below lab R1 184.108.40.206/8 wan ip and lan ip 192.168.1.1/24 R3 wan ip 220.127.116.11/29 &lan 172.16.0.0/16
now i make ipsec between above network successfully establish ,but the task is there is a secondary ip of the router R3 10.10.10.1/24 to establish site to site once i changed from R1 phase2 (for ip ) show crypto iskamp sa R1 the tunnel established (18.104.22.168 22.214.171.124 QM_IDLE 1002 ACTIVE) but not pinging from interest traffic ???? 2nd i make network translation R2 and revert the configuration to primary ip so the tunnel is not came up but translation is working any idea ?
below is the result , but from pc to pc not pinging .
R1#sho crypto isakmp sa IPv4 Crypto ISAKMP SA dst src state conn-id status 126.96.36.199 188.8.131.52 QM_IDLE 1003 ACTIVE 184.108.40.206 220.127.116.11 MM_NO_STATE 1002 ACTIVE (deleted) 18.104.22.168 22.214.171.124 MM_NO_STATE 1001 ACTIVE (deleted)
R3#sho ip nat translations Pro Inside global Inside local Outside local Outside global udp 126.96.36.199:500 172.17.1.1:500 188.8.131.52:500 184.108.40.206:500 udp 220.127.116.11:500 172.17.1.1:500 18.104.22.168:500 22.214.171.124:500 udp 126.96.36.199:4500 172.17.1.1:4500 188.8.131.52:4500 184.108.40.206:4500 --- 220.127.116.11 172.17.1.1 --- ---
Community Live Event Video
Are you ready to level up your security? Learn more about how Cisco SecureX can help you simplify your security and maximize operational efficiency.
This event talks about Cisco SecureX, its benefits, features, and usage. Th...
Hi all,I cannot understand why is something working very well they create a way to complicate things in Cisco ASA OS. I have a rule :object network LOCAL_ADRESS1 host 192.168.20.12 nat (VLAN20,outside) source static LOCAL_ADRESS1 interface&...
It is our pleasure to officially announce the finalists in the 2021 IT Blog Awards. We are now looking to our amazing tech community to check out the amazing line up of bloggers, vloggers and podcasters. Make sure to vote for your favorites...
Community Live Event Slides
This event talks about Cisco SecureX, its benefits, features, and usage. The session includes sample use cases and live demonstrations.
Cisco expert Luis Silva talks about how this solution can integrate Cisco technology and ...
Hello All, Recently I got an opportunity to perform POC with Cisco ISE (2.7 Patch 4) and Aruba Wireless AP (IAP) to perform 802.1x EAP-FAST (machine + user) authentication followed by Posture Assessment on Windows 10 Machines (installed with AnyConnect 4....