Recent content by ekke

hi and thanks, i have a ssl cert with possibility to have several domains, do you think it will work or do i have to buy another one?

Hi im using webvpn with a asa5520 and it works fine, but due to a cert issue with ssl we are promted to accept ssl cert. i have a godaddy cert for my https mail, can i use it in the asa for webvpn access? //:EkkE

Hi, im installing a new exchange server to replace the old one due to old hardware. Is it possible to copy a "config" from the working exchange server or do i have to configure everything again? im also using Rpc/Https. //:EkkE

this is what i got today! access-list outside_access_in extended permit tcp any host 213.115.*.* eq smtp access-list outside_access_in extended permit tcp any host 213.115.*.* eq https static (inside,outside) tcp interface smtp 192.168.1.23 smtp netmask 255.255.255.255 static (inside,outside)...

Hi, want to add some rules to prohibith ex. pop, smtp etc from the inside to outside. i have today a access rules for smtp that forward smtp to our exchange server, will a new rule like the one i want to creat above intefear with the original one? //:EkkE

the default gateway and outside ip will change. I'm thinking maybe i can access the device with an inside interface with the asdm and do the change and hope after i hit apply i can reaccess with a vpn or maybe webvpn and from there run a rdp connection to the machine running the asdm so i can...

thanks, but im a little worried the box is located in another city. im hoping i can do the settings and then do apply and the switch over to new internet line and hope i did everything ok. //:EkkE

Hi, i have a remote site that have dhcp on the outside interface but now we are getting a static ip adress. how can i change the settings and still be able to acces the asa for further config??

Hey Supergroover. i tried to pick out what i need, can you confirm the files below if im missing anything. //:EkkE ASA1 access-list 100 extended permit ip 10.2.2.0 255.255.255.0 10.1.1.0 255.255.255.0 crypto ipsec transform-set myset esp-des esp-md5-hmac crypto dynamic-map cisco 1 set...

anybody have a copy of a working config?

Hi, i have to set up site to site with one side have dynamic ip. i have this config that works great for site to site with static ip. what can i change to get it to work for dynamic setup? access-list 100 extended permit ip 192.168.1.0 255.255.255.0 192.168.4.0 255.255.255.0 ! access-list...

Hi, i have a asa 5510 and its working fine. the cisco ipsec client works fine. but my backup vpn for xp clients l2tp work only when i add "crypto isakmp nat-traversal" then it works just fine. but the command does not stay after save and reload of asa the "no crypto isakmp nat-traversal" i...

Hi, is it possible to get some kind of login script to run when you use the cisco vpn client accessing you network. //:EkkE

Hey, right after i submitted my earlier post i found this. http://renesictnotepad.blogspot.com/2008/04/lessons-learned-cisco-asa-5505-and-tcp.html great link worked perfectly. thanks for the help. //:EkkE

sh accell-list looks fine. logging level is debugging, i get a TCP request discarded from x.x.x.x/42791 to outside:x.x.x.189/25