How is your site-to-site setup? is it EIGRP over IPSEC or just IPSEC
Scenario A (terminating ipsec at pix/ASAs, eigrp at routerA&B)
(SITE A)- RouterA <-> PIX/ASA <--> Internet PIX/ASA <-> RouterB
OR
Scenario B (terminating ipsec and/or eigrp at PIXes)
(SITE A)- RouterA <-> PIX/ASA <-->...
eaperezh,
Did you remove all four of them?
access-list 100 deny ip 192.168.100.0 0.0.0.255 any
access-list 101 permit ip 192.168.100.0 0.0.0.255 any
access-list 102 permit ip 192.168.100.0 0.0.0.255 any
access-list 103 permit ip 192.168.100.0 0.0.0.255 any
access-list 104 permit ip...
Switch D& F must have both voip and access vlans if you plan to to connect laptop to voip phones.
Move fibre uplink from Switch E to switch F, with a fiber media converter, or just use copper will do the job (unless there's 300 feet distance that preventing you).
I would simpley replace that...
When you show access-list 100, you see any hits? this access may block hosts from 192.168.100.0 to the net.
access-list 100 deny ip 192.168.100.0 0.0.0.255 any
if not, show xlate to see if clients are nat'ed.
hope this help.
Tbrennan3613,
Sorry I don't have any sample handy, but it really is straight forward.
you need to create dial-peer voice pots with destination dial pattern 5911, forward only 3 digits, for 911 calls, and also 5T (most people use 9 to call out, but any digit would work) for regular calls and...
Hi all,
My adsl modem don't do NAT, vpn_client connects okay but there is no traffic between the vpn_client network and corporate network, I may have missed something here.Any pointer, appreicated.
bkfw# wr ter
: Saved
:
PIX Version 6.3(5)
interface ethernet0 10full
interface ethernet1...
There's a missing STATIC. From your config, there are the assumptions:
Public ip: 83.67.aaa.ccc
smtp relay host in (dmz): 10.0.146.2
smtp server (inside) 192.168.4.8
**Create Static one to one xlate**
Static (DMZ, Outside) 83.67.aaa.ccc 10.0.146.2 netmask 255.255.255.255
Static (Inside...
We noted there a lot crc errors on the interface, I will replace the cable or swap switch port # to see if it help.
Thanks,
**********
Ethernet0/0 is up, line protocol is up
Hardware is AmdP2, address is 0001.963c.82e0 (bia 0001.963c.82e0)
Description: Connected to store 16 LAN...
Thanks Network G.
I am sure about the 1st question but router has default route everything to the firewall.
Router response time is 49/48/46 ms (high/averge/low)
Firewall reponse time is 46/45/43 ms
***router trace result****
F:\>tracert 172.16.16.1
Tracing route to DC16router.posplus.com...
Hi, we recently deploy pix 501 in a remote office and creating site-t0-site vpn connection to HQ in an attempt to tear down the point-to-point t1- saving cost, everything work okay, except when client on hq access services like http or ftp or smtp, it is so so slow{painting screen}. The temp...
Hi,
Has anyone deployed multiple site2stie vpn connections from Central office to remote offices using RRI. I setup couple site2site vpn connections between asa 5500 and pix 501 the asa injects eigrp route to the arm router but fails to remove the route when site2site vpn connections for a...
Hi,
The archive tar command works great! Thanks,
arch tar ?
/table List files in tar file
/xtract Extract files in tar file
I am running ccme for voip phones on my router, for mass rapid deployment,it it faster if I simply copy and change some parameters to its needs.
Hi,
Is there a way to copy multiple files from one router to another?
I have more than 100 files that I need to copy to another identical model router, I used tftp (copy flash:CiscoLogo.gif tftp://192.168.1.2) and then recopy from tftp server to a router, or copy from and to an usbflash0...
Hi,
Is there a way to copy multiple files from one router to another?
I have more than 100 files that I need to copy to another identical model router, I used tftp (copy flash:CiscoLogo.gif tftp://192.168.1.2) and then recopy from tftp server to a router, or copy from and to an usbflash0...
farana75,
I strongly recommend not to open the vnc port to the public, it is not a best security practice. You might wanna setup vpn service on your 506E and then you can vnc or rdp from there.
#######VPN service Config###########
access-list vpn_clients permit ip [YourCorpNetworkID and...
Astro, can you post the config?
so we can see what's wrong.
if it is dns related, use ip # instead of url for now, if it is faster.
go to dslreports.com/tools or other speed test sites, to test the speed of your internet connection. May sure your isp not ripping your off for what you paying.
This may be too late, but this article may help.
http://support.microsoft.com/default.aspx?scid=kb;en-us;280132.
1. Create a static
static (dmz,outside) 222.123.123.123 192.168.1.123 dns netmask 255.255.255.255
2. outside to dmz
access-list outside_acl permit tcp any host 222.123.123.123 eq...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.