Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Using PT 7.0 on a windows 10 PC
I have built a small network of 6 end nodes all on different subnets on a 3560 switches, out of the box I would not think they should be able to talk to each other, due to no ACL allowing them too.
Yet they can,
Nex...
I have a 5525X that I need to impliment QOS on, i have no experiance with QOS.
I need to allow a single IP address on the inside, unrestricted bandwidth no matter what else is going on, this is over a VPN Connection.
Our DR is on this remote site as...
I am swapping out a 5505 with a 5525-X and I am having trouble setting it up. Than you for any and all help.
y.y.y is my main office public subnet
x.x.x is the remote site IP address
.3.0 is the inside at remote site and
96.0, 5.0, 172.16. are at m...
I have seen lots about this, but none seen to match my issue. I have an asa5550 with and inside, outside and DMZ network, hanging off the Inside i have an asa 5505 with my dabase network.I can get to me db net from the inside, and via an outside nat ...
I have a site to site vpn set up from my office to a remote office. I am planning on putting my DR data storage at the remote office. My current private network is a 192.168.99.0/24, and my backup network is secluded via a second nic on all my server...
okay, i added the followign
route inside 192.168.96.0 255.255.255.0 64.5.141.1
that would be the next hop outbound, I am still unable to ping R0
coming from the outside i have server2 so it can ping R1 and R0, well the outside interface anyway of ...
okay, it has been solved, I opened a case with cisco. This was a High Priority item for me, i needed to add a nat for the 172 net on the web-dmz. I only had a nat statment for it on the inside.static (inside,web_dmz) 172.20.0.80 17220.0.80 etc..........
Looks like the same result ciscoasa# packet-tracer input web_dmz tcp x.x.130.8 sqlnet 172.20.0.80 sqlnet$Phase: 1Type: ACCESS-LISTSubtype:Result: ALLOWConfig:Implicit RuleAdditional Information: Forward Flow based lookup yields rule: in id=0x242ed5a...
Absolutely using the correct IP address, for source and dest. From the inside I can ping the 172, but coming through the dmz to the inside I cannot.inside is a 192 net, db net is a 172 net. ciscoasa# packet-tracer input web_dmz tcp x.x.130.8 sqlnet 1...
Here is the packet trace:Access-ListType -ACCESS-LISTAction -ALLOWShow rule in Access Rules table. ConfigImplicit RuleInfoMAC Access list Route-LookupType -ROUTE-LOOKUPAction -ALLOW Infoin 172.20.0.0 255.255.255.0 inside Access-ListType -ACCESS-LIS...