topic Re: ASA VPN in Network Security

ASA VPN

cisco.13 — Fri, 28 Jun 2024 19:35:50 GMT

Hello,
I have a problem with my LB VPN, until today everything was working correctly, but today I have a certificate problem, https//:fqdn redirects to an https://IP (ip membre), any idea?
the certificate is valid
Thank you

Re: ASA VPN

MHM Cisco World — Sat, 29 Jun 2024 01:06:28 GMT

LB meaning load balance ?

MHM

Re: ASA VPN

Kasun Bandara — Sat, 29 Jun 2024 03:04:56 GMT

@cisco.13 hi, can you explain more about your scenario with small diagram. as per your explanation its related to LB. (i assume its Load balancer) if so we need to know how your traffic terminated at ASA for VPN and where is the gateway IP configured for the VPN clients.

Re: ASA VPN

cisco.13 — Sat, 29 Jun 2024 11:28:26 GMT

Hello,
opensdns is not available!
https://support.opendns.com/hc/en-us/articles/27951404269204-OpenDNS-Service-Not-Available-To-Users-In-France-and-Portugal
workaround:
https://community.cisco.com/t5/security-knowledge-base/asa-vpn-load-balancing-clustering-with-digital-certificates/ta-p/3116616
Thanks

Re: ASA VPN

tvotna — Mon, 01 Jul 2024 06:57:06 GMT

Right, that's why it's always recommended to configure "name"s of all cluster members on all cluster units.

Re: ASA VPN

cisco.13 — Mon, 01 Jul 2024 11:48:25 GMT

No, this is a workaround. You need to set a functional DNS server; otherwise, you will encounter other problems, such as license renewal issues