I am seeking some clarification on the correct NAT configuration for l2l tunnel. We have an FTP server that users access direct through outside interface and then a VPN l2l tunnel that also terminates on the outside interface and tunneled traffic/u...
Forum Posts
Hi, My client wants to keep records as of when and who was started the VPN from remote to the office. He is using Cisco 2901 router with "155-3.M5" IOS. Actually, he wants to see "who and when" was login by VPN from the remote. He is using local a...
I 'm using a VPN CLIENT Version 5.0.07.0440 to connect to my customer, my custumer says that if I use internet on my machine once connected to his vpn , I use his Internet resources , something that does not make sense , because I am not opening the ...
Hello, I have an Cisco ASA 9.9(1)2. I need to establich a VPN to a device not under my control (with IPsec IKEv2). On my ASA I have to use VTI. The VPN tunnel goes up and is working correctly only when it is initiated from the other side, traffic f...
In the diagram below, a User uses Internet Explorer on Windows 7 to access Clientless WEBVPN on FirePower 4100, with ASA version 9.7 When the user login to Clientless WEBVPN, he supposed to get an IP from the IP pool assigned for SSL WEBVPN (Anyconne...
Resolved! DfltGrpPolicy multiple tunnels
Can the DfltGrpPolicy be used for multiple site-to-site dynamic tunnels? I basically have a hub and spoke with a Cisco ASA 5525, and several Cradlepoint devices. The 5525 is static, and Cradlepoints are dynamic. I have tested one using the dynamic...
I must have made a change to my configuration at some point because I would be at work on Verizon LTE on my iPad and connect to my Cisco Router IP and it would bring up CCP 3.5 Express no problem. Then, I would also be able to Portscan and see port 8...
Hi, I am using cisco 1811 router. I have configured EASY VPN from Site to client (Using Shrewsoft VPN Client ) and Site to Site VPN on same physical interface. The router was configured with Site to Site VPN which was working fine. Then I configure...
Hi, Native vpn client to ASA connect and Intranet access works like a charm, but I cannot get Internet access to work. This is my fw setup : ASA Version 9.9(1) ! hostname XX-GW domain-name XX-konsulterna.com enable password ”Very secret stuff” na...
Resolved! Timed VPN changes
hi, Is anyone aware of a way to stop a vpn tunnel from working but at a specific time. Basically we are going to be ceasing a specific connection (permanently) but at midnight and i dont want to be up to do it !
If you have a fully established (phase 1 and 2) VPN, is there a show command that lets you see which isakmp policy is being selected for that tunnel?
Hi All, I am trying to work with VPN from Windows 7 in Virtual Box Machine in my Macbook. The conection is completed with success but few seconds later the conection is lost but still connect in VPN and no show any error in the log. Could any o...
Hi everyone. I think i posted this in the wrong forum so i'm hoping this is now the right one. when installing an identity certificate from the CA i'm getting the error: "You can not import this certificate, because it has not been configured for...
Resolved! ASA 5506 Remote Access VPN Hairpin
I am having issues getting my anyconnect clients to be able to hairpin. I had this functional on my 5505, and used the same configuration from the 5505 to establish the setup on the 5506. Clients are able to talk to resources on the LAN, but unable...
IPv4 Crypto ISAKMP SAdst src state conn-id status103.81.XXX.XXX 206.208.XXX.XXX QM_IDLE 20324 ACTIVE103.81.XXX.XXX 206.208.XXX.XXX QM_IDLE 20293 ACTIVE Duplicate session with same destination and same s...
