VPN

Dears,i am a little bit confused when configuring IPSec site-to-site with Nat Overload. I have two questions:1- I need to know the order of operations between NAT overload (including either an ACL or a route-map) and crypto map (including an ACL). Fo...

Hi, I have an Cisco ASA-5510 that have a lot of packet dropped in a sub interface of outside physical interface. Why do this? Is a queue-limit issue?show interface DMZ_TNInterface GigabitEthernet0/2.14 "DMZ_TN", is up, line protocol is up Hardware i...

Hello!I have a trouble with stateful VPN configuration and Cisco VPN Client.My configuration in the attach. Please check it.So everything seems ok, but when I make Cisco VPN Client connection to standby IP address I see cisco3825_1#show crypto isakmp...

Greetings, we have a client with one HQ location and three branch offices.Currently the HQ has a managed 2610 router terminating the internet connection, behind this is a PIX515 and behind that is a 2651.The PIX provides VPN client termination and se...

In my new office, we have a Cisco Catalyst Express 500 switch. I want to check its IP without disturbing any existing setup. Can somebody help me?

Hi Having a weird issue between a ASA 5505 and ASA 5520 both are running 804-K8. The tunnel will remain up for around 8 Hours then drop. It will then be down for about 30 seconds before coming back up.This wasn't a problem until we started replicatin...

Hi all,I have a case to migrate the VPN Concentrator to ASA Firewall but i have forgotten the Group Authentication Password, Is there any way / tools to recover back the password?

Can any one help me is resolving issue. I have a vpn tunnel which is up and working.I am using static nat host to host and I want a whole subnet will point to a single IP( which is visible from other side and its part of the VPN tunnel traffic ) can ...

hi,I need assistance in configuring Site to site VPN with one end as PIX Firewall and another End with RouterLAN---PIX-------((INTERNET))-------RTR----LANEncryption is 3DES and MD5Need to allow 3host on each siteSite A need to allow 192.168.1.125 / 1...

In my case, I have two Cisco ASA5505 firewall vpn. They create a ipsec site to site tunnel. I want to use this tunnel to transfer data. When I try to make a ping testing. The reply is timeout. For example: I use ping -l 65500 xxx.xxx.xxx.xxx byt...

Hello,I have set up the ipsec between two servers to pass through firewall.I had to allow both directions from host to host on tcp/udp 500,88 and had to put ip any access-list entry as well to make it work. the question is: we are using PIX 6.4 and i...

I have a conflicting network (192.168.20.x/24) that I need to connect to a peer with the same network on their end.Our inside IP addresses are in the 10.x.x.x range, as well as some 192.168.x.x addresses. Now here is what I am trying to accomplish -...

Hi Everyone, I upgraded the firmware on one of our firewalls to 8.2 today and since the upgrade no tunnels are forming I just get queing key aquire messages repeatedly.I have confirmed the config is the same as it was and everything else is working...

i see cpu usage going up in asa 5520 to 77 percent i have disabled syslog what would be the reason

Hi Guys,Is it possible to connect an ADSL connection to a Cisco 5505 ASA using PPPOE? I want to replace my dsl modem with the asa but need to know if it would accept and RJ11 connection for the adsl?Cheers,Ross.