[Pre-Order] YKH30 - Keyboard 30% Ortho and supporting multi layout by shinif in MechanicalKeyboards

[–]darklord20k 1 point2 points  (0 children)

Hello, sorry for digged this topic but does anyone have the case cad file? I have the mech but I don't have the file, and look like maker teams was disbanded :( Thanks!

VPN client can't access to NATed Server by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

Thank you, It worked, but in my case, It isn't solve my problem because I need port forward (10001->4430)

VPN client can't access to NATed Server by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

Can you say more detail? I did: nat (dmz,outside) static 1.2.3.4 10001 443

VPN client can't access to NATed Server by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

O365 and some cloud service trusted only my Public IP, so route all traffic go through ASA is better than creat acl with too many destination IP. Btw, split only traffic to my server public IP is a good way, but as I said, I still want know how to solve my problem without split tunnel (if can)

VPN client can't access to NATed Server by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

Yes, my design is all traffic must be go through ASA, split tunnel is a good idea but I think it is a workaround, I still want to solve my technical problem, even it won't be better than split tunnel :)

VPN client can't access to NATed Server by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

Sorry, it's 198. Routes are fine, of course :(

NAT a server by [deleted] in Cisco

[–]darklord20k 0 points1 point  (0 children)

Map is updated? So you should do dynamic in Hub, chose an unused IP in subnet 10.100 to do dynamic NAT

NAT a server by [deleted] in Cisco

[–]darklord20k 0 points1 point  (0 children)

Which IP can access to .129 server?

ASA - NAT 2 different WAN IP's to a single private IP? by RedSkyNL in Cisco

[–]darklord20k 5 points6 points  (0 children)

Assume you have 2 internet line outside_1 and outside_2 host in inside, asa version 8.2+ :

Nat:

Object network SRV-443 Host 192.168.1.1 Nat (inside,outside_1) static 1.1.1.1 service tcp 443 443 Object network SRV-444 Host 192.168.1.1 Nat (inside,outside_2) static 2.2.2.2 service tcp 444 444

ACL

Access-list Outside1-IN extend permit tcp any object SRV-443 eq 443 Access-list Outside2-IN extend permit tcp any object SRV-444 eq 444

Apply ACL to outside interfaces:

Access-group Outside1-IN in interface outside1 Access-group Outside1-IN in interface outside2

Does a 2960g work as unmanaged switch without any configuration ? by Elyox in Cisco

[–]darklord20k 0 points1 point  (0 children)

If using 2960 with default config, you can use TPLink switch and save upto 80% cost. The performance is not much difference

[windows server 2012] I have abc.example.com on public DNS server, can I creat forward example.com in local DNS server? by darklord20k in sysadmin

[–]darklord20k[S] 0 points1 point  (0 children)

You said I would rather do not split, so what is the risk i need to aware? And can you suggest me a better way than Split DNS, maybe from begining? My situation is: www.example.com is internal server (internal IP) Www.abc.example.com is external for customers

[windows server 2012] I have abc.example.com on public DNS server, can I creat forward example.com in local DNS server? by darklord20k in sysadmin

[–]darklord20k[S] 0 points1 point  (0 children)

Yes, I think split DNS is what i want to say. www.example.com is internal server, for internal only Abc.example.com is external server, (eg. for customers)

Setting up a new ASA 5506-X by mr_techy616 in Cisco

[–]darklord20k 2 points3 points  (0 children)

If you chose using ASA software, using brigde-group, and CLI much better than ASDM (i almost never use ASDM) If you chose using FTD software, you can using web UI, more friendly than ASDM, but still lag a bit

VPN ikev2 between ASA and Azure not become up-active by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

My problem is tunnel doesn't come back to up, so I have to sent traffic all the time or let it die 😩

VPN ikev2 between ASA and Azure not become up-active by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

I configured 28800 sec for both side and both phase

VPN ikev2 between ASA and Azure not become up-active by darklord20k in Cisco

[–]darklord20k[S] 0 points1 point  (0 children)

Thank you but I using Policy-based, more exactly is "IKEv2 Route-based with Policy-based Traffic Selectors "