1,440 reputation
39
bio website
location Milwaukee, WI
age
visits member for 3 years, 5 months
seen Oct 15 '13 at 14:29

Aug
13
awarded  Popular Question
Jul
16
awarded  Yearling
Jul
16
awarded  Yearling
May
26
awarded  Revival
Dec
4
comment any consumer router supports change source and destination IP at the same time?
Cisco ASA OS 8.3 and up can also accomplish this with "Twice NAT." However, Dennis's answer below is spot on in the sense that this sort of arrangement isn't security -- and warrants several questions back to your auditor.
Nov
28
answered Trouble setting up incoming VPN in Microsoft SBS 2008 through a Cisco ASA 5505 appliance
Nov
27
answered Cisco AP, how to show dot11 wpa handshake timeout?
Nov
27
comment Cisco ASA 5505 in small office configuration
Agreed. Given the simple arrangement (no other reasons noted) -- replace your existing Internet edge firewall with the ASA 5505. It will prevent a lot of headaches.
Nov
1
comment Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name
What ASA OS version are you using? Also, post all of your NAT related CLI config ( 8.2 and lower "nat", "global", and "static") (8.3 and higher just "nat"). Others are also correct in that you can use split-DNS and not deal with this in the firewall.
Nov
1
comment Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name
The Cisco ASA does indeed support this feature -- although Cisco generally refers to it as Hairpin NAT, U-turn, or tromboning (like the instrument).
Aug
19
comment How to configure Cisco SG 300-28 for Trunking?
Careful now, HP ProCurve does in fact use the term "trunk" to represent what Cisco calls an Etherchannel or channel-group.
Jul
17
awarded  Revival
Jul
16
awarded  Yearling
Jun
12
answered PIX 506E, MTU, VPN Packet Fragmentation and Shoretel IP telephone system
Jun
11
answered Is it safe to use a single switch for multiple subnets?
May
16
comment spanning tree protocol(STP) bridge priority configuration
@xtrusion Default bridge priority is generally 32768. The bridge ID combines bridge priority and a MAC address. By setting the priority value on your cores to 4096 (and 8192) the 4096 will become the STP root as its bridge ID (which includes the priority) is the lowest. With all other bridges defaulting to 32768 you do not have to be concerned with other bridge's becoming the root (unless your core's fail). Combined with Root Guard it is a simple and safe design for a small/medium size network.
May
11
answered What benefits are there to enabling STP on a WiFi access point?
May
11
answered spanning tree protocol(STP) bridge priority configuration
Mar
16
answered Cisco ASA Routing, Hairpin?
Feb
19
revised Cisco Get Current Interface Throughput
spelling