About Joel

Joel · 11-02-2015

Hopefully posted in the correct community. A client of ours is currently exploring re-architecting their Internet edge. Currently they have one ISP delivering two bearer across two data centre a few kilometers apart. The bearers have PA address space...

Joel · 11-13-2018

Hi, Do you have the monitor-interface command enabled? Example below: monitor-interface inside If you run show failover you should see Monitored Interfaces 3 of 1049 maximum This determines the number of interfaces you are monitoring. If a number...

Joel · 10-22-2018

For sometime Cisco have been looking to retire the way you previously configured the radius configuration. A lot of IOS versions warned this command is soon to be deprecated. https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authenticati...

Joel · 10-16-2018

Hi, We use Azure MFA server and the configuration is near identical to creating radius configuration on NPS. For the ASA define your radius servers, which is our MFA server i.e. aaa-server RADIUS (inside) host x.x.x.x timeout 60 key xxxxx We in...

Joel · 10-15-2018

Glad it's working. Joel

Joel · 10-15-2018

Can you do a packet-tracer from either the DMZ or inside interface mimic traffic from R1 to 8.8.8.8? We can see why outbound pings are failing. Under the VTY sessions of R1 do you have any ACL applied to limit who can SSH? line vty 0 4 access-cla...

Member Since	‎06-03-2010 08:42 AM
Date Last Visited	‎08-06-2022 12:43 AM
Posts	68
Total Helpful Votes Received	35

User Statistics

User Activity

Internet Edge Re-design

Re: ASA Failover pair

Re: Configuration Radius C9300-48P

Re: Configure 2FA for ASDM on ASA 5512-X

Re: Routing across ASA / NAT

Re: Routing across ASA / NAT