VPN is not talk for the subnet behind a remote router

Hi all

I was hitting my head on the wall for a few days everything that is wrong with my configuration ASA...

That's what I got:

AnyConnect vpn (10.10.70.0/24)-online tunnel => ASA5505 performer v9.1.2 (10.10.20.1)-online (10.10.20.2) router (10.10.50.1) 1841-online my environment tour (10.10.50.0/24)

VPN is allowed to authenticate, get an address, ping 10.10.20.0/24 but unable to pass traffic (ping, ftp, etc.) 10.10.50.0 network at all.

Using EIGRP between ASA and 1841, tried static set time 'network' then 'redisturbute' and the ' redisturbute static route-map ", still no luck.

Found several docs, tried, doesn't seem to help...

https://supportforums.Cisco.com/thread/2206416

http://www.Cisco.com/en/us/products/ps6120/products_configuration_example09186a00809d07de.shtml

Help, please...

Attach the configs for the ASA and router

Thank you in advance!

Keith S.

Hi Keith,

You are using IKEv1 or IKEV2.

It comes to your configuration:

crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF

Crypto-map dynamic outside_dyn_map 20 set transform-set ESP-3DES-SHA ikev1

Crypto-map dynamic outside_dyn_map 20 the value reverse-road

test of dynamic-map 10 crypto-card, the value reverse-road

outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

outside_map interface card crypto outside

The dynamic map that is applied to the interface is SYSTEM_DEFAULT_CRYPTO_MAP which is an ikev2.

But the question is not the one. Depending on your configuration, there is a runnning between the ASA and the router EIGRP and according to your router table routing does not know where is 10.10.70.0/24 subnet is. To inject the subnet pool VPN in the routing table that we need an arriere-route control that you configured on a card which is not in use. Try this:

Crypto than dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 Road opposite value.

And let me know if it helps.

Thank you

Jeet Kumar

Tags: Cisco Security

Similar Questions

  • Cisco VPN does not ask for the UN or PW

    I took a cleint with a Cisco Pix. When I connect to the VPN with Cisco VP customer and the PCF, they gave semi-bas just connects, no prompt for username or password. The first question is that the configuration? And how to change that? Looks like a security breach delayed.

    Thanks

    Nick

    Hello Nick,

    I think you are missing the following command:

    client authentication card crypto outside_map LOCAL

    Unfortunately, I don't have a PIX right now, but I think he should do the trick.

    HTH.

    Please evaluate the useful messages.

  • Recently downloaded version 9.0.1 and the url is not valid for the default home page. The default home page is still supported?

    I currently have www.google.com set as my homepage, but Firefox says that the url is not valid for the default home page.

    The problem is now solved with the current version of Firefox 10.0. Thanks for the help ccbrunt and SafeBrowser.

  • Your device is not eligible for the unlocking Bootloader

    I use bike E 1 st Gen India. I want to unlock my bootloader. I went to the motorola Web site. When I entered the code he said that your device is not eligible for the unlocking Bootloader. I contacted the people at motorola, but they led me here. So please I ask to help me in this regard.

    Hi, ShaashwathBhat

    Please do not start new threads before searching for existing threads on the same topic. It causes congestion on the site and makes it harder for us to follow a folder. There are already a long discussion on this here, please post here. Thank you.

    Fence wire

    Best regards
    SUNY
    Motorola support

  • Tried to use iTunes to restore iPhone 5s, but the 17 error happens: "this device is not eligible for the requested build". No problem to enter the mode of recovery, apple server and the internet. Help?

    I tried to use iTunes to restore my iPhone 5s, but the 17 error happens: "this device is not eligible for the requested build". No problem to enter the recovery mode, connection to the apple Server (the software update download was complete) and internet connection. Help? I do an Apple store to restore?

    Error 17 refers to network problems. Take a look at these articles and try the suggestions:

    Solve the iOS update and restore error in iTunes - Apple Support

    Get help with iOS update or restore errors - Apple Support

  • Error: The system does not license for the OS image. The system cannot find the path specified

    Hello

    I copied the image of Windows Embedded 7 T510 using HP thin client capture on a USB port. Now, I'm trying to load this image in an another thin client Embedded Win 7 T510 via a USB port.

    However, when the customer starts using this image of the USB, I get error below.

    "Error: the system does not license for the OS image! The system does not have the specified path.

    What solutions do you recommend.

    Thanks in advance

    Solution:

    I tried to install it on a Linux Thin client... Is there had this error.

  • The server of the DNA is not reesponding for the wireless

    The server of the DNA is not reesponding for the wireless which is the steps to solve the problem?

    The server of the DNA is not reesponding for the wireless which is the steps to solve the problem?

    Where do you get your DNS addresses from?   For example, use nslookup or ipconfig/all

    In fact, let's try this:

    for /F "delims =: tokens = 1 *" %i in (' ipconfig/all ^ |) " find "DNS Se" ') do nslookup %j %j

    (Copy and paste that in a cmd window).

    HTH

    Robert Aldwinckle
    ---

  • My genuine Window Vista could not search for the new update, or errors are: Code 80073712

    My genuine Window Vista could not search for the new update, or errors are: Code 80073712

    If you forget to say 'thank you '?

    Description of the update of the system for Windows Vista tool
    http://support.Microsoft.com/kb/947821

    0 x 80073712 ERROR_SXS_COMPONENT_STORE_CORRUPT component store is in an inconsistent state.

    TaurArian [MVP] 2005-2010 - Update Services

  • Problems with sound and Audio - realtek hd audio is not compatible for the audio device

    I use Windows XPand receives my sound and audio to work, I got a lot of response to this problem, but not the right answers, I got my sound set correctly but my audio does not work. In my default audio device is defined as realtek hd audio that is not compatible for the audio device, I tried to remove it without any success because I don't know what else can be done to solve this problem. I did an update can also be found a update driver for my sound card in windows. I also run microsoft fixi it and said that my default audio device is wrong, I tried to change, but nothing seems to work. Before that my computer was working fine and now all of a sudden nothing works. Everthing is up-to-date on my computer except the I'm having problems. all I ask you, how can I removed realtek hd audio since I graduated from the audio device by default.

    Thanks for a quick reply.

    Hello

    You will remember to do recent changes to the computer before the show?

    I suggest you to download and install the latest driver audio realtek for Windows XP from the link and check if the problem occurs:

    http://www.Realtek.com.tw/downloads/downloadsCheck.aspx?langid=1&PNid=24&PFID=24&level=4&Conn=3&DownTypeID=3&GETDOWN=false

  • T610 with Windows Embedded 7 - the system does not license for the operating system image

    Hello community,

    I bought a refurbished computer ThinClient T610 that is running a Windows 7 Embedded English. The label on the package says, that the computer ThinClient is allowed with W7E. When I now run Easy Tools installed on the computer ThinClient hp to create a USB Image with the German language, everything works fine: the image is downloaded from the web and put on the stick.

    But after you start the stick, the installation program tells me: "the system does not license for the operating system image. What I am doing wrong? The BIOS is already the latest.

    Or y at - it another way to transform the operating system in German? There should be an option to download additional languages, but this particual window has no other options. And I have not found any manual way to download other languages.

    Concerning

    Michael

    Sometimes it can be so easy... ;-)

    So here's my solution:

    1. go on the Web for hp Support site

    2. go in the software and driver download

    3. set the language of driver on the language of your choice (in fact: it was the main problem)

    4. download an operating system image

    5. run the configuration tool and copy the image of an operating system on a flash drive

    6. restart the workstation and install the os

    7. take advantage of your computer ThinClient in the language of your choice

    I don't know, why the hp Easy Tools downloaded the image of evil, but with this solution, that I find myself at the same point, as if they did.

  • From what I read, if I buy a commercial version full of windows 7, I am not eligible for the upgrade of $14.95 to windows 8 in about 6 months.

    I'm about to buy a computer with 16 GB of memory. I'll of course need a 64 bit OS, it looks like a good time to switch to windows 7, XP. But windows 7 seems to have a very short life span. The OEM version is eligible for a special download offer upgrade $ 14.95 to windows 8 that seems due Q1 2013, but it seems that the retail version is not eligible for this offer? Like many people I do not upgrade OS every time is out. But why would I pay for an OS which is replaced in 6 months?

    Huh?

    14.99 reduction is a limited offer in time when you buy a new computer between June 2, 2012 and on January 31, 2013, with Windows 7. By October 26, 2012, the PC of all major manufacturers will come preloaded with Windows 8. The thing, it is likely to be the inventory on the market with Windows 7 for a while of OEM brand. If a consumer buys one of them, they should have the eligibility for the upgrade of Windows 8.

    Of course, you can buy the new computer with Windows 7 pre-loaded, acquire the Windows 8 upgrade what becomes availalable and install it at your leisure and activate it whenever you're ready.

    Yes, the retail version of Windows 7 is not eligible for the upgrade 14.99 discount, but you can get an updated copy of Windows 8 Pro for 39.99 beginning October 26, 2012 and ending on January 31, 2013.

    Offers upgrade Windows 8:

    http://Windows.Microsoft.com/en-us/Windows/upgrade-offer

    Windows 8 Pro 39.99 Upgrade Windows XP, Vista and Windows 7 existing users:

    http://windowsteamblog.com/Windows/b/bloggingwindows/archive/2012/07/02/upgrade-to-Windows-8-Pro-for-39-99.aspx

  • "@specTypeName @" placeholder for extensibility of the Email does not work for the master specifications

    Hi all

    • I installed E-mail Feature Pack 4.1 extensibility 6.2 PLM.
    • I use "GSMEmailFileBasedVariablesFormatPluginFactory" to send e-mail notifications when work flowing from one status to another.
    • I am successfully able to generate notifications by e-mail for all GSM specifications with the content specified by me except the master specifications.

    "@specTypeName @" placeholder for extensibility of the Email does not work for the specifications of the master.

    Can you please help me solve the problem?

    FYI,.

    ' @specTypeName @ ' placeholder works in all other GSM specifications.

    Thank you

    Nefertari

    For the resolution of this problem, please see the following knowledge base document:

    Document 2079386.1 - Notifications by email for the specifications of the master only lack the Type of specification field

    Thank you

    Stephen, Oracle Support

  • getCustomDatum not implemented for the oracle.jdbc.driver.T4CNamedTypeAccessor class

    Hello world

    running mapviewer Ver11_1_1_7_3_B140717 we met the error above in newspapers trying to create maptiles.

    Installation program:

    -Table with a column of type ordimage (no available georaster here, we have to keep the files in the file system)

    -Spatial index for column in mbr, metadata are

    -All the files using the 31466 (Gauss-Krueger 2) coordinate system

    -Image theme in mapbuilder shows images

    -Bottom of mapbuilder card shows images

    Trying to create the maptiles by using mapviewer administration - manage tile layers creates the above error (same details in the excerpts above).

    AM PIZZABOTEN: Query [p ImageTheme] = SELECT ROWID, RAS_DOB MBR WHERE MDSYS. SDO_FILTER (MBR, MDSYS. SDO_GEOMETRY (2003, 31466, NULL, MDSYS.) SDO_ELEM_INFO_ARRAY (1, 1003, 3), MDSYS. SDO_ORDINATE_ARRAY(:mvqboxxl,:mvqboxyl,:mvqboxxh,:mvqboxyh)), 'querytype = WINDOW') = 'TRUE' AND (pyramid = 25)

    August 14, 2015 15:36:37 oracle.sdovis.theme.ImageThemeProducer loadImagesFromDBCached

    FEINER: Fetch size: 100

    August 14, 2015 15:36:37 oracle.sdovis.theme.ImageThemeProducer loadImageBlock

    AGAIN: Ungultiger Spaltentyp (invalid column type?): getCustomDatum not implemented for the oracle.jdbc.driver.T4CNamedTypeAccessor class

    August 14, 2015 15:36:37 oracle.sdovis.theme.ImageThemeProducer loadImagesFromDBCached

    WARNUNG: unable to load keyframe: AAAVuOAAMAAAACFAAB

    August 14, 2015 15:36:37 oracle.sdovis.theme.ImageThemeProducer loadImagesFromDBCached

    INFORMATION: Exec sql [RAS_DOB_2014_TEST] time: 7ms, 0 images of loading time: 1 ms.

    August 14, 2015 15:36:37 oracle.sdovis.DBMapMaker renderEm

    INFORMATION: * the time spent on the loading features: 14ms.

    MapTiles records only show the background color.

    Has anyone else experienced this problem?

    Best regards

    NilsO

    Hi Nils

    12.1.3 WebLogic jdbc libraries are located in the MW_HOME/oracle_common/modules/oracle.jdbc_12.1.0 directory level.

    For this WLS jdbc driver is ojdbc7.jar which is loaded on startup of WLS.

    As mentioned on the post preceding this is is not compatible with the 11.1.1.7.3 MapViewer to display the ORDIMAGE. Seems that even the ojdbc6.jar that exists in this directory cannot be used.

    What to do is make the WLS Server uses the ojdbc6.jar for 11.1.1.7.3. There are different ways to use a different pot in WebLogic.

    This page http://docs.oracle.com/middleware/1212/wls/JDBCA/third_party_drivers.htm was noted in this regard.

    As a quick test, you can try to make the ORDIMAGE with the following steps;

    (1) on page MapViewer OTN, Oracle Fusion Middleware MapViewer access downloads and download the quick start for the 11.1.1.7.3 Version.

    You will find the glassfish3/glassfish/domains/Domain1/lib folder a file jdbc ojdbc6.jar.

    (2) on your installation of a WebLogic domain:

    Navigate to the oracle_common/modules/oracle.jdbc_12.1.0 directory

    make a backup of ojdbc7.jar

    copy the ojdbc6.jar on top of ojdbc7.jar

    (3) start Weblogic server and try to make your theme ORDIMAGE.

    As I mentioned before, there are different ways to add a jar to WebLogic classpath. The quick test above is just replace the original ojdbc7.jar in a facility that is not good, as you lose you original ojdbc7.jar.

    Best regards.

    João

  • HP laserjet 1022 does not wait for the user to turn the pages when printing double-sided

    My Hp laserjet 1022 printer working properly for years.

    So far, when he executed more paper he tried a couple of times to get more paper and then stops with a message on the PC it is out of paper.

    Very annoyingly, this has changed recently, now when it is out of paper, he tries a couple of times to get more paper and watch the message on the PC, saying that it is paper and then again, try a couple of times to get more paper and again shows the same message on the PC and him back... This continues to go on and on.

    It's especially annoying when trying to print double-sided. Before he used to stop and ask you to turn the pages to print the other side. Now the previous behavior overrides the break to turn the pages and keeps it will try to get more paper. As now, it does not wait for the user to turn the pages, in general it spoils the impression out by getting another paper that is not what I wanted, he drives me crazy! It's really hard to print anything double face now.

    All solutions?

    Operating system is Windows 7, I just downloaded and installed the latest driver for this printer "2013-01-09, Version: 20120918" and I get the same behavior. In the properties of the printer that I put some State Messages to Off and at least I don't get the full windows message screen poping up every time the printer is trying again to get more paper. I have not found all the other parameters that may affect this behavior.

    Help!

    Hello

    I solved the problem! I found the original CD for the printer. I uninstall the current driver and then install CD and now when the printer is out of paper trying to get paper a couple of times and then stops, as it used to be.

    Thanks for your help.

    Martin

  • Value is not found for the ory mandate VMHost parameter

    $vmhost = "host1".

    $vss = "vSwitch1.

    $pg_name = "VM_Network".

    New-VirtualSwitch-name $vss - VMHost $vmhost - Nic vmnic2

    I get this error message

    New-VirtualSwitch: 15/12/2014 23:53:44 new-value VirtualSwitch is not found for the term

    parameter ORY VMHost

    C:\Users\www\AppData\Local\Temp\Untitled5.ps1:11 char: 18

    + New-VirtualSwitch < < < <-name "VM_Network" - VMHost host1 - Nic vmnic2

    + CategoryInfo: NotSpecified: (:)) [new-VirtualSwitch], VimException)

    + FullyQualifiedErrorId: Core_BaseCmdlet_UnknownError, VMware.VimAutomation.ViCore.Cmdlets.Commands.Ho

    St. NewVirtualSwitch

    PS C:\Users\www >

    any idea?

    Could be a problem in PSP +.

    You stop/start PSP + before running the code.

Maybe you are looking for