Tamirat Atsemegiorgis Building a Secure Local Area Network

Verification of VPN Connection 
 
ASA# show vpn-sessiondb remote 
Session Type: IKEv1 IPsec 
Username : tame1 Index : 1 
Assigned IP : 172.16.10.10 Public IP : 10.94.62.113 
Protocol : IKEv1 IPsec 
License : Other VPN 
Encryption : AES256 AES128 Hashing : SHA1 SHA1 
Bytes Tx : 0 Bytes Rx : 0 
Group Policy : testgroup Tunnel Group : testgroup 
Login Time : 15:06:52 UTC Mon Apr 29 2013 
Duration : 0h:09m:18s 
Inactivity : 0h:00m:00s 
NAC Result : Unknown 
VLAN Mapping : N/A VLAN : none 
Verification of Wireless Connection 
AP#ping 192.168.100.4 
Type escape sequence to abort. 
Sending 5, 100-byte ICMP Echos to 192.168.100.4, timeout is 2 seconds: 
!!!!! 
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms 
Verification of NATs Translation

---

Appendix 1 
27 (27) 
 
ASA# sh xlate 
16 in use, 118 most used 
Flags: D - DNS, i - dynamic, r - portmap, s - static, I - identity, T 
- twice 
e - extended 
NAT from inside:192.168.1.0/24 to outside:192.168.1.0/24 
flags sI idle 1:16:58 timeout 0:00:00 
TCP PAT from dmz:192.168.2.3 21-21 to outside:10.94.62.251 21-21 
flags sr idle 0:26:45 timeout 0:00:00 
TCP PAT from dmz:192.168.2.0/24 21-21 to outside:10.94.62.251 21-21 
flags sr idle 0:26:45 timeout 0:00:00 
TCP PAT from inside:192.168.100.4/1907 to outside:10.94.62.251/1907 
flags ri idle 0:00:57 timeout 0:00:30 
TCP PAT from inside:192.168.100.4/1901 to outside:10.94.62.251/1901 
flags ri idle 0:00:58 timeout 0:00:30 
TCP PAT from inside:192.168.100.4/1893 to outside:10.94.62.251/1893 
flags ri idle 0:00:58 timeout 0:00:30 
TCP PAT from inside:192.168.100.4/1885 to outside:10.94.62.251/1885 
flags ri idle 0:00:59 timeout 0:00:30 
UDP PAT from inside:192.168.100.4/64375 to outside:10.94.62.251/64375 
flags ri idle 0:02:33 timeout 0:00:30 
TCP PAT from inside:192.168.30.2/50535 to outside:10.94.62.251/50535 
flags ri idle 0:00:31 timeout 0:00:30 
TCP PAT from inside:192.168.30.2/50532 to outside:10.94.62.251/50532 
flags ri idle 0:00:31 timeout 0:00:30 
TCP PAT from inside:192.168.30.2/50530 to outside:10.94.62.251/50530 
flags ri idle 0:01:56 timeout 0:00:30 
TCP PAT from inside:192.168.30.2/50528 to outside:10.94.62.251/50528 
flags ri idle 0:01:56 timeout 0:00:30 
TCP PAT from inside:192.168.30.2/50524 to outside:10.94.62.251/50524 
flags ri idle 0:01:56 timeout 0:00:30 
TCP PAT from inside:192.168.30.2/50522 to outside:10.94.62.251/50522 
flags ri idle 0:01:57 timeout 0:00:30 
TCP PAT from inside:192.168.30.2/50510 to outside:10.94.62.251/50510 
flags ri idle 1:05:47 timeout 0:00:30 
UDP PAT from inside:192.168.70.3/52291 to outside:10.94.62.251/52291 
flags ri idle 0:05:06 timeout 0:00:30