Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi All,We are trying to establish a site to site VPN, our site is using a Cisco ASA 5510 and the remote site is using a Cisco 3000 VPN concentrator.The ASA 5510 is configured using ASDM as follows:IKE Policies1 aes-192 sha 2 pre-sha...
Hi, i have a strange problem with my cisco 837. I can telnet to it from my local lan no problems but when i try to telnet to it from work or any external ip it will not and eventually times out. I did have an access list applied to the vty lines but ...
Hi all,I have a cisco 837. It is connected to a adsl broadband connection. I would like to configure it so that when I connect to it from remotely (from work) on port 5001 it will forward to an internal ip address 90.0.1.200.The application is a stre...
At the moment my support organisation use the cisco vpn client on their windows pc's to provide remote support to our customers. I want to know if there is a solution from cisco that would support nialing up the 30 connections all the time without ha...
We have some strange behaviour at the moment on our remote servers connected using mpls vpn. When I try and ssh to a centos servers it takes up to 1 minute to get a login prompt. If I ping the server there is no reply for sometimes 30 seconds to a mi...
Ok, just made great breakthough in that I changed the ip subnet for target remote nework and the now the ipsec sa is established. I dont get an reply packets though as I can see the TX bytes on the tunnel increase but the RX bytes remain 0, at least ...
If I am quick enough I can catch the state set to MM_ACTIVE. Although I dont understand why encrypt is 3des.#show crypto isakmp sa detail5 IKE Peer: x.x.x.x Type : L2L Role : initiator Rekey : no State : MM_...
Sorry I said earlier that debug crypto ispec did not show any output, but I tested again and can see the following happen when I send traffic toward the tunnels IPsBM-Fw01# debug crypto ipsec 255BM-Fw01# IPSEC: Received a PFKey message from IKEIPSEC...
Thanks Federico,So I made the following changes that you suggested:This is the config I hadcrypto map outside_map 6 match address outside_cryptomap_2crypto map outside_map 6 set peer x.x.x.xcrypto map outside_map 6 set transform-set ESP-AES-128-SHA E...
took me a little while but figured it out. I had my internet connected nat'd, the route map pointed to an access list which said permit ip any any. This was causing the remote telnet/ssh problems. The nat access list needed to be for the inside netwo...
