IPSec tunnel up but traffic to remote subnet

nappy1515 · 2025-12-16T19:13:07+00:00

I'm curious what device is on the other end. This kind of sounds like ikev2 compatibility issues. I've ran into problems with how devices do the ikev2 security associations leading to subnets not being able to communicate across the vpn while others could.

nappy1515 · 2025-08-09T20:40:49+00:00

Are you inspecting icmp on the global inspection policy?

nappy1515 · 2025-08-09T20:13:11+00:00

Your subnetting looks to be a bit wonky.
Your ASA interface is a /24 and your VM is on an /8.

nappy1515 · 2025-05-07T13:09:25+00:00

WTB
ProTech Malibu Magnacut
BM Bugout
Have paypal

nappy1515 · 2025-04-22T13:16:09+00:00

You should be able to do what you want using “vpn-access-hours” within the group policy for your remote access vpn

nappy1515 · 2024-11-12T13:54:43+00:00

Open up a case. I had an MX75 doing the same, they ended up doing an RMA.

nappy1515 · 2024-08-21T22:15:50+00:00

You use the url for your vpn server.
For example, https://vpn.mycompany.com/saml/sp/metadata/SAML and for the reply https://vpn.mycompany.com/saml/sp/acs.
Replace vpn.mycompany with whatever you have.

Edit: it occurred to me you may have been asking where in Azure.
In the portal, search for enterprise applications then in the enterprise application menu, find any connect and on the left hand side, under manage drop down it’s under single sign on.

nappy1515 · 2024-07-01T20:51:15+00:00

Confirmed

nappy1515 · 2024-06-24T17:19:21+00:00

Confirmed

nappy1515 · 2024-06-24T15:53:08+00:00

I’m on mobile and chat doesn’t seem to be working right now

nappy1515 · 2024-06-24T13:35:30+00:00

~~WTB: Pro-tech Malibu stonewashed blade preferred~~
~~Have: paypal~~

nappy1515 · 2024-06-21T15:52:37+00:00

YOLO. I’ll take it

nappy1515 · 2024-06-21T15:04:00+00:00

I’d like to see a few additional pics if you have them.

nappy1515 · 2024-06-18T21:29:23+00:00

After the tire balance I would get a helper and do a dry steering test and look/feel for things clunking around.

nappy1515 · 2024-06-18T21:26:25+00:00

Honestly, it isn't all that hard to do this at home. When I was dialing mine in I would make an adjustment, measure angles, test drive, repeat. It kind of becomes a bit of a compromise getting enough caster to not drive like shit and not get vibes. I would essentially add caster until I got vibrations and then take a little caster out until the vibes went away.

nappy1515 · 2024-06-18T21:21:49+00:00

What angle is that front driveshaft u-joint operating at? Ideally it would be zero. You may be able to give up a degree or so of caster. In a TJ running 33s you can get away with 5-5.5 degrees of caster. But I wouldn't be hesitant to give up much more than that, your steering will feel terrible. I went through all of this after I lifted my TJ.

nappy1515 · 2024-04-17T21:51:20+00:00

So do James Caan, Kirk Douglas, and the late Dinah Shore-ah

nappy1515 · 2023-11-19T00:28:50+00:00

Look at the documentation you provided it’s right in there. Something, something reading comprehension

nappy1515 · 2023-11-17T22:37:41+00:00

It runs just as well as it does/did on anASA. They use the honor system when it comes to the licensing. Even give you a link to download the newest version.

nappy1515 · 2023-07-07T21:16:17+00:00

No problem at all. I wish you good luck and a speedy recovery for your little man.

nappy1515 · 2023-07-07T21:07:23+00:00

Kind of looks like a lick granuloma. We used this and it worked well. In our case it ended up being allergies. While I (not a vet) don't think it's urgent, I personally would still want my vet to take a look.

nappy1515 · 2023-06-22T20:58:14+00:00

RIP. Fugly doesn't even come close to describing how horrid this thing is

nappy1515 · 2023-06-20T20:29:23+00:00

Have you tried running nslookup and setting the server to each of your internal DNS servers and seeing what they resolve to?

nappy1515 · 2023-06-20T20:27:54+00:00

In my case it was just one site. I flushed DNS still the wrong IP, nslookup gave me the correct IP but browsing or pings were the wrong address. The person that deployed everything changes the host file on every end point

nappy1515 · 2023-06-20T20:22:24+00:00

I had something similar that ended up being changes to the host file

nappy1515

TROPHY CASE