We currently have 10 "G" and 3 "B" AP's deployed. With that we have a mixed number (over 125)of both G and B card working side and side. Laptop user will even roam from G AP to B AP and the connection will pick right up. As to the AP's configs nothing too fancy. Security is 128 bit key and MAC...
Now that you have a public IP mapped to your internal system you still need to open your ACL on the external interface. You will need to open the ports for TCP port 1723 and for IP 47. For security you should limit the connection from only the system IP that you want to connect to. Something...
All,
Contact TAC.
They have a beta rev of the code that is a fix for the domain authen bug. TAC sent us a copy last week and we have deployed it on several system. The new code rev is working fine. If you are desperate (like us) use the beta but the full version can't be far behind
Two thing that may help:
The crypto acl access-list outside_cryptomap_20 permit ip 172.25.10.0 255.255.255.0 XXXXX 255.255.255.0
I believe is telling all traffic (including WWW) to use the VPN tunnel. Try adding a deny statement for all www before the current permit all IP statement. This may...
For the DNS queries...
Lookup tools like NSLOOKUP use a UDP source port gt 1023 and destination port of 53. You may need to add a statment like:
access-list 110 permit udp any eq domain (your internals) gt 1023
You don't need one for tcp since the established statment should allow the tcp...
This statment from your list allows outside to ping your addrsses.
access-list 110 permit icmp any any echo
To allow inside to get a ping back in you need a reply statment.
access-list 110 permit icmp any any echo-reply
I have a similar problem, Im backing up to a travan (yes I know!) using Veritas BU Exec 8. It was working fine untill the begining of the week where it now asks for another tape! I added up the files im backing up , they came to 10.5gb The tape has a capacity of 20gb compressed. Im running...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.