About SuperVitya

SuperVitya · 06-06-2011

Dear Collegues,I have a router where ipsec connections to several other points have been configured. Now I need to configure a DMVPN structure where this router should be a spoke. Its external interface address is x.x.x.x. The address of one of the a...

SuperVitya · 01-24-2011

Hi!Now I am testing site-to-site VPN between two IOS 12.4 routers (2821 and 881) with IKE authorization by RSA-SIG.Both routers successfully received certificates from the same CA.Trustpoint configurations on both routers were also the same:!crypto p...

SuperVitya · 12-14-2010

Hello, collegues!There is a VPN scheme where two sites are connected with a VPN tunnel. Both peers are based on OpenBSD. The remote site does not have a static IP address so the standard site-to-site VPN is not possible. This peer is configured as a ...

SuperVitya · 12-07-2010

Hi!I have a routing-related problem on my Cisco ASA 5540.I have configured several interfaces on the appliance. Two of them face to the local subnets.> interface GigabitEthernet0/0.252 > description -= Catalyst 6000 =- > vlan 252 > nameif INSIDE...

SuperVitya · 12-02-2010

Good day!Our border router connects to the ISP router with a p2p subnet. The IP address on our router connect interface can not be used for other services such as VPN. The provider filters all packets with this address set in an IP header. So we must...

SuperVitya · 01-26-2011

Yes, Marcin. Now I am learning CCIE Security program.Debugging this I found one interesting thing. i also turned on 'crypto isakmp' debugging on 2821 and noticed that certificate received from the peer is considered the following way:next-payload : 6...

SuperVitya · 12-09-2010

Hi, collegues!After consultations with TAC there has been confirmed the only solution.1. On the core switch the source-based policy should be configured. So all users will come to ASA through the common interface (.252 in my case) while users from th...

SuperVitya · 12-07-2010

Hi, Ganesh!Thank you for the advice. But when I removed 'management-only' parameter from the management0/0 interface nothing changed. It still does not want to send outgoing packets with the source IP of management0/0 interface through another interf...

SuperVitya · 12-06-2010

Hello, collegues.Thank you, Marcin. Your recommendation was useful. Really the router sends encrypted packets with its internal interface IP address in the header.But there is one more difficulty. This router has a backup. And its internal interface ...

Member Since	‎12-02-2010 02:29 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	9

User Statistics

User Activity

Legacy VPN (with 'crypto map') vs DMVPN on the same outside interface

PKI AAA Authorization (IOS 12.4)

ASA5540 as a remote VPN server, OpenBSD as a client

ASA 5540 Routing Problem

3945 site-to-site VPN termination not on p2p connect interface

Re: PKI AAA Authorization (IOS 12.4)

Re: ASA 5540 Routing Problem

Re: ASA 5540 Routing Problem

Re: 3945 site-to-site VPN termination not on p2p connect interfa