James.Birmingham
  • Member for 8 years, 6 months
  • Last seen more than a month ago
  • San Francisco Bay Area
Cisco ASA 5500 disable connection tracking
2 votes

By default, the ASA inspects SIP and many other protocols as you can see listed below. policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 ...

View answer
Cisco ASA 5512-x, problem with incoming traffic to Exchange server and access to https:/xxx.xxx/owa
2 votes

This NAT statement looks good: object network Exchange-Int nat (Inside,Outside) static interface service tcp https https This ACL allowing access to the exchange server from outside interface looks ...

View answer
ASA VPN works as responder but not as initiator
Accepted answer
2 votes

I've seen similar behavior when the Phase 2 SA liftetime settings don't match. You may want to try matching both your Phase 1 and 2 lifetime settings. This is your Phase 1 lifetime configuration on ...

View answer
Problem with IP phones after ISP failover change
Accepted answer
4 votes

From your description of the issue, this could be related to the UDP connections not being torn down from the Backup interface once the Main interface becomes available. You can use the following ...

View answer
Cisco ASA 9.0(1) - NAT / PAT
Accepted answer
8 votes

Here's an example configuration for what you're looking to accomplish. First create an object for you server: object network SRV1 host 10.203.5.1 Next, create the PAT rule that uses your outside ...

View answer
TCP Reset-I on Cisco ASA 5512x version 9.1
Accepted answer
3 votes

If you only have a single subnet behind the firewall, I would try something like this. object network inside-net subnet 192.168.1.0 255.255.255.0 nat(inside,outside) dynamic interface dns You would ...

View answer
Routing from home VPN to other VPN (ASA 5505)
Accepted answer
3 votes

Yes, this configuration is possible using a Cisco 5505. It's referred to as a VPN hairpin because traffic from the outside interface is coming inbound and then routing back outbound through the same ...

View answer
SVI as a DHCP client
Accepted answer
15 votes

You can configure an SVI as a dhcp client by using the following command within the SVI. ip address dhcp The same command is used on physical interfaces as well.

View answer
Why do not we have checksum validation in the application Level (BGP , RIP)?
2 votes

Allow me to quote Mr. Jeff Doyle Like EGP, BGP forms a unique, unicast-based connection to each of its BGP-speaking peers. To increase the reliability of the peer connection, BGP uses TCP (port 179)...

View answer
Wifi TCP iperf throughput: 1 stream vs multiple streams?
2 votes

Here's the calculation for the maximum throughput of a single tcp stream. (TCP Window [bytes]/RTT[seconds]) * 8 [bits/byte] = Max single tcp throughput in (bps) So you have a bottleneck and latency ...

View answer
Injecting routes in to BGP for advertisement: BGP network command
6 votes

If you're familiar with IGP's(EIGRP, OSPF), the network command is used for advertising networks and establishing neighbors using multicast addresses. BGP is different because we statically assign ...

View answer
Traffic policing on 3750-x Lan base
1 votes

You've most likely already done this but wanted to ensure you've enabled QOS on the interface or globally by using the command: mls qos

View answer
EIGRP topology table - unexpected behavior
Accepted answer
4 votes

Try using the command show ip eigrp topology all-links This should allow you to view all routes including non-successor/non-feasible routes

View answer