VPN

I have setup IPSec Tunnel between two peers.  Below is a result of ip cry sa:interface: outside    Crypto map tag: outside_map, local addr. 192.200.222.16   local  ident (addr/mask/prot/port): (FW_SEGMENT/255.255.240.0/0/0)   remote ident (addr/mask/...

Hi,I would like to ask you about ASA in acitve/pasive failover mode and certificate. So, I have a problem with certificate which is in running-config on active ASA, but ceritficate in not on passive node. When I use wr mem or copy runnig-config start...

Hi all,I have read several guides on how to configure site-to-site VPN between Cisco and Checkpoint using pre-shared keys. The configuration is correct on Checkpoint side and as far as I know from Cisco as well.The encryption policy is:- 3DES - MD5 -...

hi there,can someone guide me how can I setup ASA for our IPAD client for PKI (digital certificate authntication)? Our IPAD user shouldn't need to input any user/password for connect our vpn. I want to install certificate on both side and let them au...

I am routing OSPF routing protocol through an GRE/IPSec tunnel.  Everything is identical configured on both sides.  Yet, everything couple of hours, I am seeing this message:Jul 13 00:13:03.807: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet...

Hi all,Can any body give me some help in terms of sample config regarding route based VPN on cisco routers ?I tried to set up a route based IPSEC VPN between cisco and forigate firewall.show crypto sa shows that tunnel get established correctly. But ...

Hello,I have a task to open VPN ports outbound only. Please help me on how to configure the firewall to access VPN. I want to open ports of VPN only where will I apply the ports in the firewall.thank you and best regardsEdwin

Hi All,VPN concentrator VPN tunnel dis connecting and establishing  frequently , below are the debug logs . please sugget possible cause .26267 06/03/2010 13:38:38.780 SEV=5 IKE/50 RPT=53900 x.x.x.x Group [x.x.x.x]Connection terminated for peer x.x.x...

Dear All,I have VPN 3000 series concentrator   , S2S tunnel  built to check point .  since last week tunnel  having issue . below are the observationPhase one will be up . TX traffic observing increasing . RX  trffic not moving . application are not ...

Hello All,I am familiar with u-turn for remote access and site to site vpns with dynamic public addressing, ie that site has to initiate the connection, so the crypto acl at the hub is fairly simple. However what if both spoke sites have static addre...

Hi,I've inherited some 871W's that are currently configured to establish ezvpn IPSEC connections to a Cisco ASA 5520.I'm somewhat shaky on IOS...not bad, but by no means an expert.I need the 871's to be able to contact certain servers on our internal...