Hello Emma,<br><br>Good talking with you on mobile and congratulation on your school ranking! Try those stuff when you have access to the router on Monday and if symptom persist then we could further investigate the config you posted.<br>
<br>Cheers!<br><br><div class="gmail_quote">On Fri, Aug 3, 2012 at 11:29 PM, Onowojo E. <span dir="ltr"><<a href="mailto:onowojemma@yahoo.com" target="_blank">onowojemma@yahoo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div style="font-size:12pt;font-family:times new roman,new york,times,serif"><div style="font-family:'times new roman','new york',times,serif;font-size:12pt"><span>config on router</span></div><div><span><div>
<br></div><div>hostname uuuu</div><div>!</div><div>boot-start-marker</div><div>boot-end-marker</div><div>!</div><div>logging buffered 52000</div><div>enable password class</div><div>!</div><div>no aaa new-model</div><div>
memory-size iomem 10</div><div>!</div><div>!</div><div>ip cef</div><div>no ip dhcp use vrf connected</div><div>ip dhcp excluded-address 10.43.0.1 10.43.0.50</div><div>!</div><div>ip dhcp pool class</div><div> import all</div>
<div> network 10.43.0.0 255.255.255.0</div><div> domain-name <a href="http://class.com" target="_blank">class.com</a></div><div> dns-server 10.40.0.6 66.178.2.25 </div><div> default-router
10.43.0.1 </div><div>!</div><div>!</div><div>ip domain name <a href="http://class.com" target="_blank">class.com</a></div><div>!</div><div>multilink bundle-name authenticated</div><div>!</div><div>! </div><div>!</div><div>
crypto isakmp policy 1</div><div> encr 3des</div><div> authentication pre-share</div><div> group 2</div><div>!</div><div>crypto isakmp policy 2</div><div> encr 3des</div><div> authentication pre-share</div><div> group 2</div>
<div>crypto isakmp key @#cgn!abc address #######</div><div>!</div><div>!</div><div>crypto ipsec transform-set war esp-3des esp-sha-hmac </div><div>!</div><div>crypto map SDM_CMAP_1 1 ipsec-isakmp </div><div> description Tunnel to########</div>
<div> set peer ########</div><div> set transform-set war </div><div> match address 100</div><div>!</div><div>!</div><div>crypto pki trustpoint TP-self-signed-2167060814</div><div> enrollment selfsigned</div><div> subject-name
cn=IOS-Self-Signed-Certificate-2167060814</div><div> revocation-check none</div><div> rsakeypair TP-self-signed-2167060814</div><div>!</div><div>!</div><div>!</div><div>username cisco privilege 15 secret 5 ########</div>
<div>archive</div><div> log config</div><div> hidekeys</div><div>!</div><div>!</div><div>!</div><div>!</div><div>!</div><div>interface FastEthernet0/0</div><div> no ip address</div><div> shutdown</div><div> duplex auto</div>
<div> speed auto</div><div>!</div><div>interface FastEthernet0/1</div><div> no ip address</div><div> shutdown</div><div> duplex auto</div><div> speed auto</div><div>!</div><div>interface FastEthernet0/0/0</div><div> description #ETH-WANS#</div>
<div> ip address ######.26 255.255.255.248</div><div> ip mtu 1400</div><div> ip nat outside</div><div> ip virtual-reassembly</div><div> duplex auto</div><div> speed
auto</div><div> crypto map SDM_CMAP_1</div><div> crypto ipsec df-bit clear</div><div>!</div><div>interface FastEthernet0/1/0</div><div> description #FE int to 2nd ETH-LAN#</div><div> ip address 10.43.0.1 255.255.255.0</div>
<div> ip nat inside</div><div> ip virtual-reassembly</div><div> duplex auto</div><div> speed auto</div><div>!</div><div>ip route 0.0.0.0 0.0.0.0 ######</div><div>!</div><div>!</div><div>ip http server</div><div>ip http authentication local</div>
<div>ip http secure-server</div><div>ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0/0/0 overload</div><div>!</div><div>ip access-list extended suf</div><div> permit tcp 10.43.0.0 0.0.0.255 any eq www</div>
<div>!</div><div>access-list 1 remark CCP_ACL Category=2</div><div>access-list 1 permit 10.43.0.0 0.0.0.255</div><div>access-list 100 remark CCP_ACL Category=4</div><div>access-list 100 remark IPSec Rule</div><div>access-list 100
permit ip 10.43.0.0 0.0.0.255 10.40.0.0 0.0.255.255</div><div>access-list 101 remark CCP_ACL Category=2</div><div>access-list 101 remark IPSec Rule</div><div>access-list 101 deny ip 10.43.0.0 0.0.0.255 10.40.0.0 0.0.255.255</div>
<div>access-list 101 permit ip 10.43.0.0 0.0.0.255 any</div><div>!</div><div>!</div><div>route-map SDM_RMAP_1 permit 1</div><div> match ip address 101</div><div>!</div><div>!</div><div>!</div><div>control-plane</div><div>
!</div><div>!</div><div>line con 0</div><div> password class</div><div> login local</div><div>line aux 0</div><div>line vty 0 4</div><div> privilege level 15</div><div> password edo</div><div> login local</div><div> transport input telnet ssh</div>
<div>!</div><div>scheduler allocate 20000 1000</div><div><br></div><div>!</div><div>webvpn cef</div><div>!</div><div>end</div><div style="font-family:'times new roman','new york',times,serif;font-size:12pt">
asa</div><div><div>hostname Hop-ASA</div><div>domain-name <a href="http://class.com" target="_blank">class.com</a></div><div><br></div><div>!</div><div>interface GigabitEthernet0/0</div><div> nameif inside</div><div> security-level 100</div>
<div> ip address 10.40.129.1 255.255.255.252 </div><div>!</div><div>interface GigabitEthernet0/1</div><div> nameif outside</div><div> security-level 0</div><div> ip address #####.252 255.255.255.240 </div><div>!</div><div>
interface GigabitEthernet0/2</div><div> nameif DMZ</div><div> security-level 100</div><div> ip address 10.40.128.1 255.255.255.0 </div><div>!</div><div>interface GigabitEthernet0/3</div><div> nameif CHQWAN</div><div> security-level 50</div>
<div> ip address 10.40.129.5 255.255.255.252 </div><div>!</div><div>interface Management0/0</div><div> nameif management</div><div> security-level 100</div><div> ip address 192.168.1.1
255.255.255.0 </div><div> management-only</div><div>!</div><div>ftp mode passive</div><div>dns server-group DefaultDNS</div><div> domain-name <a href="http://class.com" target="_blank">class.com</a></div><div>same-security-traffic permit inter-interface</div>
<div>object network OUTSIDEIP </div><div> host #####.252</div><div>object network NETWORK_OBJ_10.40.0.0_16 </div><div> subnet 10.40.0.0 255.255.0.0</div><div>object network NETWORK_OBJ_10.45.0.0_24 </div><div> subnet 10.45.0.0 255.255.255.0</div>
<div>object network NETWORK_OBJ_10.41.0.0_ </div><div> subnet 10.41.0.0 255.255.255.0</div><div>object network NETWORK_OBJ_10.42.0.0_</div><div> subnet 10.42.0.0 255.255.255.0</div><div>object network NETWORK_OBJ_10.43.0.0_ </div>
<div> subnet 10.43.0.0 255.255.255.0</div><div>object network NETWORK_OBJ_10.44.0.0_ </div><div> subnet 10.44.0.0 255.255.255.0</div><div>object network NETWORK_OBJ_10.0.0.0_</div><div> subnet
10.0.0.0 255.248.0.0</div><div> description ben </div><div>object network obj-mailsrv_realip </div><div> host 10.40.128.2</div><div>object network obj-mailsrv_publicip </div><div> host 83.229.2.251</div><div>object network obj-phone_realip </div>
<div> host 10.40.1.69</div><div>object network obj-phone_publicip </div><div> host 83.229.2.253</div><div>object-group network DM_INLINE_NETWORK_1</div><div> network-object 10.41.0.0 255.255.255.0</div><div> network-object 10.42.0.0 255.255.255.0</div>
<div> network-object 10.43.0.0 255.255.255.0</div><div> network-object 10.44.0.0 255.255.255.0</div><div> network-object 10.45.0.0 255.255.255.0</div><div>object-group network DM_INLINE_NETWORK_2</div><div> network-object 10.41.0.0 255.255.255.0</div>
<div> network-object 10.42.0.0 255.255.255.0</div><div> network-object 10.43.0.0
255.255.255.0</div><div> network-object 10.44.0.0 255.255.255.0</div><div> network-object 10.45.0.0 255.255.255.0</div><div>object-group network DM_INLINE_NETWORK_3</div><div> network-object 10.41.0.0 255.255.255.0</div>
<div> network-object 10.42.0.0 255.255.255.0</div><div> network-object 10.43.0.0 255.255.255.0</div><div> network-object 10.44.0.0 255.255.255.0</div><div> network-object 10.45.0.0 255.255.255.0</div><div>object-group service DM_INLINE_SERVICE_1</div>
<div> service-object tcp destination eq www </div><div> service-object tcp destination eq https </div><div> service-object tcp destination eq pop2 </div><div> service-object tcp destination eq pop3 </div><div> service-object tcp destination eq smtp </div>
<div> service-object tcp destination eq ssh </div><div> service-object udp destination eq sip </div><div> service-object tcp
destination eq h323 </div><div>object-group network DM_INLINE_NETWORK_5</div><div> network-object 10.0.0.0 255.248.0.0</div><div> network-object 10.41.0.0 255.255.255.0</div><div> network-object 10.42.0.0 255.255.255.0</div>
<div> network-object 10.43.0.0 255.255.255.0</div><div> network-object 10.44.0.0 255.255.255.0</div><div> network-object 10.45.0.0 255.255.255.0</div><div>object-group network DM_INLINE_NETWORK_4</div><div> network-object object NETWORK_OBJ_10.0.0.0_</div>
<div> network-object object NETWORK_OBJ_10.41.0.0</div><div> network-object object NETWORK_OBJ_10.42.0.0</div><div> network-object object NETWORK_OBJ_10.43.0.0</div><div> network-object object NETWORK_OBJ_10.44.0.0</div><div>
network-object object NETWORK_OBJ_10.45.0.0</div><div>object-group service DM_INLINE_SERVICE_2</div><div> service-object tcp destination range 135
netbios-ssn </div><div> service-object tcp destination eq 3389 </div><div> service-object tcp destination eq 445 </div><div> service-object tcp destination eq ssh </div><div> service-object udp destination range 135 139 </div>
<div> service-object udp destination eq 445 </div><div>object-group service DM_INLINE_SERVICE_3</div><div> service-object tcp-udp destination eq sip </div><div> service-object tcp destination eq ftp </div><div> service-object tcp destination eq ftp-data </div>
<div> service-object tcp destination eq h323 </div><div>object-group network DM_INLINE_NETWORK_6</div><div> network-object 10.0.0.0 255.248.0.0</div><div> network-object 10.41.0.0 255.255.255.0</div><div> network-object 10.42.0.0 255.255.255.0</div>
<div> network-object 10.43.0.0 255.255.255.0</div><div> network-object 10.44.0.0
255.255.255.0</div><div>object-group network DM_INLINE_NETWORK_7</div><div> network-object object NETWORK_OBJ_10.0.0.0_</div><div> network-object object NETWORK_OBJ_10.40.0.0_16</div><div>object-group network DM_INLINE_NETWORK_8</div>
<div> network-object object NETWORK_OBJ_10.0.0.0_</div><div> network-object object NETWORK_OBJ_10.41.0.0_</div><div> network-object object NETWORK_OBJ_10.42.0.0_</div><div> network-object object NETWORK_OBJ_10.43.0.0</div>
<div> network-object object NETWORK_OBJ_10.44.0.0</div><div>access-list from_outside extended permit icmp any interface outside </div><div>access-list from_outside extended permit object-group DM_INLINE_SERVICE_3 object-group DM_INLINE_NETWORK_1 10.40.0.0 255.255.0.0 </div>
<div>access-list from_outside extended permit object-group DM_INLINE_SERVICE_1 object-group DM_INLINE_NETWORK_2 10.40.0.0 255.255.0.0 </div><div>access-list from_outside extended permit
ip any any </div><div>access-list from_outside extended permit object-group DM_INLINE_SERVICE_2 object-group DM_INLINE_NETWORK_3 10.40.0.0 255.255.0.0 </div><div>access-list from_outside extended permit icmp any any echo </div>
<div>access-list from_outside extended permit tcp object NETWORK_OBJ_10.0.0.0_ range 3230 3270 object-group DM_INLINE_NETWORK_5 </div><div>access-list from_outside extended permit tcp object NETWORK_OBJ_10.40.0.0_16 eq h323 object-group DM_INLINE_NETWORK_6 </div>
<div>access-list from_outside extended permit udp object-group DM_INLINE_NETWORK_7 range 3230 3277 object-group DM_INLINE_NETWORK_8 </div><div>access-list outside_cryptomap extended permit ip object NETWORK_OBJ_10.40.0.0_16 object NETWORK_OBJ_10.41.0.</div>
<div>access-list outside_cryptomap_1 extended permit ip object NETWORK_OBJ_10.40.0.0_16 object NETWORK_OBJ_10.43.0 </div><div>access-list outside_cryptomap_3 extended permit ip object
NETWORK_OBJ_10.40.0.0_16 object NETWORK_OBJ_10.42.0.</div><div>access-list outside_cryptomap_4 extended permit ip object NETWORK_OBJ_10.40.0.0_16 object NETWORK_OBJ_10.44.0. </div><div>access-list outside_cryptomap_5 extended permit ip object NETWORK_OBJ_10.40.0.0_16 object NETWORK_OBJ_10.0.0.0 </div>
<div>pager lines 24</div><div>logging enable</div><div>logging asdm informational</div><div>mtu inside 1500</div><div>mtu outside 1460</div><div>mtu DMZ 1500</div><div>mtu CHQWAN 1500</div><div>mtu management 1500</div><div>
no failover</div><div>icmp unreachable rate-limit 1 burst-size 1</div><div>icmp permit any echo inside</div><div>icmp permit any echo-reply inside</div><div>icmp permit any echo-reply outside</div><div>icmp permit any echo outside</div>
<div>asdm image disk0:/asdm-631.bin</div><div>no asdm history enable</div><div>arp timeout 14400</div><div>nat (inside,outside) source static NETWORK_OBJ_10.40.0.0_16 NETWORK_OBJ_10.40.0.0_16
destination static DM_INLINE_NETWORK_4 DM_INLINE_NETWORK_4</div><div>nat (DMZ,outside) source static obj-mailsrv_realip obj-mailsrv_publicip</div><div>!</div><div>nat (inside,outside) after-auto source dynamic NETWORK_OBJ_10.40.0.0_16 interface</div>
<div>route outside 0.0.0.0 0.0.0.0 ####.249 1</div><div>route inside 10.40.0.0 255.255.128.0 10.40.129.2 1</div><div>timeout xlate 3:00:00</div><div>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02</div><div>
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00</div><div>timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00</div><div>timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute</div>
<div>timeout tcp-proxy-reassembly 0:01:00</div><div>dynamic-access-policy-record DfltAccessPolicy</div><div>aaa authentication ssh console LOCAL </div><div>http server enable</div><div>http 192.168.1.0 255.255.255.0 management</div>
<div>http
0.0.0.0 0.0.0.0 management</div><div>http 0.0.0.0 0.0.0.0 inside</div><div>http 0.0.0.0 0.0.0.0 outside</div><div>no snmp-server location</div><div>no snmp-server contact</div><div>snmp-server enable traps snmp authentication linkup linkdown coldstart</div>
<div>sysopt connection tcpmss 1242</div><div>crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac </div><div>crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac </div><div>crypto ipsec security-association lifetime seconds 28800</div>
<div>crypto ipsec security-association lifetime kilobytes 4608000</div><div>crypto ipsec df-bit clear-df outside</div><div>crypto map outside_map1 1 match address outside_cryptomap</div><div>crypto map outside_map1 1 set peer ####.42 </div>
<div>crypto map outside_map1 1 set transform-set ESP-3DES-SHA</div><div>crypto map outside_map1 2 match address outside_cryptomap_1</div><div>crypto map outside_map1 2 set peer
####.26 </div><div>crypto map outside_map1 2 set transform-set ESP-3DES-SHA</div><div>crypto map outside_map1 4 match address outside_cryptomap_3</div><div>crypto map outside_map1 4 set peer ####.202 </div><div>crypto map outside_map1 4 set transform-set ESP-3DES-SHA</div>
<div>crypto map outside_map1 5 match address outside_cryptomap_4</div><div>crypto map outside_map1 5 set peer ####.34 </div><div>crypto map outside_map1 5 set transform-set ESP-3DES-SHA</div><div>crypto map outside_map1 6 match address outside_cryptomap_5</div>
<div>crypto map outside_map1 6 set peer ####.4 </div><div>crypto map outside_map1 6 set transform-set ESP-DES-SHA</div><div>crypto map outside_map1 interface outside</div><div>crypto isakmp enable outside</div><div>crypto isakmp policy 10</div>
<div> authentication pre-share</div><div> encryption 3des</div><div> hash sha</div><div> group 2</div><div> lifetime 86400</div><div>crypto
isakmp policy 11</div><div> authentication pre-share</div><div> encryption des</div><div> hash sha</div><div> group 2</div><div> lifetime 86400</div><div>crypto isakmp policy 65535</div><div> authentication pre-share</div>
<div> encryption 3des</div><div> hash sha</div><div> group 2</div><div> lifetime 86400</div><div>telnet timeout 5</div><div>ssh 0.0.0.0 0.0.0.0 outside</div><div>ssh timeout 5</div><div>console timeout 0</div><div>management-access inside</div>
<div>dhcpd address 192.168.1.2-192.168.1.254 management</div><div>dhcpd enable management</div><div>!</div><div>threat-detection basic-threat</div><div>threat-detection statistics access-list</div><div>no threat-detection statistics tcp-intercept</div>
<div>webvpn</div><div>group-policy DfltGrpPolicy attributes</div><div> vpn-filter value from_outside</div><div>group-policy Policy1 internal</div><div>group-policy Policy1
attributes</div><div> vpn-tunnel-protocol IPSec l2tp-ipsec </div><div>group-policy policy2 internal</div><div>group-policy policy2 attributes</div><div> vpn-tunnel-protocol IPSec </div><div>username ##################</div>
<div>tunnel-group ####.42 type ipsec-l2l</div><div>tunnel-group ####.42 general-attributes</div><div> default-group-policy policy2</div><div>tunnel-group ####.42 ipsec-attributes</div><div> pre-shared-key *****</div><div>
tunnel-group ####.26 type ipsec-l2l</div><div>tunnel-group ####.26 general-attributes</div><div> default-group-policy Policy1</div><div>tunnel-group ####.26 ipsec-attributes</div><div> pre-shared-key *****</div><div>tunnel-group ####.202 type ipsec-l2l</div>
<div>tunnel-group ####.202 general-attributes</div><div> default-group-policy Policy1</div><div>tunnel-group #### ipsec-attributes</div><div> pre-shared-key *****</div><div>tunnel-group #### type
ipsec-l2l</div><div>tunnel-group #### general-attributes</div><div> default-group-policy Policy1</div><div>tunnel-group #### ipsec-attributes</div><div> pre-shared-key *****</div><div>tunnel-group #### type ipsec-l2l</div>
<div>tunnel-group #### general-attributes</div><div> default-group-policy Policy1</div><div>tunnel-group ##### ipsec-attributes</div><div> pre-shared-key *****</div><div>no tunnel-group-map enable ou</div><div>!</div><div>
class-map inspection_default</div><div> match default-inspection-traffic</div><div>!</div><div>!</div><div>policy-map type inspect dns preset_dns_map</div><div> parameters</div><div> message-length maximum client auto</div>
<div> message-length maximum 512</div><div>policy-map global_policy</div><div> class inspection_default</div><div> inspect dns preset_dns_map </div><div> inspect ftp </div><div> inspect h323 h225 </div><div>
inspect h323 ras </div><div> inspect ip-options </div><div> inspect netbios </div><div> inspect rsh </div><div> inspect rtsp </div><div> inspect skinny </div><div> inspect esmtp </div><div> inspect sqlnet </div>
<div> inspect sunrpc </div><div> inspect tftp </div><div> inspect sip </div><div> inspect xdmcp </div><div> inspect icmp </div><div> inspect ipsec-pass-thru </div><div>!</div><div>service-policy global_policy global</div>
<div>prompt hostname context </div><div>call-home</div><div> profile CiscoTAC-1</div><div> no active</div><div> destination address http <a href="https://tools.cisco.com/its/service/oddce/services/DDCEService" target="_blank">https://tools.cisco.com/its/service/oddce/services/DDCEService</a></div>
<div> destination address email <a href="mailto:callhome@cisco.com" target="_blank">callhome@cisco.com</a></div><div> destination transport-method http</div><div> subscribe-to-alert-group
diagnostic</div><div> subscribe-to-alert-group environment</div><div> subscribe-to-alert-group inventory periodic monthly</div><div> subscribe-to-alert-group configuration periodic monthly</div><div> subscribe-to-alert-group telemetry periodic daily</div>
<div>Cryptochecksum:85f5d7fae2b60f34eb6e501fc8a3e2af</div><div>: end</div><div>asdm image disk0:/asdm-631.bin</div><div>no asdm history enable</div></div></span></div><div class="im"><div style="font-family:'times new roman','new york',times,serif;font-size:12pt">
</div><div style="font-family:'times new roman','new york',times,serif;font-size:12pt"><font size="6"><i><font color="#aea945" face="comic sans ms">God be with u all</font><img src=""></i></font> </div> </div>
<div style="font-family:'times new roman','new york',times,serif;font-size:12pt"><font size="6" color="#b27c51" face="times new roman"><i>A true
friend is someone who reaches for your hand and touches your heart</i></font>.<img src=""></div><div style="font-family:'times new roman','new york',times,serif;font-size:12pt"><br></div> <div style="font-family:'times new roman','new york',times,serif;font-size:12pt">
<div style="font-family:'times new roman','new york',times,serif;font-size:12pt"> <div dir="ltr"> <font face="Arial"> <hr size="1"> <b><span style="font-weight:bold">From:</span></b> Seun Ojedeji <<a href="mailto:seun.ojedeji@gmail.com" target="_blank">seun.ojedeji@gmail.com</a>><br>
<b><span style="font-weight:bold">To:</span></b> <a href="mailto:afnog@afnog.org" target="_blank">afnog@afnog.org</a> <br> <b><span style="font-weight:bold">Sent:</span></b> Friday, August 3, 2012 11:01 PM<br> <b><span style="font-weight:bold">Subject:</span></b> Re: [afnog] Delivery Status Notification (Failure)<br>
</font> </div><div><div class="h5"> <br>
<div>Hello Emmanuel,<br><br>For some unknown reason my PM to you don't get delivered.....so yeah make it local if symptom persists...(was about saying consult your doctor :-) ) post your running config....<br><br>Cheers!<br>
<br><div>On Fri, Aug 3, 2012 at 10:56 PM, Mail Delivery Subsystem <span dir="ltr"><<a rel="nofollow" href="mailto:mailer-daemon@googlemail.com" target="_blank">mailer-daemon@googlemail.com</a>></span> wrote:<br>
<blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Delivery to the following recipient failed permanently:<br>
<br>
<a rel="nofollow" href="mailto:eonowojo@yahoo.com" target="_blank">eonowojo@yahoo.com</a><br>
<br>
Technical details of permanent failure:<br>
</div>Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 554 554 delivery error: dd This user doesn't have a <a rel="nofollow" href="http://yahoo.com/" target="_blank">yahoo.com</a> account (<a rel="nofollow" href="mailto:eonowojo@yahoo.com" target="_blank">eonowojo@yahoo.com</a>) [0] - <a rel="nofollow" href="http://mta1388.mail.mud.yahoo.com/" target="_blank">mta1388.mail.mud.yahoo.com</a> (state 17).<br>
<div><br>
----- Original message -----<br>
<br>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;<br>
d=<a rel="nofollow" href="http://gmail.com/" target="_blank">gmail.com</a>; s=20120113;<br>
h=mime-version:in-reply-to:references:date:message-id:subject:from:to<br>
</div> :content-type;<br>
bh=l9IalKBWsIX2xpcdM5CXG05qX9CWy3GjcFUmBV49fCc=;<br>
b=ME2L083aKWYeIA++EjFPMz+4QoQ+UL/cTReJCKHN/rFBi28US4j5K687iaPhA06clP<br>
y2rAMFWDtVlKywSM7eBFrszb+SmfoiU6SNAHE5qrPVT7DdNK0h+o28NZMpfBshL2u6DH<br>
Ak6puWSVaMJVCswAiC58zV6gq0sZpz5X8vuu5x19e8fv0NhEAGgJpeYjsZtlPCe7T4qp<br>
zAZi1LhntdOULHDHc6Owq8VTTCJRSgmcsxJBIeDrdXjvI1Q4VSB/arXmx/wDfBUPT6AA<br>
+9Kz32MnVV7N0cbmjizdQ197wSRn/xSF+4uwmo1BgWCgdiOz2VRfWkdZfqEMb1o22fzy<br>
ZvgQ==<br>
MIME-Version: 1.0<br>
Received: by 10.204.128.65 with SMTP id j1mr1216589bks.93.1344030999482; Fri,<br>
03 Aug 2012 14:56:39 -0700 (PDT)<br>
Received: by 10.204.225.133 with HTTP; Fri, 3 Aug 2012 14:56:39 -0700 (PDT)<br>
In-Reply-To: <<a rel="nofollow" href="mailto:1344029570.67538.YahooMailNeo@web140702.mail.bf1.yahoo.com" target="_blank">1344029570.67538.YahooMailNeo@web140702.mail.bf1.yahoo.com</a>><br>
<div>References: <<a rel="nofollow" href="mailto:4059366D-34BE-4484-8583-CE4A957D7ABC@gmail.com" target="_blank">4059366D-34BE-4484-8583-CE4A957D7ABC@gmail.com</a>><br>
<<a rel="nofollow" href="mailto:AAABB2DA-8DC9-4333-9CD7-9D12098B23BC@afrinic.net" target="_blank">AAABB2DA-8DC9-4333-9CD7-9D12098B23BC@afrinic.net</a>><br>
<<a rel="nofollow" href="mailto:CAD_dc6hMYZ%2ByJ79FLmkr8oj4SwO5zUaTNBijoJMh2XgSY_vWQg@mail.gmail.com" target="_blank">CAD_dc6hMYZ+yJ79FLmkr8oj4SwO5zUaTNBijoJMh2XgSY_vWQg@mail.gmail.com</a>><br>
<<a rel="nofollow" href="mailto:1344027080.42580.YahooMailNeo@web140701.mail.bf1.yahoo.com" target="_blank">1344027080.42580.YahooMailNeo@web140701.mail.bf1.yahoo.com</a>><br>
</div> <<a rel="nofollow" href="mailto:CAD_dc6im5e%2B4pQq%2BWS8O4QvNMpWKoFZmSn4ujAgNfopUMMufxQ@mail.gmail.com" target="_blank">CAD_dc6im5e+4pQq+WS8O4QvNMpWKoFZmSn4ujAgNfopUMMufxQ@mail.gmail.com</a>><br>
<<a rel="nofollow" href="mailto:1344029570.67538.YahooMailNeo@web140702.mail.bf1.yahoo.com" target="_blank">1344029570.67538.YahooMailNeo@web140702.mail.bf1.yahoo.com</a>><br>
Date: Fri, 3 Aug 2012 22:56:39 +0100<br>
Message-ID: <CAD_dc6iGxrwk=rR75KjFS-zcV=<a rel="nofollow" href="mailto:LLQOp63o4E0LZXah-0Wb6W%2BQ@mail.gmail.com" target="_blank">LLQOp63o4E0LZXah-0Wb6W+Q@mail.gmail.com</a>><br>
<div>Subject: Re: [afnog] VPN mtu<br>
</div><div>From: Seun Ojedeji <<a rel="nofollow" href="mailto:seun.ojedeji@gmail.com" target="_blank">seun.ojedeji@gmail.com</a>><br>
To: "Onowojo E." <<a rel="nofollow" href="mailto:eonowojo@yahoo.com" target="_blank">eonowojo@yahoo.com</a>><br>
</div>Content-Type: multipart/alternative; boundary=0015174be3024a90c404c6639a2c<br>
<div><br>
Hello Emma,<br>
On Fri, Aug 3, 2012 at 10:32 PM, Onowojo E. <<a rel="nofollow" href="mailto:onowojemma@yahoo.com" target="_blank">onowojemma@yahoo.com</a>> wrote:<br>
<br>
> Thanks for your reply Seun i did it on the interface connecting to the<br>
> Internet (outside interface)<br>
><br>
Could you run it on your local interface.<br>
<br>
Cheers!<br>
<br>
><br>
</div><div>> *God be with u all*<br>
</div>> *A true friend is someone who reaches for your hand and touches your heart<br>
> *.<br>
><br>
> ------------------------------<br>
> *From:* Seun Ojedeji <<a rel="nofollow" href="mailto:seun.ojedeji@gmail.com" target="_blank">seun.ojedeji@gmail.com</a>><br>
> *To:* Onowojo E. <<a rel="nofollow" href="mailto:eonowojo@yahoo.com" target="_blank">eonowojo@yahoo.com</a>><br>
> *Cc:* Nigeria Nog <<a rel="nofollow" href="mailto:afnog@afnog.org" target="_blank">afnog@afnog.org</a>><br>
> *Sent:* Friday, August 3, 2012 10:26 PM<br>
><br>
> *Subject:* Re: [afnog] VPN mtu<br>
<div><div>><br>
> Hello Emmanuel,<br>
><br>
> On which interface did you do the reduction? trust its on the local side<br>
> of the link? and you used something similar to below:<br>
><br>
> ip tcp adjust-mss 1300<br>
><br>
> Perhaps you could check packet size that goes through and then configure<br>
> with that, you can use the following(i am using debian): ping <other side<br>
> url>-s 1300 (increase or reduce the MTU untill you get a perfect one and<br>
> then apply the command above)<br>
><br>
> Cheers!<br>
> On Fri, Aug 3, 2012 at 9:51 PM, Onowojo E. <<a rel="nofollow" href="mailto:onowojemma@yahoo.com" target="_blank">onowojemma@yahoo.com</a>> wrote:<br>
><br>
> Hello all,<br>
> i just configure an ipsec site to site vpn between Asa and a cisco 2811<br>
> router using cisco ASDM and CCP ,but the tunnel comes up when i did and<br>
> extended ping and after a while it goes down i try use cisco configuration<br>
> professional (ccp ) to trouble shoot the link and it bring out this error "A<br>
> ping with data size of this VPN interface MTU size and 'Do not Fragment'<br>
> bit set to the other end VPN device is failing. This may happen if there<br>
> is a lesser MTU network which drops the 'Do not fragment' packets."<br>
> CCp suggests I can use crypto ipsec df-bit clear to resolve this or<br>
> contact our ISP to resolve<br>
> i have reduce the mtu on the ASA and the router to 1300,1460, 1400 and<br>
> 1480 but still the network is slow and the tunnel will just go off when<br>
> more user use the network and the tunnel goes down.<br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>------------------------------------------------------------------------<br><font color="#888888"><blockquote style="margin:0pt 0pt 0pt 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex;font-family:garamond,serif">
<i><span style="color:rgb(0,102,0)">Seun Ojedeji,<br style="color:rgb(0,102,0)"></span><span style="color:rgb(0,102,0)">Federal University Oye-Ekiti<br style="color:rgb(0,102,0)"></span><span style="color:rgb(0,102,0)">web: </span><a rel="nofollow" href="http://www.fuoye.edu.ng/" target="_blank">http://www.fuoye.edu.ng</a><br>
<span style="color:rgb(0,102,0)"></span><span style="color:rgb(0,102,0)">Mobile: <a rel="nofollow">+2348035233535</a></span><span style="color:rgb(0,102,0)"></span><br></i><i><span style="color:rgb(0,102,0)">alt email:<a rel="nofollow" href="http://goog_1872880453/" target="_blank"> </a><a rel="nofollow" href="mailto:seun.ojedeji@fuoye.edu.ng" target="_blank">seun.ojedeji@fuoye.edu.ng</a></span></i><br>
</blockquote></font><br><br>
</div><br></div></div><div class="im">_______________________________________________<br>afnog mailing list<br><a href="http://afnog.org/mailman/listinfo/afnog" target="_blank">http://afnog.org/mailman/listinfo/afnog</a><br>
<br> </div></div> </div> </div></div></blockquote></div><br><br clear="all"><br>-- <br>------------------------------------------------------------------------<br><font color="#888888"><blockquote style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex;font-family:garamond,serif">
<i><span style="color:rgb(0,102,0)">Seun Ojedeji,<br style="color:rgb(0,102,0)"></span><span style="color:rgb(0,102,0)">Federal University Oye-Ekiti<br style="color:rgb(0,102,0)"></span><span style="color:rgb(0,102,0)">web: </span><a href="http://www.fuoye.edu.ng" target="_blank">http://www.fuoye.edu.ng</a><br>
<span style="color:rgb(0,102,0)"></span><span style="color:rgb(0,102,0)">Mobile: <a value="+2348035233535">+2348035233535</a></span><span style="color:rgb(0,102,0)"></span><br></i><i><span style="color:rgb(0,102,0)">alt email:<a href="http://goog_1872880453" target="_blank"> </a><a href="mailto:seun.ojedeji@fuoye.edu.ng" target="_blank">seun.ojedeji@fuoye.edu.ng</a></span></i><br>
</blockquote></font><br><br>