About n.oneill

n.oneill · 09-10-2020

We have configured our device to use Specific License Reservation (offline method) and reserved a performance license for this device, however, two other feature licenses show as NOT AUTHORIZED. How can I resolve this issue and what is causing these ...

n.oneill · 10-16-2019

I have configured BGP aggregate addresses for RFC1918 address space on our WAN routers towards our core switches to reduce the routing tables sizes on our LAN devices. I have configured an unsuppress-map on our WAN peering to allow our local network...

n.oneill · 11-03-2017

We have a small lab for testing consisting of a single hub site and two branch sites. There are two MPLS clouds (MPLS1 and MPLS2) and all three sites are connected to both transports. We are running a voice stream at 87K (dscp ef), a TCP stream at...

n.oneill · 03-23-2017

I have an IWAN lab built in VIRL to learn more about the technology. I removed the IPsec tunnel protection to have a look at some packet captures and noticed all the traffic is encapsulated as EtherType 0x8909 (SGT). This only reverts to GRE if I r...

n.oneill · 02-24-2017

I have seen that SHA-1 has been broken and the threat of forged certificates is now very real. How does this affect IPsec VPN's that are using SHA-1 as the hash and should we immedialty plan to migrate all VPN's using this technology? I have been d...

n.oneill · 09-10-2020

We only have the performance license and we are not using any feature of the security or application feature set that I can tell.

n.oneill · 11-05-2019

Resolved The unsuppress-map should be used to process and apply policy to any component of an aggregate configured with "summary-only" The route-map should be used to process and apply policy to a prefix outside of any aggregates configured with "sum...

n.oneill · 04-18-2019

"Conditions:The issue affects ASA software version 9.6(2) and later. No specific configuration is required." I don't think it matters if BGP is configured or not.

n.oneill · 11-03-2017

Hi Mark Thanks for your feedback. I am interested to know more about what MTU issues you hit and how you resolved them. Nick

n.oneill · 11-03-2017

I don't have an answer but I am curious. Fragmentation is carried out at the IP layer (Layer 3). The result is that, apart from the initial fragment, we lose a lot of information. We know the IP protocol (ICMP, TCP, UDP etc.) but we lose the tran...

Member Since	‎02-15-2001 03:54 AM
Date Last Visited	‎04-18-2023 02:20 AM
Posts	161
Total Helpful Votes Received	18

User Statistics

User Activity

Smart License Not Authorized

BGP unsuppress-map AND route-map applied to the same peer

IWAN PfR policy decision issue for Voice

IWAN encapsulating traffic with EtherType 0x8909?

SHA-1 broken

Re: Smart License Not Authorized

Re: BGP unsuppress-map AND route-map applied to the same peer

Re: ASA BGP Bidirectional Forwarding Detection ACL Bypass Vulnerability

Re: IWAN - Are many people using it

Re: PFRv3 and IP Fragmentation