Hot answers tagged cisco-asa
Fortunatelly I'm already able to answer - I want to allow someone else to spare several hours and lot of headache. we have had configured everything correctly - NAT, ACL, CACL, routes etc. But we we have forgot for one crucial thing - this interface was new and IPSEC was not enabled on that interface. crypto ikev1 enable newiface was the solution for our ...
You need a real router. Cisco ASA firewalls are not routers... My default routes/gateways in customer environments are usually dedicated routers or layer-3 switches that point all internet traffic to a firewall (ASA) and handle any more specific routes/VLANs themselves. ip route 0.0.0.0 0.0.0.0 192.168.2.1 Policy-based routing example for another ...
You're not going to be able to achieve source-based routing off modifying the standard route metric. You'll need to use a form of PBR to achieve what you're going for. Drop on over to Cisco to read up on it or get more information. A barebones would be something like this: access-list 1 permit <server ip> ! interface ethernet 1 ip policy ...
The path of least resistance is to ask the people who manage the destination firewall for a copy of the Cisco IPSEC VPN client or for access using an SSL AnyConnect VPN. See if they can provide a PCF configuration file to you.
Only top voted, non community-wiki answers of a minimum length are eligible