1
Troubleshooting / Re: MultiSite configuraton error
« on: June 17, 2015, 02:00:58 AM »
Now ， Peer Status is up
thank you very much
thank you very much
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1] 2
2
Troubleshooting / Re: MultiSite configuraton error
« on: June 17, 2015, 01:54:44 AM »
thank you ，I will try then tell you result
3
Troubleshooting / Re: MultiSite configuraton error
« on: June 17, 2015, 01:12:56 AM »
my network layout
lan1---wanos1-----asa5520 ------site to site vpn-------asa5505----wanos2----lan2
site1 asa rules(inside): all subnet full access site2 subnets
site2 rule the same as site1
And can you tell me how to set with UDP encapsulation on both ends.
like setting below （wanos）
# Source Destination Port DSCP Class QoS Rate Bypass
98 0.0.0.0/0 0.0.0.0/0 udp - 1 - - ✔ Remove this rule Edit this rule
OR
System Settings--Optimization Settings --Encapsulation --select udp （default is ipcomp ）
lan1---wanos1-----asa5520 ------site to site vpn-------asa5505----wanos2----lan2
site1 asa rules(inside): all subnet full access site2 subnets
site2 rule the same as site1
And can you tell me how to set with UDP encapsulation on both ends.
like setting below （wanos）
# Source Destination Port DSCP Class QoS Rate Bypass
98 0.0.0.0/0 0.0.0.0/0 udp - 1 - - ✔ Remove this rule Edit this rule
OR
System Settings--Optimization Settings --Encapsulation --select udp （default is ipcomp ）
4
Troubleshooting / Re: MultiSite configuraton error
« on: June 16, 2015, 09:26:41 AM »
I found another problem,
my site2 asa version:8.21 (asa5505)
subnet:192.168.7.x 192.168.8.x 192.168.9.x
Site1 asa version: 8.21 (asa5520)
subnet:192.168.38.x 192.168.86.x 192.168.70.x
when i add below commons in two asa, peer status is up
access-list TCP_Option_76 extended permit tcp any any log
tcp-map TCP_Option_76_Tmap
tcp-options range 76 76 allow
class-map TCP_Option_76_Cmap
match access-list TCP_Option_76
policy-map global_policy
class TCP_Option_76_Cmap
set connection advanced-options TCP_Option_76_Tmap
All Clients of Site2 can't access site1 's sql, web Servers of all,but ping is ok,but they can access website of outside
must "no service-policy global_policy global" in site1 asa and reload asa5505 , it can reback normal
my site2 asa version:8.21 (asa5505)
subnet:192.168.7.x 192.168.8.x 192.168.9.x
Site1 asa version: 8.21 (asa5520)
subnet:192.168.38.x 192.168.86.x 192.168.70.x
when i add below commons in two asa, peer status is up
access-list TCP_Option_76 extended permit tcp any any log
tcp-map TCP_Option_76_Tmap
tcp-options range 76 76 allow
class-map TCP_Option_76_Cmap
match access-list TCP_Option_76
policy-map global_policy
class TCP_Option_76_Cmap
set connection advanced-options TCP_Option_76_Tmap
All Clients of Site2 can't access site1 's sql, web Servers of all,but ping is ok,but they can access website of outside
must "no service-policy global_policy global" in site1 asa and reload asa5505 , it can reback normal
5
Troubleshooting / Re: Link errors status is fail
« on: June 16, 2015, 07:35:01 AM »
thanks ahenning
after clear.sh ,it 's work normal
after clear.sh ,it 's work normal
6
Troubleshooting / Re: MultiSite configuraton error
« on: June 16, 2015, 07:33:53 AM »
In accordance with your operator, Peer Status is up, but PLR status is off
how about for this
how about for this
7
Troubleshooting / Re: MultiSite configuraton error
« on: June 12, 2015, 03:11:35 PM »
Thank you,
I have set up according to your 1) 3) 4) ,but peer status always down.
next week I will check lan0 cable or other
I have set up according to your 1) 3) 4) ,but peer status always down.
next week I will check lan0 cable or other
8
Troubleshooting / Re: Link errors status is fail
« on: June 12, 2015, 12:07:01 PM »
bridge
i need how to check it
i need how to check it
9
Troubleshooting / MultiSite configuraton error
« on: June 12, 2015, 05:23:11 AM »
my wanos layout
LAN1---WANOS1----ASAFW1-----VPN---------ASAFW2---WANOS2----LAN2
my two wanos sites peer status are down,please help me check it
LAN1---WANOS1----ASAFW1-----VPN---------ASAFW2---WANOS2----LAN2
my two wanos sites peer status are down,please help me check it
10
Troubleshooting / Re: Link errors status is fail
« on: June 12, 2015, 12:00:23 AM »
below info .like good
11
Troubleshooting / Link errors status is fail
« on: June 11, 2015, 10:06:01 AM »
my network is normal, but diagnostics---Health Status---Link Errors Fail
what's happened
what's happened
12
Configuration / Wanos work mode
« on: June 10, 2015, 06:35:39 AM »
I understand wanos three models, right?
1. Bridge
LAN---core-switch ---（lan）wanos（wan）---Router--ISP Internet
Lan0 ipaddress is management interface ,wan0 don't need ipaddress
2.Route
wanos
virtual_lan ip（wan）wan0 ip
|
Lan---core-switch ---ISP Internet
virtual_lan ipaddress is lan 's gateway ,wan0 is public ipaddress
3. Bypass
wanos
（lan）
|
LAN------core-switch ---Router---ISP Internet
Lan0 ipaddress is management interface
1. Bridge
LAN---core-switch ---（lan）wanos（wan）---Router--ISP Internet
Lan0 ipaddress is management interface ,wan0 don't need ipaddress
2.Route
wanos
virtual_lan ip（wan）wan0 ip
|
Lan---core-switch ---ISP Internet
virtual_lan ipaddress is lan 's gateway ,wan0 is public ipaddress
3. Bypass
wanos
（lan）
|
LAN------core-switch ---Router---ISP Internet
Lan0 ipaddress is management interface
13
Installation / Re: clone a live machine running from flash sda to a physical disk sdb
« on: June 08, 2015, 10:38:43 AM »
thank you very much 
14
Installation / Re: clone a live machine running from flash sda to a physical disk sdb
« on: June 08, 2015, 01:58:48 AM »
after i done this command ,network is ok
ifconfig wan0 down & ifconfig wan0 up
ifconfig lan0 down ifconfig lan0 up
ifconfig tun0 down ifconfig tun0 up
And I have found wanos must ping gateway first after reboot or configuration applied,then network can work normal
ifconfig wan0 down & ifconfig wan0 up
ifconfig lan0 down ifconfig lan0 up
ifconfig tun0 down ifconfig tun0 up
And I have found wanos must ping gateway first after reboot or configuration applied,then network can work normal
15
Installation / Re: clone a live machine running from flash sda to a physical disk sdb
« on: June 08, 2015, 01:21:11 AM »
R710 two ports connect to CISCO switches, switches and virtual switches mode are trunk, and my other VM network is normal
How can i write img file to hdisk via “Win32 Disk Imager” (I know USB is ok)
How can i write img file to hdisk via “Win32 Disk Imager” (I know USB is ok)
Pages: [1] 2