199 reputation
19
bio website
location
age
visits member for 4 years, 1 month
seen Oct 17 at 14:59

Oct
8
awarded  Popular Question
Jul
19
comment Cisco ASA 8.2, accessing an internal webserver with an external IP-address together with port translation
Please post your NAT statements for this server & ACL statements for the ingress interface for your internal users. Also, can you verify that there are 3 interfaces here? External, internal and the host is on the dmz?
Jul
19
comment Weird network problems with Vagrant, VirtualBox, Ansible and Ubuntu Server box
Do you have a working ipv6 internet connection from these boxes? If not, you should investigate why your boxes are resolving ubuntu.com via a AAAA record and/or try disabling ipv6 on the box and retest.
May
25
awarded  Popular Question
May
24
comment DNS doctoring between 3 interfaces
Can you clarify which interface the webserver is off of? You say that it is both on the outside 1.2.3.4 and DMZ 10.10.10.x networks. Also, what version of software are you running?
May
24
comment DNS doctoring between 3 interfaces
Use the packet-tracer utility (either ssh or ASDM) to determine the affect of your existing NAT rules. Also, what version of software are you running?
Aug
5
comment “Unballooning” RAM that's been ballooned by VMware
If you identify the ballooned VMs programmatically, then you'd need to supply a destination to your script to move them to. If this is a huge number of VMs/hosts, that may get complicated. Would it be easier to just maintenance-mode each host, serially, until the whole cluster has been migrated?
Jul
24
comment ASA 5510 Site to Site VPN works in one direction
you said the acls are "equal on both sides". do you mean that they are reversed, or equal? do you have rules allowing siteA -> siteB, and siteB -> siteA, in the same acl?
Jul
10
awarded  Notable Question
Jul
1
comment Secondary fallback/failover network on Cisco ASA
Are you sure your next hop IP is correct - 192.168.70.1? You'd be NAT'ing your internal traffic to another non-global IP.
Feb
8
comment Allowing multiple IP addresses for a single VPN user
I also, have not used this product, but with regex, adding additional IPs should be pretty "clean". Can you not just do (IP1)|(IP2)|(IP3), etc? So the other staff just keeps appending |(IPnew) to the value. The pipe is an or.
Jan
16
comment ASA 5505 not allowing traffic to lower security interface
I've found that "any" gives access to the inside network, which I don't want to do. Our ACLs are all applied as ingress filters.
Jan
16
comment ASA 5505 not allowing traffic to lower security interface
There are static bidirectional NATs for the devices on this dmz interface, and they are functioning correctly. Are you saying that for outbound to the internet usage, you are specifying all the allowed possible Inet ranges of IPs for all your devices?
Jan
15
asked ASA 5505 not allowing traffic to lower security interface
Dec
9
awarded  Critic
Dec
9
comment Cisco IOS switch dropping legit DHCP requests
Is the client on the same vlan as the dhcp server, or are you using an ip helper-address?
Nov
19
comment Error while adding new host to vm center
Does this host have any VMs running on it yet? Also, does your cluster already have other running hosts that are working? Are the other hosts also the same version of ESXi 5.1 (same build #)?
Nov
11
answered ASA 5505 8.4 open ports for subnet
Nov
11
revised Outbound Traffic Logging on ASA 5520 possible?
added 282 characters in body
Nov
11
answered Outbound Traffic Logging on ASA 5520 possible?