About danbowencisco

danbowencisco · 04-20-2012

Hi Everyone,I have a 3560G connected to an ASA FW, both running layer 3 and hosting 6 or so VLANs. The switch is the default gateway for all VLANs (client request) and therefore see's all networks as connected. I used route maps to push the traffic f...

danbowencisco · 04-18-2012

Hi Everyone,I have a Cisco L3 switch that I have configured route maps on to amend the next hop to be a firewall. The destination network for the traffic is also connected to the switch (therefore directly connected network), but my issue is this.If ...

danbowencisco · 04-17-2012

Hi Everyone,I am very new to working with these devices but am looking for some help in getting the AIP-SSM10 to scan FTP traffic that passes the FW. I have generated the traffic (FTP) and it has been successful, but it doesnt seem to go via the IDS ...

danbowencisco · 04-12-2012

Hi Everyone,I have a 3560G and an ASA FW, for which I am trying to use PBR to append the next hop. The gateway is the switch VLAN address and the amended net hop is the same VLAN interface on the ASA. Trouble is, I can ping the FW from a client, but ...

danbowencisco · 04-02-2012

Hi Everyone,I have a 3560G with 3 VLANs connected to a Cisco ASA with the same VLANs. I want to have the switch interface for each VLAN as the default gateway for clients and then forward this traffic to the ASA for firewalling. Problem is, due to th...

danbowencisco · 04-20-2012

you shouldnt really use VLAN1 as its used by things like CDP and therefore if it gets compromised, so do the hosts on it. Better to change the default VLAN to something else and not use VLAN 1 for any hosts/servers.Dan

danbowencisco · 04-20-2012

we only have a single FW and a single switch, unfortunately.Dan

danbowencisco · 04-20-2012

thanks Edison.Im trying to find a workaround for my previous question, but the route map statement isnt supported on 3560G. Any ideas on how I could get around this?Dan

danbowencisco · 04-20-2012

not a problem Dan, sorry I wasted your time.I have another possible solution tho...

danbowencisco · 04-20-2012

Hi Dan.No, even when I only have one verify entry per map it still doesnt work, its only when I remove the verify and replace with set ip next-hop that it works. Cisco have screwed us in the fact they support verify-availability, but not at an inter...

Member Since	‎01-26-2012 03:00 AM
Date Last Visited	‎08-18-2017 03:54 AM
Posts	81
Total Helpful Votes Received	14

User Statistics

User Activity

Avoid using connected network using vrf

Usage of Route Maps for Next Hop

Issue Getting AIP-SSM to Scan Traffic

Cannot Ping Default Gateway with Route Map Applied

Problem with Route Maps on 3560G

Using Default Vlan

Avoid using connected network using vrf

Avoid using connected network using vrf

Usage of Route Maps for Next Hop

Usage of Route Maps for Next Hop