VPN

What is the rule of thumb for ISAKMP vs IPSEC timeouts?  Should the ISAKMP timeout be half if not more that the 86400 IKE timeout?

Hi All,I have a VPN setup thru a Cisco 5520, Windows clients connect just find and the end users configure there browser to use our internal proxy servers.   Users with the MAC OS X Anyconnect client can connect, they configure their Mac to use our p...

I am having a very odd issue that is causing some issues.I have two ways people can VPN in to their network, one using the Cisco AnyConnect and one using Native Windows VPN. I have everything working good and we can all connect.Here is the issue........

Hello Cisco ASA experts,I am using Cisco ASA 8.4 and AnyConnect 3.0 to provide remote access to the corporate users. My question is concerning the IP address assignment.I need a provide an IP from a local IP pool (managed by ASA) so I declared an int...

Hi Guy's. I have two ASA 5510's that have been running a site to site for some time. Yesterday around 11:00am this suddenly stopped work. The tunnel is up and operational but i'm unable to ping any devices on with end. 1: Phase 1 IKE negotiation is u...

Hi Guys,still struggling with the EZVPN setup.This is instantaneous setup at the moment.LAN ---- inside-(​192.168.44.1) ASA outside-(DHCP private IP) ---- (private IP)-ISP Router-(public IP)The ISP blocks UDP/500 and UDP/4500 so there is no way to se...

Hello guys,I have the following question regarding this bug. In the bug summary it says that the bug is fixed, but in the "Known fixed releases" it shows no releases and there is a number of zero there, which to me means that it is not fixed.How to f...

Hello,I am actually trying to build a VTI tunnel. This case is a little particular ; as on the remote side i have router which is using a private ip address instead of a public (like i do habitually)Router gi0/0        -->      4G Modem     -->     I...

In my current situation, I have two ASA devices (a 5505 and 5520) that are configured to establish an IPsec tunnel over a network which I do not manage.There is currently one host on each ASA which need to communicate. Static IP addresses are used fo...

i have a 5510 connected to a 5505 using site to site vpn and can communicate from the internal network of the 5505 to the internal network on the 5510 but not vice versa (also NOTE ping does not work either way).

Hello, I am currently working with a client on a potential solution to an issue he has at present. The idea is to hold a phone system in a datacenter behind a Cisco ASA 5505, with upto 6 sites connecting in direct over IPSec VPN. (Site to Site)I am c...