Search results for query: *

What am I looking for? I didn't see much...

We have a 3MB pipe to the Internet. I can't believe we need more in order for this to work properly? Seems excessive...

I have an Exchange 2007 CAS Server, with OWA. Internally it runs fine, always available. However, from the outside, it's available maybe 75% of the time. The other 25% users see the page trying to load, and after a few minutes, it times out. They can wait a few minutes or so, try again, and it's...

brianinms, Thanks for taking the time to reply. I asked that of the engineer who set it up, but it looks okay. I did some digging around, and it almost looks like I'll need to reconfigure the ASA to use VLAN'/Secondary Interfaces, and add the other subnets as VLAN's, then enable ACL's to allow...

Hey, sorry for the replies...I did some googling, and found some things on this site as well. Would I need to add sub-interfaces [VLANS] to the existing Inside interface that includes all of the attached networks? Like VLAN 100 - 10.11.0.0/21, VLAN200 - 10.12.0.0/21, etc.?

I tried adding a static map "static (inside,outside) 10.10.x.x 10.10.x.x netmask 255.255.248.0" and then an ACL that says access-list 101 permit ip 10.12.0.0 255.255.248.0 10.10.0.0 255.255.248.0. But when I do that, it kills access to the Internet, etc...

Thanks baddos. I added that, and still no luck. When that's in, I get the following error: portmap translation creation failed for icmp src inside: 10.10.3.9 dst inside: 10.12.0.254 (type 8, code 0)

Unclerico, Yes here it is.... **************************************** ASA Version 8.0(4) ! hostname lhc-fw01 domain-name chandom.internal enable password dcbvmiVNKth1v4Xn encrypted passwd dcbvmiVNKth1v4Xn encrypted names name 192.168.200.0 dmz description DMZ Interface name 192.168.10.0...

Unclerico, I think I see where the confusion is. From the ASA I can ping to all locations [i.e. if I telnet to the ASA, I can ping to all locations. However, hosts behind the ASA cannot. With all the changes made, the error I get now is the NAT translation. It's odd. I may need to open an event...

Unclerico, I can change a host to .254, and it can reach the other sites. However, they will not be able to reach the Internet. That's the dilemma. I may be able to change the Gateway to an L3 switch soon. At the moment, the current switch is only L2...

Unclerico, Sorry for the confusion. I was making changes along the way. As it stands now, I can get to the Internet, etc. I am now just getting the NAT translation error on pings. That's it...

Unclerico, I did remove the ICMP ACL. Same results. Weird.

baddos, Thanks. Yes. I had that in initially. Then I added some for more granular access. So I change to permit http, https, etc. any any, including icmp [echo/echo-reply]. When I did that, I now receive the following Error on the logs: No translating group found for icmp src inside: 10.10.3.9...

unclerico, Yes, it is. If I ping from a PC inside the ASA [10.10.3.9/21] to 10.11.0.254, I receive the warning on the logs stating deny icmp src inside: 10.10.3.9 dst inside: 10.11.0.254 (type 8, code 0) by access-group inside_access_in [0x0, 0x0]

The only difference is that the logs changed from Error to warning. Stating the same, that Deny inbound, but now it's based on an ACL.

baddos, Thanks. I added that, with no change.

unclerico, One thing to mention. If I am on a host [example 10.10.1.1/21] and try to ping anything on the remote hosts [i.e. 10.12.0.254] I receive a DENY on the ASA [Example: Deny inbound icmp src inside: 10.10.1.1 dst inside: 10.12.0.254 (type 8, code0)].

unclerico, Yes the diagram you attached is correct. I have all the routes in place on the ASA. I'll double check to see if our provider has them... Thanks!

SITE 1----------------MAIN SITE------------SITE 2 ROUTER ROUTER ROUTER 10.11.0.254/21 10.10.0.254/21 10.12.0.254/21 HOST 10.11.1.1/21 ASA HOST...

unclerico, I would, but I don't think it will let me post a jpg. here. Any ideas on how I can do that?