I'm trying to use local AAA to set up credentials for console and VTY. After applying the following commands I can no longer log into the switch. It disconnects me after several failed attempts. Can you tell me what I am doing wrong? aaa new-modelaaa...
I am starting to convert our ASA 5516x over to FTD image. Since we have 12 different sites I have to setup Site-to-Site VPN for connectivity. This is simple and I have it working, however I am wondering if I can put all the NAT objects into 1 Group...
Hi I'm trying to configure a site-to-site VPN between three routers one of which is passive with multiple ACLs and I'm having a bit of a meltdown. Some of the ACLs work , the VPN works If I don't apply the ACLs as soon as I apply the ACLs it stops w...
Hi Just a simple question when using numbered ACLs is there any significance to the number or should it just be within the specified range for your class of IPs? For example ACL 110 should it be used for a significant purpose? Thanks in advance
Hello, I want to enable reverse-path (URPF) on Cisco ASA in my current networkDo i have to add default route to avoid any issues after enabling Reverse-path (URPF) or any other method ?what are the prerequisites before enabling URPF ? Thanks in advan...
i have the firepower 1120. i configured my device for access to internet from DMZ zone and to access to my web server, but with default action allow. when i set default action BLOCK, and i create NAT: manual for accesss dmz zone to internet and autom...
Hi All,I'm suggestion for our network. We have multiple servers in different location, connected to the internet by DMZ not in our control. Which mean all the outside IP's of our servers are unreachable.Eventually I would like to create S2S connectio...
I have stand alone FMCv and i plan to deploy FMCv HA setup , so please support me what are the requirements either software or License ?
Doing a bunch of testing with FMC/FTD and came across this article talking about inspection of packets that pass before traffic is identified. I'm testing this with ftp. My policy is very simple (picture attached). The traffic in question will hit...
Please remove.
Hi Folks, I have challenges after a software upgrade executed on my Cisco FDM (ASA5555-x) to a latest Hotfix 6.6.5.1 from Version before upgrade: 6.2.3Immediately after upgrade my internal networks drops, and i observed all internal static routes are...
hello,I have ASA 5515-X with a firepower module. What is the best practice to install an FTD image on ASA or install a firepower module?
Hello,so I got free of charge cisco 4331I configured for internet access from my LANbut I'm facing difficulty whit ZBF I cannot find a way to secure my LAN from outsideIf I run port scan whit nmap on my wan IP all ports are showing up closed and not ...
Hello, Everyone. I want to create Internal CA for SSL Decryption. And I generate a CSR, then I request a certificate on Third Party CA. After that I downloaded the Certificate and will install it on Iinternal CA. But, when I want to upload a signed C...
Hello,I am trying to setup a FMC 1600 appliance and have been told it's connected to it's serial port via a serial console server.However, when I log into the cli, I get the following prompt: FMC cli->I cannot type anything in there (I've tried ?, he...
