 195.254.159.133 object network obj-195.254.158.136 host 195.254.158.136 object network obj-209.164.192.0 subnet 209.164.192.0 255.255.224.0 object network obj-209.164.208.19 host 209.164.208.19 object network obj-209.164.192.126 host 209.164.192.126 object network obj-10.8.100.128 subnet 10.8.100.128 255.255.255.128 object network obj-115.111.99.130 host 115.111.99.130 object network obj-10.10.0.0 subnet 10.10.0.0 255.255.0.0 object network obj-115.111.99.132 host 115.111.99.132 object network obj-10.10.1.45 host 10.10.1.45 object network obj-10.99.132.0 subnet 10.99.132.0 255.255.255.0 object-group network Serversubnet network-object 10.10.1.0 255.255.255.0 network-object 10.10.5.0 255.255.255.192 object-group network XYZ_destinations network-object 10.1.0.0 255.255.0.0 network-object 10.2.0.0 255.255.0.0 network-object 10.3.0.0 255.255.0.0 network-object 10.4.0.0 255.255.0.0 network-object 10.6.0.0 255.255.0.0 network-object 10.7.0.0 255.255.0.0 network-object 10.11.0.0 255.255.0.0 network-object 10.12.0.0 255.255.0.0 network-object 172.19.1.0 255.255.255.0 network-object 172.19.2.0 255.255.255.0 network-object 172.19.3.0 255.255.255.0 network-object 172.19.7.0 255.255.255.0 network-object 172.17.2.0 255.255.255.0 network-object 172.17.3.0 255.255.255.0 network-object 172.16.2.0 255.255.255.0 network-object 172.16.3.0 255.255.255.0 network-object host 10.50.2.206 object-group network XYZ_us_admin network-object 10.3.1.245 255.255.255.255 network-object 10.5.33.7 255.255.255.255 network-object 10.211.5.7 255.255.255.255 network-object 10.3.33.7 255.255.255.255 network-object 10.211.3.7 255.255.255.255 object-group network XYZ_blr_networkdevices network-object 10.200.10.0 255.255.255.0 access-list XYZ extended permit ip 10.19.130.0 255.255.255.0 145.248.194.0 255.255.255.0 access-list XYZ extended permit ip 10.19.130.0 255.255.255.0 host 172.16.2.21 access-list XYZ extended permit ip 10.19.130.0 255.255.255.0 host 172.16.2.22 access-list XYZ extended permit ip 10.19.130.0 255.255.255.0 host XXXXXXXX access-list XYZ_PAT extended permit ip 10.19.130.0 255.255.255.0 any access-list XYZ_PAT extended permit ip 10.1.134.0 255.255.255.0 host 195.254.159.133 access-list XYZ_PAT extended permit ip 10.1.134.0 255.255.255.0 host 195.254.158.136 access-list XYZ_PAT extended permit ip 10.1.134.0 255.255.255.0 any access-list XYZ_PAT extended permit ip 10.1.134.0 255.255.255.0 209.164.192.0 255.255.224.0 access-list XYZ_PAT extended permit ip 10.1.134.0 255.255.255.0 host 209.164.208.19 access-list XYZ_PAT extended permit ip 10.1.134.0 255.255.255.0 host 209.164.192.126 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 208.75.237.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.7.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.17.2.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.17.3.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.19.2.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.19.3.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.19.7.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.1.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.2.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.3.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.4.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.6.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.9.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.11.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 10.12.0.0 255.255.0.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.19.1.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.21.2.0 255.255.255.0 access-list nonat extended permit ip 10.1.134.0 255.255.255.0 172.16.2.0 255.255.255.0 access-list nonat extended permit ip host 10.19.130.201 172.30.2.0 255.255.255.0 access-list nonat extended permit ip host 10.19.130.201 172.30.3.0 255.255.255.0 access-list nonat extended permit ip host 10.19.130.201 172.30.7.0 255.255.255.0 access-list nonat extended permit ip object-group Serversubnet object-group XYZ_destinations access-list nonat extended permit ip 10.10.1.0 255.255.255.0 10.2.0.0 255.255.0.0 access-list nonat extended permit ip 10.19.130.0 255.255.255.0 host XXXXXXXX access-list nonat extended permit ip 10.19.130.0 255.255.255.0 145.248.194.0 255.255.255.0 access-list Guest_PAT extended permit ip 10.8.108.0 255.255.255.0 any access-list Cacib extended permit ip 10.8.100.128 255.255.255.128 145.248.194.0 255.255.255.0 access-list Cacib_PAT extended permit ip 10.8.100.128 255.255.255.128 any access-list New_Edge extended permit ip 10.1.134.0 255.255.255.0 208.75.237.0 255.255.255.0 access-list XYZ_global extended permit ip 10.7.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.7.0.0 255.255.0.0 access-list XYZ_global extended permit ip 172.17.2.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 172.17.3.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 172.19.2.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 172.19.3.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 172.19.7.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.2.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.3.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.4.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.6.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.9.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.11.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.12.0.0 255.255.0.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 172.19.1.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 172.21.2.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.17.2.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.17.3.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.19.2.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.19.3.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.19.7.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.1.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.2.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.3.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.4.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.6.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.9.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.11.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 10.12.0.0 255.255.0.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.19.1.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.21.2.0 255.255.255.0 access-list XYZ_global extended permit ip 172.16.2.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list XYZ_global extended permit ip 10.1.134.0 255.255.255.0 172.16.2.0 255.255.255.0 access-list XYZ_global extended permit ip 172.30.2.0 255.255.255.0 host 10.19.130.201 access-list XYZ_global extended permit ip host 10.19.130.201 172.30.2.0 255.255.255.0 access-list XYZ_global extended permit ip 172.30.3.0 255.255.255.0 host 10.19.130.201 access-list XYZ_global extended permit ip host 10.19.130.201 172.30.3.0 255.255.255.0 access-list XYZ_global extended permit ip 172.30.7.0 255.255.255.0 host 10.19.130.201 access-list XYZ_global extended permit ip host 10.19.130.201 172.30.7.0 255.255.255.0 access-list XYZ_global extended permit ip object-group Serversubnet object-group XYZ_destinations access-list XYZ_global extended permit ip object-group XYZ_destinations object-group Serversubnet access-list ML_VPN extended permit ip host 115.111.99.129 209.164.192.0 255.255.224.0 access-list ML_VPN extended permit ip host 115.111.99.129 host 209.164.208.19 access-list ML_VPN extended permit ip host 115.111.99.129 host 209.164.192.126 access-list Da_VPN extended permit ip host 10.9.124.100 host 10.125.81.88 access-list Da_VPN extended permit ip host 10.9.124.101 host 10.125.81.88 access-list Da_VPN extended permit ip host 10.9.124.102 host 10.125.81.88 access-list Da_VPN extended permit ip host 10.9.124.100 10.125.81.0 255.255.255.0 access-list Da_VPN extended permit ip host 10.9.124.101 10.125.81.0 255.255.255.0 access-list Da_VPN extended permit ip host 10.9.124.102 10.125.81.0 255.255.255.0 access-list Sr_PAT extended permit ip 10.10.0.0 255.255.0.0 any access-list Da_Pd_VPN extended permit ip host 10.9.124.100 10.125.80.64 255.255.255.192 access-list Da_Pd_VPN extended permit ip host 10.9.124.100 10.125.64.0 255.255.240.0 access-list Da_Pd_VPN extended permit ip host 10.9.124.100 host 10.125.85.46 access-list Da_Pd_VPN extended permit ip host 10.9.124.100 host 10.125.86.46 access-list Da_Pd_VPN extended permit ip host 10.9.124.101 10.125.80.64 255.255.255.192 access-list Da_Pd_VPN extended permit ip host 10.9.124.101 10.125.64.0 255.255.240.0 access-list Da_Pd_VPN extended permit ip host 10.9.124.101 host 10.125.85.46 access-list Da_Pd_VPN extended permit ip host 10.9.124.101 host 10.125.86.46 access-list Da_Pd_VPN extended permit ip host 10.9.124.102 10.125.80.64 255.255.255.192 access-list Da_Pd_VPN extended permit ip host 10.9.124.102 10.125.64.0 255.255.240.0 access-list Da_Pd_VPN extended permit ip host 10.9.124.102 host 10.125.85.46 access-list Da_Pd_VPN extended permit ip host 10.9.124.102 host 10.125.86.46 access-list XYZ_reliance extended permit ip 10.19.130.0 255.255.255.0 145.248.194.0 255.255.255.0 access-list coextended permit ip host 2.2.2.2 host XXXXXXXX access-list coextended permit ip host XXXXXXXXhost 2.2.2.2 access-list ci extended permit ip 10.1.134.0 255.255.255.0 208.75.237.0 255.255.255.0 access-list ci extended permit ip 208.75.237.0 255.255.255.0 10.1.134.0 255.255.255.0 access-list acl-outside extended permit ip host 57.66.81.159 host 172.17.10.3 access-list acl-outside extended permit ip host 80.169.223.179 host 172.17.10.3 access-list acl-outside extended permit ip any host 172.17.10.3 access-list acl-outside extended permit tcp any host 10.10.1.45 eq https access-list acl-outside extended permit tcp any any eq 10000 access-list acl-outside extended deny ip any any log pager lines 10 logging enable logging buffered debugging mtu outside_rim 1500 mtu XYZ_DMZ 1500 mtu outside 1500 mtu inside 1500 ip local pool XYZ_c2s_vpn_pool 172.30.10.51-172.30.10.254 icmp unreachable rate-limit 1 burst-size 1 icmp permit any outside icmp permit any inside no asdm history enable arp timeout 14400 nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-208.75.237.0 obj-208.75.237.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.7.0.0 obj-10.7.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.17.2.0 obj-172.17.2.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.17.3.0 obj-172.17.3.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.19.2.0 obj-172.19.2.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.19.3.0 obj-172.19.3.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.19.7.0 obj-172.19.7.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.1.0.0 obj-10.1.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.2.0.0 obj-10.2.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.3.0.0 obj-10.3.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.4.0.0 obj-10.4.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.6.0.0 obj-10.6.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.9.0.0 obj-10.9.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.11.0.0 obj-10.11.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-10.12.0.0 obj-10.12.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.19.1.0 obj-172.19.1.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.21.2.0 obj-172.21.2.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.1.134.0 obj-10.1.134.0 destination static obj-172.16.2.0 obj-172.16.2.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.19.130.201 obj-10.19.130.201 destination static obj-172.30.2.0 obj-172.30.2.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.19.130.201 obj-10.19.130.201 destination static obj-172.30.3.0 obj-172.30.3.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.19.130.201 obj-10.19.130.201 destination static obj-172.30.7.0 obj-172.30.7.0 no-proxy-arp route-lookup nat (inside,any) source static Serversubnet Serversubnet destination static XYZ_destinations XYZ_destinations no-proxy-arp route-lookup nat (inside,any) source static obj-10.10.1.0 obj-10.10.1.0 destination static obj-10.2.0.0 obj-10.2.0.0 no-proxy-arp route-lookup nat (inside,any) source static obj-10.19.130.0 obj-10.19.130.0 destination static obj-XXXXXXXX obj-XXXXXXXX no-proxy-arp route-lookup nat (inside,any) source static obj-10.19.130.0 obj-10.19.130.0 destination static obj-145.248.194.0 obj-145.248.194.0 no-proxy-arp route-lookup nat (inside,outside) source static obj-10.1.134.100 obj-10.9.124.100 nat (inside,outside) source static obj-10.1.134.101 obj-10.9.124.101 nat (inside,outside) source static obj-10.1.134.102 obj-10.9.124.102 nat (inside,outside) source dynamic obj-10.8.108.0 interface nat (inside,outside) source dynamic obj-10.19.130.0 obj-115.111.99.129 nat (inside,outside) source dynamic obj-10.1.134.0 obj-115.111.99.129 destination static obj-195.254.159.133 obj-195.254.159.133 nat (inside,outside) source dynamic obj-10.1.134.0 obj-115.111.99.129 destination static obj-195.254.158.136 obj-195.254.158.136 nat (inside,outside) source dynamic obj-10.1.134.0 obj-115.111.99.129 nat (inside,outside) source dynamic obj-10.1.134.0 obj-115.111.99.129 destination static obj-209.164.192.0 obj-209.164.192.0 nat (inside,outside) source dynamic obj-10.1.134.0 obj-115.111.99.129 destination static obj-209.164.208.19 obj-209.164.208.19 nat (inside,outside) source dynamic obj-10.1.134.0 obj-115.111.99.129 destination static obj-209.164.192.126 obj-209.164.192.126 nat (inside,outside) source dynamic obj-10.8.100.128 obj-115.111.99.130 nat (inside,outside) source dynamic obj-10.10.0.0 obj-115.111.99.132 nat (inside,outside) source static obj-10.10.1.45 obj-115.111.99.133 nat (inside,outside) source dynamic obj-10.99.132.0 obj-115.111.99.129 ! object network obj-172.17.10.3 nat (XYZ_DMZ,outside) static 115.111.99.134 access-group acl-outside in interface outside route outside 0.0.0.0 0.0.0.0 115.111.23.129 1 route outside 0.0.0.0 0.0.0.0 115.254.127.130 10 route inside 10.10.0.0 255.255.0.0 10.8.100.1 1 route inside 10.10.1.0 255.255.255.0 10.8.100.1 1 route inside 10.10.5.0 255.255.255.192 10.8.100.1 1 route inside 10.8.100.128 255.255.255.128 10.8.100.1 1 route inside 10.8.108.0 255.255.255.0 10.8.100.1 1 route inside 10.19.130.0 255.255.255.0 10.8.100.1 1 route inside 10.99.4.0 255.255.255.0 10.99.130.254 1 route inside 10.99.132.0 255.255.255.0 10.8.100.1 1 route inside 10.1.134.0 255.255.255.0 10.8.100.1 1 route outside 208.75.237.0 255.255.255.0 115.111.23.129 1 timeout xlate 3:00:00 timeout pat-xlate 0:00:30 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 dynamic-access-policy-record DfltAccessPolicy user-identity default-domain LOCAL aaa authentication telnet console LOCAL aaa authorization command LOCAL no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec ikev1 transform-set vpn2 esp-aes-256 esp-sha-hmac crypto ipsec ikev1 transform-set vpn6 esp-aes-256 esp-md5-hmac crypto ipsec ikev1 transform-set vpn5 esp-aes-256 esp-sha-hmac crypto ipsec ikev1 transform-set vpn7 esp-aes-256 esp-md5-hmac crypto ipsec ikev1 transform-set vpn4 esp-aes-256 esp-sha-hmac crypto ipsec ikev1 transform-set vpn1 esp-aes-256 esp-sha-hmac crypto ipsec ikev1 transform-set vpn_reliance esp-aes-256 esp-sha-hmac crypto ipsec ikev1 transform-set c2s_vpn esp-3des esp-md5-hmac crypto ipsec security-association lifetime seconds 86400 crypto dynamic-map dyn1 1 set ikev1 transform-set c2s_vpn crypto dynamic-map dyn1 1 set reverse-route crypto map vpn 1 match address XYZ crypto map vpn 1 set peer XYZ Peer IP crypto map vpn 1 set ikev1 transform-set vpn1 crypto map vpn 1 set security-association lifetime seconds 3600 crypto map vpn 1 set security-association lifetime kilobytes 4608000 crypto map vpn 2 match address NE crypto map vpn 2 set peer NE_Peer IP crypto map vpn 2 set ikev1 transform-set vpn2 crypto map vpn 2 set security-association lifetime seconds 3600 crypto map vpn 2 set security-association lifetime kilobytes 4608000 crypto map vpn 4 match address ML_VPN crypto map vpn 4 set pfs crypto map vpn 4 set peer ML_Peer IP crypto map vpn 4 set ikev1 transform-set vpn4 crypto map vpn 4 set security-association lifetime seconds 3600 crypto map vpn 4 set security-association lifetime kilobytes 4608000 crypto map vpn 5 match address XYZ_global crypto map vpn 5 set peer XYZ_globa_Peer IP crypto map vpn 5 set ikev1 transform-set vpn5 crypto map vpn 5 set security-association lifetime seconds 3600 crypto map vpn 5 set security-association lifetime kilobytes 4608000 crypto map vpn 6 match address Da_VPN crypto map vpn 6 set peer Da_VPN_Peer IP crypto map vpn 6 set ikev1 transform-set vpn6 crypto map vpn 6 set security-association lifetime seconds 3600 crypto map vpn 6 set security-association lifetime kilobytes 4608000 crypto map vpn 7 match address Da_Pd_VPN crypto map vpn 7 set peer Da_Pd_VPN_Peer IP crypto map vpn 7 set ikev1 transform-set vpn6 crypto map vpn 7 set security-association lifetime seconds 3600 crypto map vpn 7 set security-association lifetime kilobytes 4608000 crypto map vpn interface outside crypto map vpn_reliance 1 match address XYZ_rim crypto map vpn_reliance 1 set peer XYZ_rim_Peer IP crypto map vpn_reliance 1 set ikev1 transform-set vpn_reliance crypto map vpn_reliance 1 set security-association lifetime seconds 3600 crypto map vpn_reliance 1 set security-association lifetime kilobytes 4608000 crypto map vpn_reliance interface outside_rim crypto map mymap 1 ipsec-isakmp dynamic dyn1 crypto isakmp identity address no crypto isakmp nat-traversal crypto ikev1 enable outside_rim crypto ikev1 enable outside crypto ikev1 policy 1 authentication pre-share encryption aes-256 hash sha group 5 lifetime 28800 crypto ikev1 policy 2 authentication pre-share encryption aes-256 hash sha group 5 lifetime 86400 crypto ikev1 policy 4 authentication pre-share encryption aes-256 hash sha group 5 lifetime 28000 crypto ikev1 policy 5 authentication pre-share encryption aes-256 hash sha group 2 lifetime 86400 crypto ikev1 policy 100 authentication pre-share encryption 3des hash sha group 2 lifetime 43200 crypto ikev1 policy 65535 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 telnet 10.8.100.0 255.255.255.224 inside telnet timeout 5 ssh timeout 5 ssh key-exchange group dh-group1-sha1 console timeout 0 no threat-detection basic-threat no threat-detection statistics access-list no threat-detection statistics tcp-intercept group-policy XYZ_c2s_vpn internal username testadmin password oFJjANE3QKoA206w encrypted tunnel-group XXXXXXXX type ipsec-l2l tunnel-group XXXXXXXX ipsec-attributes ikev1 pre-shared-key ***** tunnel-group XXXXXXXXtype ipsec-l2l tunnel-group XXXXXXXXipsec-attributes ikev1 pre-shared-key ***** tunnel-group XXXXXXXX type ipsec-l2l tunnel-group XXXXXXXX ipsec-attributes ikev1 pre-shared-key ***** tunnel-group XXXXXXXX type ipsec-l2l tunnel-group XXXXXXXX ipsec-attributes ikev1 pre-shared-key ***** tunnel-group XXXXXXXX type ipsec-l2l tunnel-group XXXXXXXX ipsec-attributes ikev1 pre-shared-key ***** tunnel-group XXXXXXXX type ipsec-l2l tunnel-group XXXXXXXX ipsec-attributes ikev1 pre-shared-key ***** tunnel-group XXXXXXXX type ipsec-l2l tunnel-group XXXXXXXX ipsec-attributes ikev1 pre-shared-key ***** tunnel-group XYZ_c2s_vpn type remote-access tunnel-group XYZ_c2s_vpn general-attributes address-pool XYZ_c2s_vpn_pool tunnel-group XYZ_c2s_vpn ipsec-attributes ikev1 pre-shared-key ***** ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp inspect icmp inspect ip-options ! service-policy global_policy global privilege show level 3 mode exec command running-config privilege show level 3 mode exec command logging privilege show level 3 mode exec command crypto prompt hostname context no call-home reporting anonymous call-home profile CiscoTAC-1 no active destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address email callhome@cisco.com destination transport-method http subscribe-to-alert-group diagnostic subscribe-to-alert-group environment subscribe-to-alert-group inventory periodic monthly subscribe-to-alert-group configuration periodic monthly subscribe-to-alert-group telemetry periodic daily Cryptochecksum:caa7476cd348ed89b95d37d4e3c9e1d8 : end XYZ#
... View more
Labels:
01-19-2012
06:01 AM
Hi Folks, Our info sec team advised that some of our cisco devices have SSH vulnerabilites. The vulnerability is "SSH Weak Key Exchange Algorithm". But I'm sure SSH is configured with 2048 key vaule on those devices and "IP SSH V2" also enabled there. Below are the devices and IOS details.. Anyidea how to prevent this vulnerabilites?. WS-C2960-48PST-L >>>> c2960-lanbasek9-mz.122-50.SE5.bin WS-C3560G-48PS >>>>> c3560-ipservicesk9-mz.122-55.SE.bin WS-C2960S-24TS-L >>>> c2960s-universalk9-mz.122-55.SE2.bin WS-C6506-E >>>>> s72033-advipservicesk9_wan-mz.122-33.SXI2a.bin Regards, Limat
... View more
Labels:
Created by
tamilvanan.sara
in Switching
12-05-2011
06:59 AM
12-05-2011
06:59 AM
Hi Folks, I'm using CISCO 3524 switch as access switch and trying to enable voice vlan in fast eth ports as below. L3 vlans are created in core switches which is cisco 6509 vlan 1 - data vlan vlan 2 - voice vlan in cisco 3524 ----------------- int fa0/1 switchport access vlan 1 switchport voice vlan 2 speed 100 duplex full. if i use the above configs, the phone which is connected to interface fa0/1 is not taking ip from dhcp server. even it didn't work with static configs. while troubelshooting, i have configured as below and it's started working.. int fa0/1 switchport acces vlan 2 speed 100 duplex full. in this case i can't use this port for data connectivity where as it's required for data too. can anyone help me to understand? also please help me to overcome this issue. Thanks..!
... View more
Labels:
03-27-2011
11:08 PM
Hi Friends, I have some doubts about DNS Role and connectivity with Internet. Please correct me and guide me if I am wrong. I knew, DNS is resloving IP address to Hostnames ( URL ) and vice versa. In below idle scenario: Connectivity between end user and Internet is like below ie; Enduser -> Access Switch -> Core Switch -> Firewall -> Internet Gateway -> Internet Gloud. My Doubts: 1. DNS Server is located in my server form or DMZ ( Connected in core switch) 2. When I type URL from my pc, how it's connecting to DNS server. for examble; Where giving " ip helper address command in vlan for DHCP Communication to get the ip address from DHCP Pool" But nothing is configured in vlan for DNC connectivity. then how communication is establishing. 3. How DNS is downloading all the URL address ( not sure whether it's download all the URL's or redirecting to global DNS Server") 4. What is the purpose global DNS? Please guide me to get the clear picture about DNS role. Thanks, limat.
... View more
Labels:
Created by
tamilvanan.sara
in Firewalls
10-19-2010
09:45 PM
10-19-2010
09:45 PM
Hi Dudes, I am getting the below logs in my firewall, Can any one explain me why iam getting this and how to stop it. logs : %ASA-2-106020: Deny IP teardrop fragment (size = number, offset = number) from 12.64.100.1 to 143.66.122.44 Message id : 106020 Actually we have a static NAT in firewall for this ip (143.66.122.44) 143.66.122.44 : Public ip for my FTP server. Client will access my FTP server thr the pulbic 143.66.122.44. Thanks, limat
... View more
Labels:
Created by
tamilvanan.saravanan
in VPN and AnyConnect
12-12-2014
12-12-2014
Hello Friends,I have multiple IPsec VPN tunnels created in CISCO 3845
rotuer. would like to monitor ...
Created by
tamilvanan.saravanan
in Network Management
06-18-2014
06-18-2014
Hi Friends, We would like to configure broadcast storm control in our
LAN to detect/avoid mac-addres...
03-19-2014
Thanks Vinod..!I already have MRTG installed and monitoring link
bandwidth utilization. Now, Wanted ...
Created by
tamilvanan.saravanan
in Network Management
03-19-2014
03-19-2014
Hi,I’m using CISCO Switches / Routers and wanted to capture the CPU
Utilization of those devices in ...
02-05-2014
Hello, We recently bought CISCO4500X Switches and planning to configure
them as core switches. Unfor...
Created by
tamilvanan.saravanan
in VPN and AnyConnect
09-07-2012
09-07-2012
Thank you much Javier.! Post adding these commands my problem got
fixed.Can you explain me about tho...
Created by
tamilvanan.saravanan
in VPN and AnyConnect
09-06-2012
09-06-2012
Thanks Javier.!Have done the configs as suggeested by you. now, i able
to connect the vpn with out a...
Created by
tamilvanan.saravanan
in VPN and AnyConnect
09-06-2012
09-06-2012
Thanks Javier.But i have revised the VPN confuration. Below are the
latest configs. with this latest...
09-05-2012
Hi Friends,I'm trying to built client to site VPN in CISCO ASA 5510
8.4(4) and getting below error w...
01-19-2012
Hi Folks, Our info sec team advised that some of our cisco devices have
SSH vulnerabilites. The vuln...
Created by
tamilvanan.saravanan
in Switching
12-05-2011
12-05-2011
Hi Folks,I'm using CISCO 3524 switch as access switch and trying to
enable voice vlan in fast eth po...
03-27-2011
Hi Friends,I have some doubts about DNS Role and connectivity with
Internet. Please correct me and g...
Public Statistics
| Date Registered | 03-03-2010 01:22 AM |
| Date Last Visited | 09-07-2018 12:03 AM |
| Total Messages Posted | 40 |
Helpful Votes Given To
.jpg "Hall of Fame Expert"){kind=icon}
.jpg "VIP Expert"){kind=icon}
