Member Since: Jan 10, 2007
No problem, let me know the outcome if you would. thanks.
Just got my first 5506-x and ran into this same issue. Simple site to site tunnel. Wired clients...
Your crypto acl's should be exact mirrors of each other.If your router acl isaccess-list 111 permit...
No, don't remove on the other end. That is needed.What does your split tunnel acl look like on...
You shouldn't need those last 2 lines there as the nat0 is applied to the inside interface, while...
It looks like you have the traffic defined in the crypto acl's and the nat0 acl on the site B asa...
Thanks for correcting me Ankur.
edit: Corrected by Ankur.
I guess I'm confused as to where these 2 hosts are. Are you saying that 10.8.20.10 is in the dmz of...
Try adding.... static (inside,dmz) 10.8.22.0 10.8.22.0 netmask 255.255.255.0
- Page 1
|Answers marked as Correct||296|