About Kyujin Choi

Kyujin Choi · 08-15-2022

Hi there. I would like to get expertise about IP prefix-list to define remote VPN users. Currently, 10.1.2.0/24 is for remote VPN subnet. OSPF route table has 10.1.2.x/32. Belows are examples for remote VPN routes (/32) 10.1.2.91/32, 10.1.2.1...

Kyujin Choi · 06-29-2022

We have three AnyConnect Profiles (3 of Tunnel Groups - i.e A, B, C). A and B AnyConnect Tunnel Group are tied to backend RADIUS servers for authentication. I just followed below AnyConnect doc with MFA. Now Azure MFA works fine for Tunnel Group C (S...

Kyujin Choi · 03-12-2020

(Update 3/13) - I added "import ipv4 unicast map cff-internal-routemap" under one of VRFs interface with a prefix-list and route-map in order to redistribute OSPF into vrf enabled bgp. I see a little progress, but I am still not able to redistribute...

Kyujin Choi · 01-30-2018

Hi, I have two ASAs. (9.6.(1) and 9.4.(2)11). According to the article, I can see only three versions of ASA affected by this bug. Then can I ignore this bug since my ASAs do not have below versions? or do you recommend to upgrade ASA? Thanks. ...

Kyujin Choi · 08-10-2016

Good morning. I do understand the direction of acl in/out. Here is the example. I am doing on Nexus 1k which is same rule applied. ACL in/out direction and interface When you apply an ACL "in", the router examines all traffic it RECEIVES on the int...

Kyujin Choi · 08-15-2022

IP prefix-list remote-vpn seq 10 permit 10.1.2.0/32 Above IP prefix contains all 10.1.2.x/32 subnet?

Kyujin Choi · 07-05-2022

Thanks Mohammed. Please see my reply. Wihtout a same SAML Sign Cert, multiple TGs are not working. Thanks for your config

Kyujin Choi · 07-05-2022

(Updated) It is possible to use multiple IdP from ASA including Azure AD (same Identifier), however to use a same SAML server, it is required to use a SAME SAML Sign Certificate which I was able to do from Azure Portal. Basically, I imported/exporte...

Kyujin Choi · 12-14-2018

I have a same issue. However, I found an interesting stuff. After the configuration, I was able to see syslogs from Solarwind Orion, but not from Kiwi syslog server (I am pulling to two servers). If you don't see any log shipped from the ASR, try it...

Kyujin Choi · 08-10-2016

It works. thanks. I was confused. port-profile type vethernet 218Vlanswitchport mode accessswitchport access vlan 218ip port access-group test2 inno shutdownstate enabledvmware port-group ip access-list test2 permit ip 10.200.218.0/24 host 10.200...

Member Since	‎05-25-2010 06:38 AM
Date Last Visited	‎07-21-2023 12:02 AM
Posts	110
Total Helpful Votes Received	15

User Statistics

User Activity

IP prefix-list for /32 subnet (remote VPN usr)

AnyConnect (4.10 version) with Azure MFA - Same Azure AD Identifier

Redistribution between VRF enabled BGP and global OSPF (solved)

CSCvg35618 - Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability - 1

port-group ip access-list and group

Re: IP prefix-list for /32 subnet (remote VPN usr)

Re: AnyConnect (4.10 version) with Azure MFA - Same Azure AD Identifi

Re: AnyConnect (4.10 version) with Azure MFA - Same Azure AD Identifi

Re: Enabling Logging on an ASR from a source port

It works. thanks. I was