Re: WEBVPN Default group vs new group

Thanks Basem.

This is the reference I planned on using.

On Sun, May 3, 2009 at 11:24 AM, Basem Hanna <basem.hanna_at_shoregroup.com>wrote:

> I used the following link when I configured phone proxy, great help:
> http://supportwiki.cisco.com/ViewWiki/index.php/ASA_Phone_Proxy_sample_configuration
> .
>
> I would recommend you have a good working knowledge of Cisco Call managers
> and IPT technology, especially when troubleshooting.
> One thing I did have to do (I haven't seen in Cisco docs yet) was to create
> a different region on the Call manager for the remote phones to help with a
> one way calling issues.
>
> Thanks
> Basem
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> Ryan West
> Sent: Saturday, May 02, 2009 3:56 PM
> To: Darby Weaver
> Cc: Sadiq Yakasai; Cisco certification; Cisco certification
> Subject: Re: WEBVPN Default group vs new group
>
> TAC was helpful with phone proxy when we configured it. It is a PIA
> though, have fun.
>
> Sent from handheld.
>
> On May 2, 2009, at 1:52 PM, "Darby Weaver" <ccie.weaver_at_gmail.com>
> wrote:
>
> > Cannot think of any negatives to creating your own WEBVPN profiles.
> > Have
> > not thought of it as far as the lab itself goes.
> >
> > I've been working on a project to move over my webvpn config from
> > one ASA to
> > another and on the larger ASA's there are a few different profiles
> > from a
> > few different VPN types.
> >
> > No biggie, it is really a matter of keeping all the components
> > straight and
> > remembering not to make typos.
> >
> > Even the ASA Phone Proxy does not look too frightening and I have to
> > add
> > that soon after I test in on the 5510 and ensure it works as promised.
> >
> > FYI - I was told by TAC that they do not formally support ASA Phone
> > Proxy.
> > So I guess ?I get to be a pioneer if there are any issues.
> >
> > I do not expect any it looks easy enough.
> >
> > As far as SSL-VPNs:
> >
> > 1. Licensing if you need beyond 2.
> > 2. Keep track of your components
> > 3. I don't see any issues with using a custom profile.
> > 4. Lab Day - Try to do whatever is asked.
> >
> >
> >
> >
> >
> > On Sat, May 2, 2009 at 7:40 AM, Sadiq Yakasai <sadiqtanko_at_gmail.com>
> > wrote:
> >
> >> HI Guys,
> >>
> >> Been trying to get my head around configuring WEBVPN on the ASA
> >> appliance.
> >> From my gatherings, is it safe to conclude that you can configure
> >> WEBVPN
> >> (like other similar tunnel group configs) in at least 2 different
> >> ways:
> >>
> >> 1. Modify the default ASA WEBVPN tunnel group to suit what you want.
> >>
> >> 2. Create a new tunnel group and make it of type, WebVPN.
> >>
> >> Are there any caveats of using either at all? I guess if its not
> >> specified
> >> anywhere in the Lab exam, one should just go with the easiest
> >> option then
> >> (which I still havent worked out yet), right?
> >>
> >> Thanks,
> >> Sadiq
> >>
> >> --
> >> CCIE #19963
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
>
>
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
>
>
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sun May 03 2009 - 13:17:26 ART