i am using the c:\iperf -s on a server at the Head Office and
c:\iperf -c (ServerIP) on a machine at the Branch.
nothing comes up... whats blocking it ?? and where is it being blocked.. at the branch router or the HO router or the ASA ???? cause i have all type of traffic open at the Routers and IP traffic on the ASA from branch.
the BR-Router communicates with HO-router via VPn tunnel.
i really need to test the bandwidth using the iperf command...
Iperf uses a default port of 5001 for both server and client. So, if there is a firewall between them this port needs to be open in both directions. Also, if you have access-lists on the routers then these should also allow port 5001.
Alternatively, if you know for sure that a particular port is already open you can specify this port with the -p option (or if you are using jperf just change it in the GUI)
I believe that your issue with TFTP involves a fundamental aspect of how the ASA works. Traffic from a higher level interface (inside) is allowed to go through a lower level interface (outside) and any return traffic is permitted. This allows any end station inside to initiate a connection to any device outside and for response traffic to be permitted. But by default the ASA will not allow a machine outside to initiate a connection to an end station inside. To get this to work you will need to create an access policy on the outside interface to allow traffic from outside to initiate a connection to inside. The access list referenced in an earlier post appears to be for the inside interface. I believe that you need a similar access list for the outside interface (with addresses appropriately transposed).
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :