Unable to access ASA after change of network

I will try to give a sense that I am. I don't have access to all my resources in this place.

Attached is the updated chart opposes which was the precedent set. I have the same Setup across the VPN except my

ASA is 10.10.20.2

2921 is 10.10.20.1

LAN 172.20.16.0

On the other hand

ASA is 10.10.10.2

2921 is 10.10.20.1

LAN 10.20.60.0

I can access all nodes excpet the ASA on opposite sides.

I'll try to develop more

Roger

I think that the problem is with your card crypto access lists IE. before the ASAs had inside interfaces on the network client, but now they use different IP and you have not included the IPs in the acl applied to your card crypto for the VPN.

Check the two ASAs.

Jon

Tags: Cisco Security

Similar Questions

  • Unable to access webmail after update to osx el capitan (404 - file or directory not found)

    I can not access webmail after update to osx el capitan. I get the message "404 file or directory not found. The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable). What should do?

    Contact your webmail provider and ask the url appropriate to their webmail page. Is which provider? What url you put in the address bar?

  • My 3rd Windows 7 computer is unable to access the computers on the network. "Unable to browse the network", or "the network is not present or not started.

    3 computers, 2 XP, 3 windows 7.  The network is wired and wireless Ethernet.  Wired windows 7 computer can see xp wireless desktop.  no computer can see 3rd xp professional running on the wired computer.  Third computer can acess internet through router wireless, but when accessing NETWORK/MICROSOFT WINDOWS NETWORK PLACES/SET, a message comes back with "Unable to browse the network", "the network is not present or not started.  I can ping other computers.  I ran home and small office set up several times.  The network is protected by Norton Inernet Security.  He can see all computers in the group in its Panel of network security plan.  This system worked to a point.
    I'd appreciate any help you can provide.

    original title: unable to browse the network.

    All computers must be on a working group to see and access on the same network otherswise, you won't have access to each other.

    Pls check your computers under workinggroup (domain name)

    Check if your firewall is not blocking.

  • Unable to access directories after installing SP2

    I just downloaded and installed the Vista SP2.  Amongs other things, she changed completely the power settings for my laptop, but it's fixable.  What has blocked me is the fact that in Windows Explorer (or any name you people have changed, but I hope you know what I mean), I am is no longer allowed access to directories (or folders, or whatever you call them now) I have BEFORE in installed SP2.  I did all attempts to change the permissions, but the system won't let me (as an administrator) to do this. Explorer Windows sees the direcftory, but the monologue box tells me that the directory "... is not accessible." and "access denied."  This happened with the Windows required file 'my documents '.  When I try to change the permissions 'sharing' by "Everyone" I get the less-than-useful message that «...» An error occurred when trying to share Application data (it is an example). Access is denied.  The shared resource was not created at this time. »

    How can I go to get access to them now?  And something that you should ask yourself - why do you have designed an "improvement" that does this?

    Hi Evan,

    I see you found the access denied error when you try to access the documents"" folder. I will suggest you to do a system restore to the date when Sp2 has been installed, and if in case you want to install Sp2 then you can try downloading the Sp2 standalone package and install in safe mode with disabled security software.

    Here is the link for the standalone pack:

    http://www.Microsoft.com/downloads/details.aspx?FamilyId=a4dd31d5-F907-4406-9012-a5c3199ea2b3&displaylang=en

    Please try this step and I would like to know the result.

    Kind regards
    Shaolin Roger Thapa
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Unable to connect wireless after changing Internet providers, error res://ieframe.dll

    I just got AT and T U-verse, and now I can't connect wirelessly. I tried to reset the router, but that did not work. I get error res://ieframe.dll I currently have Windows XP and IE 8. I can connect through the LAN, but not wireless. Help, please

    Hello

    You have made no changes to the computer recently?

    I would suggest trying the following methods and check if it helps.

    Method 1:

    Problems in Windows wireless and wired network connection: http://windows.microsoft.com/en-US/windows/help/wired-and-wireless-network-connection-problems-in-windows

    Method 2:

    Check the proxy server settings are turned on. To do this, try the following steps:

    a. disable the proxy on Internet Explorer (IE)
    b. Click Start, type inetcpl.cpl and press to enter.
    c. click on the Connections tab, click the LAN Settings button.
    d. uncheck "Use a proxy server for your LAN" under proxy server.
    e. click ok to apply the changes.
    f. open Internet Explorer and check if the problem persists.

    Method 3:

    Try the following steps and try to serve DNS renew IP address and check if it helps.
    a. Click Start. Type cmd in the search box and press ENTER.
    b. at the command prompt, type the following command and press ENTER:

    enough to the command prompt ipconfig and press ENTER
    ipconfig / renew in command prompt and press ENTER

    c. close the command prompt and check if that helps.


    Method 4:

    Run the System File Checker and check if it helps.

    Description of Windows XP and Windows Server 2003 System File Checker (Sfc.exe): http://support.microsoft.com/kb/310747


    Method 5:

    Re-install the wireless network card drivers and check if it helps.
    How to change or remove a program in Windows XP: http://support.microsoft.com/kb/307895

  • Unable to access backup after system restore.

    Remember - this is a public forum so never post private information such as numbers of mail or telephone!

    No available restore points that are old enough to recover the missing files.

    When you try to access recovery (d), you receive the following message:

    Protected by PC Angel

    Recovery partition

    Caveat!

    This area of your hard drive, etc.

    • You have problems with programs
    • Error messages
    • Recent changes to your computer
    • What you have already tried to solve the problem

    restore points don't effect your files, so cannot you recover a missing with her.

    Recovery (D :) also has no backup file to this subject, but is used to restore your computer to the way it was when it left the factory.

    teengeek.freehostingcloud.com

  • Unable to access role to change the settings for the virtual Center

    Hi all

    I recently created two new roles to restrict the Active Directory in Virtual Center security group and the Resource Pool. I cloned VM Administrator role and tweaked so that this group can view full data center while being only able to create/delete the virtual machines in the resource pool. However, I can't work on what permission setting would completely restrict the role of access and changes to the "vCenter Server Settings" on the home page.

    Can someone please help?

    Virtual Center: 4.0.0 (Build: 208111)

    Thank you

    Fadi

    That sounds right.  roles and rights spread from host/cluster view for the sake of server configurations.

    If you set the role to the next level in vCenter 4 (which is the name/IP of your vCenter), they will have access to it.

    You can define a low level (data center), then define non-role or nothing at the top level.  you will need to place this permission/role on each object in the data center, you have for each of these connections.

    Kind regards

    Jonathan

    B.SC., RHCT, VMware vExpert 2009

    NOTE: If your question or problem has been resolved, please mark this thread as answered and awarded points accordingly.

  • Unable to access applications after the installation of CC2015.

    I installed CC 2015 and when you access applications, the right spinning wheel will not stop. Help?

    https://helpx.Adobe.com/creative-cloud/KB/creative-cloud-app-doesn ' t - open.html

    Mylenium

  • Unable to access the VPN Client LAN

    I configured a 877 for VPN Client Access. The Client authenticates and connects and receives an IP address off the coast of the pool of intellectual property. However, he is unable to access anything on the IP network.

    I have included my router config. The VPN Client is v5.0.05.0290.

    Any ideas on what I'm missing?

    Can try reverse our ACL VPN-Client, I think that it is written in the wrong way

    For example:

    VPN-Client extended IP access list

    Note * permit VPN Client pool *.

    IP enable any 192.168.201.0 0.0.0.255

    or more precise

    VPN-Client extended IP access list

    Note * permit VPN Client pool *.

    192.168.1.0 255.255.255.0 ip permit 192.168.201.0 0.0.0.255

  • Hello. I have download Adobe Acrobat Pro DC, after loading it is a window that is unable to access the Internet or is configured incorrectly. Tried to change the time and the Internet works fine. What can we do?

    Hello. I have download Adobe Acrobat Pro DC, after loading it is a window that is unable to access the Internet or is configured incorrectly. Tried to change the time and the Internet works fine. What can we do?

    Log, activation, or connection errors. CS5.5 and later, Acrobat DC

    https://helpx.Adobe.com/x-productkb/policy-pricing/activation-network-issues.html

  • The share of customers unable to access the network - error 0x80004005

    Hello, my network has the following configuration.

    • Server - Windows 2003 Server - acting as DNS, domain controller, file server
    • Clients - Windows XP Pro, Windows Vista business, Windows 7 Pro
    • DHCP server is on my router. All customers running on DHCP

    For some unknown reason, some network sharing has stopped working since yesterday. When users connect by Ctrl + Alt + Delete by using their network accounts, they are unable to access their computers in office, services, Skype etc., gives an error of 0 x 80004005 (unspecified error). They are not forced to use roaming profiles.

    I opened Windows Explorer and typed \\server\share. The same error is invited. However, if I try to access the share of \\ip\share, it can show me the files without a problem.

    I took to refine measures issues

    • Connectivity - outcome of the network: Internet access / access server by IP. So no connectivity problem
    • Ping-ing the name of the computer server - result: OK. So not a DNS problem
    • Check firewalls – result: Clients running Windows Firewall correctly. Network type, the value of 'work '.

    Other facts that may be useful

    • No third-party firewall. All running on Windows Firewall.
    • No settings changed before problem appeared
    • Problem appeared after a reboot the server

    (P.s. Skype prompted "Cannot find necessary files and cannot start". "I think it's the same problem with network shares, because the application data is also stored in network shares.)

    Hello

    Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the Forums TechNet Windows 7 Technet.
    Here is the link:
    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  • Windows 7 keeps changing home network to the public network, without pompting, in this case I can't access the internet, even though my router still receives the internet signal.

    Windows 7 keeps changing home network to the public network without asking for confirmation, this prevents me to access the internet

    Hi douglas wilson,.

    Welcome to the Microsoft Answers site!

    Since when are you facing this problem?

    We need additional information to help you better.

    Make sure that you save the settings after clicking on homepage or work profile in the network profiles.

    Strengthen the security of your computer and your network:

    Identify and resolve home network problems:

    http://Windows.Microsoft.com/en-us/Windows7/identify-and-resolve-home-network-problems

    Open network problem:

    http://Windows.Microsoft.com/en-us/Windows7/open-networking-troubleshooters

    Kind regards
    Amal-Microsoft Support.
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Unable to access the network using Edimax N300 universal Wi - Fi extender

    Original title: Edimax Extender will not get internet access

    I naoual got a N300 Eimax universal Wi - Fi extender but I am unable to connect to the internet.  They suggest setting up near the wi - fi access point to get the signal stronger and I got to show connected in the window ' currently logged in ', but it does not connect to the network.  EDIMAX has proposed upgrading the firmware, but I was unable to get any joy with that either.  Anyone with any ideas would be appreciated.

    Hi Gofchap,

    Thanks for the question of validation in Microsoft answers community!

    I imagine the frustration you feel when you are unable to access the network.

    The problem may be because of the Extender, diverter, or with the network adapter.

    1 did you do changes on the computer before the show?

    2. do you receive any error messages?

    3. What is brand and model computer?

    4. have you tried to connect without using the extender?

    I suggest you to visit:

    Wireless and wired network problems

    http://Windows.Microsoft.com/en-us/Windows/network-connection-problem-help#network-problems=Windows-7&V1H=win8tab1&V2H=win7tab3&V3H=winvistatab1&v4h=winxptab1

    I hope this helps. If the problem persists, let know us and we would be happy to help you.

  • Get the error "Failed to change the network provider password" after having used the change an option of network after Ctrl alt delete password

    Hello

    I don't know what is the use of this option called "change a network password".i have windows 2008 domain infrastructure.
    All client computers are in the other domain and accessing drives on the part of the domain that I made it through with a one-way trust.
    Can users change their passwords to access the reader to share through change a network password option? If Yes? I'm unable to change the password by using this option.
    Any help will be appreciated.
    Thank you

    Hello

    The question you have posted is linked to the domain network and would be better suited to the TechNet support. I suggest you to report the problem in the TechNet support for more information.

    http://social.technet.Microsoft.com/forums/en-us/newThread?category=WindowsServer&Forum=winserverfiles

    If you have other problems with Windows, please post in the Microsoft Community. We would be happy to help you.

  • remote VPN and vpn site to site vpn remote users unable to access the local network

    As per below config remote vpn and vpn site to site vpn remote users unable to access the local network please suggest me a required config

    The local 192.168.215.4 not able ping server IP this server connectivity remote vpn works fine but not able to ping to the local network vpn users.

    ASA Version 8.2 (2)
    !
    host name
    domain kunchevrolet
    activate r8xwsBuKsSP7kABz encrypted password
    r8xwsBuKsSP7kABz encrypted passwd
    names of
    !
    interface Ethernet0/0
    nameif outside
    security-level 0
    PPPoE client vpdn group dataone
    IP address pppoe
    !
    interface Ethernet0/1
    nameif inside
    security-level 50
    IP 192.168.215.2 255.255.255.0
    !
    interface Ethernet0/2
    nameif Internet
    security-level 0
    IP address dhcp setroute
    !
    interface Ethernet0/3
    Shutdown
    No nameif
    no level of security
    no ip address
    !
    interface Management0/0
    Shutdown
    No nameif
    no level of security
    no ip address
    management only
    !
    passive FTP mode
    clock timezone IST 5 30
    DNS server-group DefaultDNS
    domain kunchevrolet
    permit same-security-traffic intra-interface
    object-group network GM-DC-VPN-Gateway
    object-group, net-LAN
    access extensive list ip 192.168.215.0 sptnl allow 255.255.255.0 192.168.2.0 255.255.255.0
    192.168.215.0 IP Access-list extended sheep 255.255.255.0 allow 192.168.2.0 255.255.255.0
    tunnel of splitting allowed access list standard 192.168.215.0 255.255.255.0
    pager lines 24
    Enable logging
    asdm of logging of information
    Outside 1500 MTU
    Within 1500 MTU
    MTU 1500 Internet
    IP local pool VPN_Users 192.168.2.1 - 192.168.2.250 mask 255.255.255.0
    ICMP unreachable rate-limit 1 burst-size 1
    enable ASDM history
    ARP timeout 14400
    NAT-control
    Global 1 interface (outside)
    NAT (inside) 1 0.0.0.0 0.0.0.0
    Route outside 0.0.0.0 0.0.0.0 59.90.214.1 1
    Timeout xlate 03:00
    Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
    Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
    Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    dynamic-access-policy-registration DfltAccessPolicy
    the ssh LOCAL console AAA authentication
    AAA authentication LOCAL telnet console
    AAA authentication http LOCAL console
    AAA authentication enable LOCAL console
    LOCAL AAA authentication serial console
    Enable http server
    x.x.x.x 255.255.255.252 out http
    http 192.168.215.0 255.255.255.252 inside
    http 192.168.215.0 255.255.255.0 inside
    No snmp server location
    No snmp Server contact
    Server enable SNMP traps snmp authentication linkup, linkdown cold start
    Crypto ipsec transform-set esp-3des esp-sha-hmac RIGHT
    life crypto ipsec security association seconds 28800
    Crypto ipsec kilobytes of life - safety 4608000 association
    Crypto-map dynamic dynmap 65500 transform-set RIGHT
    card crypto 10 VPN ipsec-isakmp dynamic dynmap
    card crypto VPN outside interface
    card crypto 10 ASA-01 set peer 221.135.138.130
    card crypto 10 ASA - 01 the transform-set RIGHT value
    crypto ISAKMP allow outside
    crypto ISAKMP policy 10
    preshared authentication
    3des encryption
    sha hash
    Group 2
    life 86400
    crypto ISAKMP policy 65535
    preshared authentication
    the Encryption
    sha hash
    Group 2
    lifetime 28800
    Telnet 192.168.215.0 255.255.255.0 inside
    Telnet timeout 5
    SSH 0.0.0.0 0.0.0.0 outdoors
    SSH timeout 5
    Console timeout 0
    management-access inside
    VPDN group dataone request dialout pppoe
    VPDN group dataone localname bb4027654187_scdrid
    VPDN group dataone ppp authentication chap
    VPDN username bb4027654187_scdrid password * local store
    interface for identifying DHCP-client Internet customer
    dhcpd dns 218.248.255.141 218.248.245.1
    !
    dhcpd address 192.168.215.11 - 192.168.215.254 inside
    dhcpd allow inside
    !
    a basic threat threat detection
    Statistics-list of access threat detection
    no statistical threat detection tcp-interception
    Des-sha1 encryption SSL
    WebVPN
    allow outside
    tunnel-group-list activate
    internal kun group policy
    kun group policy attributes
    VPN - connections 8
    Protocol-tunnel-VPN IPSec
    Split-tunnel-policy tunnelspecified
    Split-tunnel-network-list value split tunnel
    kunchevrolet value by default-field
    test P4ttSyrm33SV8TYp encrypted password username
    username kunauto password bSHrKTGl8PUbvus / encrypted privilege 15
    username kunauto attributes
    Strategy Group-VPN-kun
    Protocol-tunnel-VPN IPSec
    tunnel-group vpngroup type remote access
    tunnel-group vpngroup General attributes
    address pool VPN_Users
    Group Policy - by default-kun
    tunnel-group vpngroup webvpn-attributes
    the vpngroup group alias activation
    vpngroup group tunnel ipsec-attributes
    pre-shared key *.
    type tunnel-group test remote access
    tunnel-group x.x.x.x type ipsec-l2l
    tunnel-group ipsec-attributes x.x.x.x
    pre-shared key *.
    !
    class-map inspection_default
    match default-inspection-traffic
    !
    !
    type of policy-card inspect dns preset_dns_map
    parameters
    maximum message length automatic of customer
    message-length maximum 512
    Policy-map global_policy
    class inspection_default
    inspect the preset_dns_map dns
    inspect the ftp
    inspect h323 h225
    inspect the h323 ras
    Review the ip options
    inspect the netbios
    inspect the rsh
    inspect the rtsp
    inspect the skinny
    inspect esmtp
    inspect sqlnet
    inspect sunrpc
    inspect the tftp
    inspect the sip
    inspect xdmcp
    inspect the icmp
    !
    global service-policy global_policy
    context of prompt hostname
    call-home
    Profile of CiscoTAC-1
    no active account
    http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
    email address of destination [email protected] / * /
    destination-mode http transport
    Subscribe to alert-group diagnosis
    Subscribe to alert-group environment
    Subscribe to alert-group monthly periodic inventory
    monthly periodicals to subscribe to alert-group configuration
    daily periodic subscribe to alert-group telemetry
    Cryptochecksum:0d2497e1280e41ab3875e77c6b184cf8
    : end
    kunauto #.

    Hello

    Looking at the configuration, there is an access list this nat exemption: -.

    192.168.215.0 IP Access-list extended sheep 255.255.255.0 allow 192.168.2.0 255.255.255.0

    But it is not applied in the States of nat.

    Send the following command to the nat exemption to apply: -.

    NAT (inside) 0 access-list sheep

    Kind regards

    Dinesh Moudgil

    P.S. Please mark this message as 'Responded' If you find this information useful so that it brings goodness to other users of the community

Maybe you are looking for

  • camera front 7 flicker HDR in FaceTime iPhone

    Today I got my new iPhone 7. During a FaceTime call my video is constantly changing from light to dark. When I moved the focus of the camera (light of early evening) to bright light right behind me the HDR treatment is nog seem to know the correct br

  • No sound on the HP Media Center m1o95c PC

    Hello I have an old desk top of page computer center Hp media recently, I hear no more.  Speaker works fine, keyboard volume therefore works closely with the "secret."  Any sugestion about what needs to be done.  Hope to hear from you guys. Caji

  • Adobe Reader and Adobe Flash Player for Firefox

    These two above ins card are offered by Firefox. However, I made several attempts to download and install these plug-ins, without success. Each time, the browser goes on the Adobe site. It says to access the instructions so installation of these plug

  • OfficeJet pro 8550a: cannot install the software driver officejet pro 8550a on windows 10

    Nice day. I tried to use the cd and driver online. CD refused to work as win 10 has been recognized as platform is not taken in charge. I tried to use the driver on the site of hp for this printer, but he could not find the printer thought my win 8 s

  • Players are able to put the backgammon dice?

    I just play and the other player has doubled while I was before.   When he threw the dice, they acted 'funny' - not as the standard bread.  Double rooms were frequent and of course he won.   We played another game, and he did the same thing - twice w