Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello!
I need to setup automatic tunnel failover so that when vpn to primary site goes down it switches over to backup site. Not dual internet connection but datacenter failover.
Any ideas on how to achieve this would be much appreciated
Hello,
I am having trouble understanding what the netmask in this particular global statement does. Is it dynamic NAT or just PAT? In other words, will the ASA translate the real ip addresses ( which is a network object group in this ACE, by the way)...
This syntax from the Cisco guide may help you.
nat (real_ifc,mapped_ifc) source static real_ob [ mapped_obj | interface ] destination static mapped_obj real_obj service real_src_mapped_dest_svc_obj mapped_src_real_dest_svc_obj
If you specify...
Yes, it looks like they are the mapped port numbers according to the syntax from the Cisco guide. Thanks for your help.
static (real_interface,mapped_interface) {tcp | udp} {mapped_ip | interface} mapped_port access-list acl_name [dns] [norandomseq]...
I see. Well, these are the original 8.2 NAT statements I was trying to convert to 9.4 code.
static (inside,outside) tcp ipA 1025 access-list inside_nat_static_131 static (inside,outside) tcp ipA 1026 access-list inside_nat_static_132
Are 1025 and 102...
Well, the outside interface ip address falls in the 12.3.0.0 subnet. These are the relevant NAT statements.
global (outside) 1 6.5.x.x netmask 255.0.0.0
global (inside) 1 10.75.x.x netmask 255.255.255.255
nat (outside) 1 access-list outside_nat_out...