Hi Dan Please double-check the routes. If traffic between the interfaces with the same security level was allowed, you should be good.
Regards, -- Piotr Kaluzny CCIE #25665 (Security), CCSP, CCNP Sr. Technical Instructor - IPexpert, Inc. URL: http://www.IPexpert.com On Sat, Jul 6, 2013 at 10:58 AM, Dan Gericke <d...@syssec.biz> wrote: > Hi All, > I actually have 2 questions… > The first, how do I contact after hours support when I'm working on the > labs? I read to contact them through the technical support link, but I > can't find anywhere on that page where I can submit a ticket, or call a > number…. > > Second, > In Vol 1 Sec 1 Lab 2 Task 6: DMZ Communication, It says I need to > configure routing such that R2 fa0/0(which seems like it should be g0/0) > int can ping the AD server, without using ACLs. So, i'm assuming without > using ACLs means without route maps. Since both of the interfaces that go > to R2 and the AD Server are the same security, I thought the command > same-security-traffic permit inter-interface would be sufficient. From R2 > I could see a valid route to the AD server via ASA3. However, my ping > never worked, even after applying the config. I did set the proper route > on the AD server. > > Can someone let me know if I am missing something? > Thanks, > -Dan > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
