1
vote
1answer
440 views

Openswan Cisco ASA 9.1 — cannot resopnd to IPsec SA request because no connection is known for

Ok, so I have a simple VPN IPSEC setup with a single Linux host that has a public IP address and a loopback interface of 172.16.255.1. On the right side I have a Cisco ASA 5505 9.1. the issue is the ...
1
vote
1answer
565 views

Site-to-site VPN between 5505 and 5512x

I am trying to setup a site-to-site vpn IPsec tunnel between an ASA 5512x and 5505 on an isolated network. I ran through the IPsec VPN wizard on both devices and used the same configuration but they ...
0
votes
1answer
302 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
0
votes
1answer
517 views

ASA 5510 Site to Site VPN works in one direction

I have setup a site to site VPN connection between two Cisco ASA 5510. One site (let's call it A) can see the private network of the other site (site B), but site B cannot see the private network of ...
1
vote
1answer
402 views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
1
vote
1answer
297 views

Site-To-Site VPN does not work for one specific subnet

We are using Cisco 5500 series ASA for sites HQ and BX and there is a site-to-site vpn in between, BX (subnet 192.168.6.0) can access to subnet 192.168.200.0 subnet at HQ but can't access 192.168.0.0 ...
0
votes
1answer
246 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
2
votes
0answers
327 views

ASA Site to Site VPN Version 8.4 Natting Same Subnets

My site and client site has same Lan IP range. Both using ASA version 8.4 Site A : 192.168.18.0 Site B : 192.168.18.0 Please tell me how to do Natting on 8.4 Any help would be highly appreciated. ...
1
vote
1answer
318 views

Barracuda/ASA IPSEC tunnel is closing (which is ok, on idle) but can only be raised from the Barracuda side

We have a IPSEC tunnel set up between our ASA and a Barracuda NG on the other side. The tunnel is functional, except it seems to have a very short idle time-out (couple of seconds) and it can only be ...
0
votes
2answers
2k views

Ping Cisco ASA over VPN

ASA1 is 8.4(2) @ 192.168.1.1, behind this is host1 @ 192.168.1.10 ASA2 is 8.4(3) @ 192.168.2.1, behind this is host2 @ 192.168.2.10 Pinging form host1 to host2 works, but I can't ping that inside ...
0
votes
2answers
1k views

Outside VPN traffic not able to ping site-to-site VPN remote site

we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly. Site/Subnet A: 192.100.0.0 - local (8.4(4)) Site/Subnet B: 192.200.0.0 - ...
0
votes
1answer
4k views

Site-to-Site VPN between two ASA 5505s only working in one direction

I am in the process of setting up a remote office for the first time and have been trying to establish a site-to-site VPN between the branch and the home office. I used the Site-to-Site VPN Wizards ...
0
votes
1answer
652 views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
0
votes
3answers
638 views

How to test fail over VPN between ASAs without disabling the main connection?

I have a fail over VPN set up between two ASA in case the p2p connection drops. I'm trying to find a way to test this with out dropping the p2p. Any ideas on this? I can't generate any interesting ...
0
votes
1answer
158 views

Is this the proper way to set up VPN tunnels for this network topology?

Below is the network topology I will be working with. The left just shows that all sites have a single internet connection. The right shows how I would be setting up the VPN tunnels. The main concern ...
1
vote
0answers
665 views

Site B FXO configuration for incoming calls

I am trying to configure the FXO port (voice-port 4) on a Cisco SRST881. Currently, there is one working remote extension here (ext 50) and all calls originate from our main office. My goal is to ...
0
votes
1answer
5k views

VPN from ASA5505-Checkpoint failing after one hour

I have an IPsec site-site VPN set up and working, however I'm having problems once the connection has been established for over an hour. After an hour ASDM still thinks the VPN is connected and the ...
3
votes
1answer
2k views

site-to-site VPN between cisco ASA and 870 cannot ping remote network

I have two sites which are connected through site-to-site vpn from cisco. One site has a cisco ASA router, the other has a cisco 870 router The tunnel has been setup, and active, however I cannot ...
1
vote
1answer
380 views

Site-To-Site VPN for internal traffic only

I'd like to connect my home network with my office network. At my office (host) I have a Cisco ASA 5510 ready to go. At my home network I'd like only work traffic to flow through the tunnel (meaning ...
0
votes
2answers
2k views

Giving VPN connections access to all locations?

I have asked a similiar question, but didn't get any answers so i am going to try and rephrase. i have 4 locations corporate and 3 remotes when you are at the corporate location, you have full ...
2
votes
2answers
863 views

Cisco ASA 5505 (8.05): asymmetrical group-policy filter on an L2L IPSec tunnel

I'm trying to find a way to setup a bi-directional L2L IPSec tunnel, but with differing group-policy filter ACLs for both sides. I have the following filter ACL setup, applied, and working on my ...
1
vote
0answers
769 views

Site-to-site VPN using IPCop and Cisco ASA 5505

So I'm coming into a company who wants to move away from their IPCop firewalls and replace them with Cisco ASA 5505's. Instead of ripping the entire network down and keeping it down for however many ...
2
votes
1answer
964 views

Cisco ASA - VPN and Hairpinning

We have 2 sites that will be linked by a IPSEC VPN between 2 Cisco ASAs: Site 1 8Mb ADSL Connection Cisco ASA 505 Site 2 2Mb SDSL Connection Cisco ASA 505 Basically, both sites need access to a ...
2
votes
1answer
8k views

How can I forward ALL traffic over a site-to-site VPN on Cisco ASA?

I currently have two Cisco ASA 5100 routers. They are at different physical sites and are configured with a site-to-site VPN which is active and working. I can communicate with the subnets on either ...