Search results for query: *

Hi, I am planning a checkpoint management server upgrade from Windows 2008 R71 to Gaia R77.10 To avoid progressive upgrade, is it possible I can manually configure all the policies and nodes on the Gaia R77 and then transfer the ip address and licensing , after shutting down old to new Gaia...

Yes that is the problem , I have now been told that performance routing (pfr) is what I need. I think this only works with BGP or can it work with EIGRP? Not sure if it's complex or easy to configure and use. Does anyone use this ?

I have EIGRP routing protocol running between fully meshed VPN tunnels. I understand that EIGRP will load balance across equal paths and that to introduce other un-equal paths I have to use the variance command. If I have 2 paths and there is latency on one of the paths will EIGRP...

Hi, I have an ASA 5525 and would like to trunk the inside interface to 2 separate core switches on the same vlan (88) for resiliency. The two switches are Cisco 6500 switches that have Vlans using HSRP between them. I am curently using version 8.6 on the ASA 5525. How I can trunk the ports...

Hi, Thank you for this info. 1) If the C.C.C.C failed can I fail over to another interface and go to another backup site ? I have multipoint sites using Palto Alto and was wondering if I can configure automatic failover of tunnels using ip sla. I have not been sucessful in testing this as...

Hi, I have attached a test config. The commands are slightly different on ASA 5525. I am struggling to find a way to add 2 peers to the outside interface both Map-B and Map-P. What have I done wrong ? interface GigabitEthernet0/0 description Peering Clients nameif outside security-level...

Hello, I am new to ASA world so please bear with me. I have an ASA5525 and want to create site-to-site IPSEC VPN tunnels to 3 peers. I have an existing /28 public ip address from ISP and want to know if I can use this address for all 3 peers. Is there a way to overcome this easily ? Regards,

Hello Unclerico, As you mention Palo Alto can you tell me if you have tried doing Site-to-Site IPSEC VPN to an ASA 5500 Series appliance ? Does anyone know if this works then we dont need to buy the ASA ? Regards,

If I have 1700 users is the 5510 still a good option ? Also which ASA will accomodate roughly 3000 users ?

Hello, I am looking to implement a Site to Site IPSEC VPN connection between 2 offices. I already have an ASA 5505 in possession, but was wondering if it would be able to cope with 100 users connecting to Main Office for data I.e Docs, Email , Internet etc ? or do I need to go out and buy a...

In terms of security we are effectly still two different domains. All EMEA smaller offices come into UK data Center Site A. US has offices in different states plus some Asia sites come into US Data Center Site B. Since we are moving into one big meshed environment (cloud) there are still...

Yes we are speaking with provider but in terms of design need to know if anyone has VPLS currently and alternate options to over come issues without making it too complex.

All the sites including smaller offices are geographically separate. They all have different POP. Site A and B are effectively different domains.

Hello, Need some help understanding concepts of VPLS and Multi-VRF. We are in the process of implementing VPLS. We have two main sites A&B and each site has smaller offices. With the new VPLS cloud all the sites and offices are meshed and can connect to each other, where as before each of...

How much does this software cost ? I assume its software that does the configuration for you ?

I am not sure I understand... The GRE tunnels create a point to point link from one site to another... ?

Thank you but I am looking to do a manual configuration on routers.

Hell0, I am trying to configure GRE VPN Tunnels between 10 sites with EIGRP. This will be a fully meshed VPN. Is it better to use /30 or /27 ip addressing. Regards,

OK Im confused ! Vlan 75 is our User VLAN Vlan 501 is the Management Vlan which allows us to manage the layer 2 switch. I disabled IP Routing on the layer 2 switch but enabled it again because I thought DHCP may need it. Are you asking me to remove the 501 Management vlan and configure a...

I thought a better configuration was to have the Layer 3 VLAN 75 on the Core switch ? I can ping everywhere from a PC with a static IP but DHCP does not work ?