Hi Everyone.GRE tunnel from Site A hasMTU 17916 bytes, BW 100 Kbit, DLY 50000 usec,Site B hasMTU 1514 bytes, BW 9 Kbit, DLY 500000 usec,I read that default BW for GRE is 9kbit but here 1 side has default and other side has 100.One...
Hi All,I was wondering if someone could help explain access lists when configuring site-to-site VPN tunnels. Basically I used this guide to roughly create a GNS3 lab for me getting to understand IPSec tunnels etc.http://commonerrors.blogspot.co.uk/20...
I am setting up a DMVPN between several dozen sites using 2800, 2900 and 3900 series ISRs. The DMVPN Design Guide recommends current 12.4 or 12.4T IOS, but the DG was last updated in July 2008. I cannot seem to find any recommendations newer than t...
Hi,Please I have question about vpn split tunnel for internal hosts that we need to be accessed via the internet.My split tunnel works ok but at the moment we want to exclude some of the tunneled domain hosts from being accessed via the tunnel but in...
Hi, I want to buy an ASA 5510 in order to make VPN of 2 kind, for remote users, and for site to site with linksys in the other side.About remote users, i am evaluating ssl VPN client and clientless, but what I want to know is if I have 200 users, and...
I have a minor issueclient is 2.5.0217OnConnect script works great through the anyconnect client however if I use the web ssl front end to launch the anyconnect client the onconnect script does not run. Is there any way to have onconnect and ondiscon...
Hi All, I configured dual ISP on ASA 5520 with a help of cisco doc below. Now I would like to configure SSL VPN to work with this for failover? Could anyone shed some light on me for this one? I tried to find an article regarding this but I could not...
We're fighting an issue with a 3660 router (fitted with a pair ot 2-port T1/E1 cards and four NM-24DM sleds) being used as a dial-up remote access platform. Over time, we see an increasing number of dial-in attempts fail to authenticate.What happens...
Hi Everyone,I see hew Tunnel interface on Router.Router is Running OSPF.It has no crypto statemets.tunnel configurationinterface Tunnel1ip address 10.4.x.x x.x.x.xdelay 7tunnel source Loopback1tunnel destination 10.4.x.xMy question is when we use Tu...
Hi,I currently have a HA pair of ASA5510's, as I understand it the 2 free premium licenses can be used by the mobile client as long as the ASA has the license for the mobile clients?Can any one confirm that my understanding is correct, or would i nee...
We currenlty have 2 ASA 5510's. ONe is for acl and the other is for endpoint.I need to know the best way to merge everyting onto the endpoint. this was not done before due to oly having 128mb of memory. we have since upgraded and would like to merg...
Hi, where can I configure the anyconnect 3.0 session persistence parameters with ASA 8.4 ?We are near to the roll-out of RSA SecurID authentication for anyconnect 3.0 client and I'd like to reduce the user activities in case of reconnection.thanksrs
hi friends. i established a vpn between dynamic ip router and static ip pix. i am simulating the scenario of my university network in GNS3. i want the traffic received by pix firewall through vpn tunnel go to the internet to a specific server throug...
Hi experts,We got some Avaya VPN phones. After the ASA firmware upgrade from 8.0.2 to 8.4.5 the phone is not working anymore...The VPN still works for the PC vpn client software... I have verified the isakmp preshared key several times... Here is out...
