Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
ASA5520, v7.1Question: is it possible to use an access-list as the peer address in the "set peer" command? If yes it might look like "access-list 101 permit ip 2.3.4.244 255.255.254.255" which would match exactly 2.3. and host 244, and permit subnet...
Does anyone know the order of operation of NAT and IPSec on ASA5520 ver 7.0(4)?outside (Internet) <==> asa5520 <==> dmz______________________________<==> insideWhat I'm looking for is the normal order of operation of the features when establishing a...
I need for the PRI to drop calls when a route (or routes) or interface (or interfaces) goes down and not accept calls until it comes back. The problem is that the caller is a device, not a person, and won't recognize the lack of traffic and drop the ...
This does not work:>>>>>>>>>>>no ip dhcp conflict logging!ip dhcp pool dhcp1 network 10.1.10.32 255.255.255.240 default-router 10.1.10.101 >>>>>>>>>with an debug ip dhcp server events message that 10.1.10.101 does not have a pool (.101 is the FA0...
Thanks Bobby,Not the reply I was hoping for. Can you point me to the Cisco document that has this information so I can pass it to my customer?Thanks,Jason
Jackko,That is great info, thank you.Te original question, tho, is the order of operation of NAT, IPSec(VPNs).for example, I have traffic hitting my outside interface (public internet) from a known public source IP. I want that traffic to be encap in...
Patrick,you said:"You do realize that when you nat them they become publicly available for other people to connect to them as long as there is an access-list applied to that external interface."Doesn't my acl "access-list list1 extended permit tcp ho...
