Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I am having an issue with Cisco ISE 2.7 Patch 3, one of my redundant nodes is slowing losing its time. After about 2-3 hours it will be about 30 - 60 seconds behind, then 6-10 hours later, its minutes behind and its AD connection stops working. I hav...
I can't get my AnyConnect profiles to work with a default route, when I connect I can't get any traffic to the internet, and I also can't get any traffic to the site to site VPN tunnels (10.10.251.0/24) as an example. I can ping and work with anythin...
I'm having a confusing moment configuring static NAT with a Single IP address.
I want to allow TCP-1723 traffic through to a server on the inside interface, while using a single IP address for this static NAT and PAT from inside to outside.
So for...
I am not syncing to an AD server. I am syncing to a Cisco router. One of the ISE servers is working fine syncing to the same router, the other is syncing but falling behind in time.
Sorry for the late reply, I ended up figuring this out. The reason I couldn't get it to work is because I needed to use my outside IP address. For that I had to use the "interface" command rather than the "object" command in the NAT line.
OLD: nat ...
Update-- I got the internet working by permitting intra-interface. Still not able to get the site-to-site tunnels working via the AnyConnect with Tunnel All Traffic. If anyone is able to spot my issue please let me know.
Ajay,
I was able to get this figured out for the original nat. Instead of using the network object for my WAN-IP I just used the interface command instead. Example.
nat (outside,inside) source static any any destination static interface SERVER-1 ...
