Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Recent content by nnnnnnnnnn

  1. nnnnnnnnnn

    Cisco 1801 802.1q tunked to Procurve 2810 dropping packets

    Well before I saw this I had already started downloading the code upgrade. So after going from 11.06 to 11.15 and rebooting the switch to dropping has stopped. Thanks for your help!!!!
  2. nnnnnnnnnn

    Cisco 1801 802.1q tunked to Procurve 2810 dropping packets

    Hello all, first time posting, so its for a Procurve 2810 something I don't deal with much. We have an 1801 router connected to a 2810 using a vlan trunk. Even though the port and device utilization is very low on both the 2810 and the 1801 the 2810 is dropping some of the routers packets...
  3. nnnnnnnnnn

    Finding unmanaged switches

    yes, I am trying to find rouge unmanaged devices like netgear or whatever. But I am trying to avoid the manual task of looking through all of the switches. I was really hoping 3750's support TCL, IOS routers do and IOS 6k does but it looks like only the 3750-E supports TCL and of course I have...
  4. nnnnnnnnnn

    Finding unmanaged switches

    I have allot of facilities most with large networks. I am trying to find a good way to identify unmanaged switches connected switch ports. I know I can scan through the cam\mac table but we are talking big numbers of multiple member 3750 stacks. anything intrusive is just not an option at...
  5. nnnnnnnnnn

    Can any body help me to understand the Cisco Pix Firewall 515?

    If I am understanding the question correctly you did not post that part. those tags are names that have been defined for referance through out the config. you can see those enries in the configuration, use this command. show run names hope that helps cheers
  6. nnnnnnnnnn

    Can any body help me to understand the Cisco Pix Firewall 515?

    Post a sanitized copy of your config, if its not huge it shouldn't be to hard. cheers http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/config.html
  7. nnnnnnnnnn

    ASA 5510 site to site VPN with Sonicwall phase 2 error

    Not sure what you mean by re-establish. Those commands clear active connections in the database. They don't modify the running configuration. to re-establish the tunnel you should only have to try to send traffic trough it. By the way this is what you are clearing show crypto ipsec sa...
  8. nnnnnnnnnn

    ASA 5510 site to site VPN with Sonicwall phase 2 error

    here is what I see, and for give me I am not so savvy with sonicwall. It looks like the error on your sonicwall says the ASA is using perfect forward security group 2 but your sonicwall is not. Its interesting the Cisco doc says not to set it for this type of setup. However I would try...
  9. nnnnnnnnnn

    ASA 5510 site to site VPN with Sonicwall phase 2 error

    It would be helpful if you could post the details of the vpn policy you have on the sonicwall, specifically gateway, destinations, and crypto suite. It might also help to list the settings in the IPSec (Phase 2) Proposal section. I am thinking you probably have the crypto matching, but the...
  10. nnnnnnnnnn

    Route between 1811 and ASA 5510

    The router looked like it was routing the ASA inside segment correctly. Try clearing the translationg on the ASA. cheers clear xlate
  11. nnnnnnnnnn

    Route between 1811 and ASA 5510

    my bad, they go on the ASA. cheers
  12. nnnnnnnnnn

    Route between 1811 and ASA 5510

    I think your just missing the nonat statement and acl to allow that traffic. hope that helps cheers access-list nonat-inside extended permit ip 192.168.3.0 255.255.255.0 192.168.1.0 255.255.255.0 nat (outside2) 0 access-list nonat-inside access-list outside2-in extended permit ip...
  13. nnnnnnnnnn

    ASA 5510 VPN site-to-site

    actually that complicates things. I was kind of hoping the peer was a pix or router. Sonicwalls are not something I am no so savvy with. I did find an artical on cisco.com with an example on how this is done. I did notice Cisco used aes-256 with sha but you are using 3des with sha, but I...
  14. nnnnnnnnnn

    ASA 5510 VPN site-to-site

    I think this is the important error 4|Feb 15 2008|09:48:17|113019|||Group = 66.35.x.x, Username = 66.35.x.x, IP = 66.35.x.x, Session disconnected. Session Type: IKE, Duration: 0h:00m:10s, Bytes xmt: 0, Bytes rcv: 0, Reason: Phase 2 Mismatch In order for two peers to successfully negotiate an...
  15. nnnnnnnnnn

    5510 allow internet access to certain IPs only

    here is an acl that will allow your .192 host to talk to any other host. Than blocking all other hosts. This will be applied to inbound traffic on the inside interface. you can see acl hits by typing 'show access-list'. hope that helps cheers access-list inside-in extended permit ip host...
See more

Part and Inventory Search

Back
Top