Same-security-traffic permit intra-interface

Ip address 192.168.130.1 255.255.255.0 standby 192.168.130.5Д«anner exec Authorized Access Only! Violators will be prosecuted.Д«anner login Authorized Access Only! Violators will be prosecuted.Д«anner asdm Authorized Access Only! Violators will be prosecuted. Home office : Result of the command: 'show running-config' Need some help in getting the two vpn(ipsec ) up and running. I've created exempted nat rules for profile 1 and it's working fine with remote site If you're trying to get different internal subnets to use difference internet connections, then you need policy routing, where you use route-maps to specify what traffic should be sent in which direction, thereby overriding the route table.I only get one IPSEC vpn connection up but not the other. If you're trying to get them to load balance, sorry, you can't do that (with good results) with a 2921 router. If you're trying to get one of the connections to perform like a backup connection, then set one of the static routes with a higher distance, so that the more preferred one is always used unless the primary connection looses link. So you're probably not going to get good results like that. By default, the router will perform ECMP, and some packets will go out one connection and some packets will go out a different connection. So you have two quad-0 routes, where one points out each internet connection. When a Cisco router performs NAT, it will only do so after searching the routing table for where the traffic should go.

So, your question is not very clear, but let me give you some tips. Ip nat inside source static tcp 10.28.10.50 80 ****** 80 extendable Ip nat inside source list 3 interface GigabitEthernet0/1 overload

Ip nat inside source list 2 interface GigabitEthernet0/0 overload Ip nat inside source list 1 interface GigabitEthernet0/0 overload

I put a route like this: ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0ДЄnd the second route for the other ip: ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1Д«ut when I do this the second ip not works, so how can I fix this?Д¬onfig: ip dhcp excluded-address 10.28.11.1 The main connection is funtional right now, I have a subnet with a nat to this ip, but I want put the second ip just to another subnet. I have a cisco 2921 router and 2 wan ips provide by 2 diferents isp via dhcp.

How to 2 lan 2 wan asa 5505 cisco