About Othacon

Othacon · 11-19-2025

Hi all,Hope to find everyone well. I'm configuring in a Cisco Catalyst 9300 with 17.12.6, several ACLs that are being applied in the a VLAN SVI in the input. I've configured several network objects, but found that initially with the multicast it work...

Othacon · 12-13-2024

Hi all,I've configured a Cisco FTD 1010 and I'm having a weird behavior happening. I've configured all the policies from inside to outside and the default action is to block.I've configured several policies and I can see them being allowed and matchi...

Othacon · 11-19-2024

Hi all,hope you can adviseI have my ISP giving me a /31 for my point to point link, but when inserting on the 1010 it gives me that I can't use a network as my IP address. I'm not using the FMC but the Firewall Device Manager since I only have a sing...

Othacon · 06-25-2024

Hi all,hope you can help me.I'm having my mind melted with the Keychain Accept and Lifetimes, basically I'm getting confused from all the info I see. Please would it be possible to confirm if the below is correct? key chain TESTkey 6accept-lifetime l...

Othacon · 06-15-2024

Hi all, hope you can help me.I have several sites configured with MACSEC running MKA on Ciscos 9300 and 9200, everything was working correctly but had a situation where on June 12 at 10AM the links with MACSEC dropped and reconnected again after some...

Othacon · 12-13-2024

hi @MHM Cisco World unfortunately I really can't put the entire rule list, but I can put the last ones, please see below:access-list NGFW_ONBOX_ACL line 34 remark rule-id 268435458: ACCESS POLICY: NGFW_Access_Policyaccess-list NGFW_ONBOX_ACL line 35...

Othacon · 11-19-2024

Thank you @Flavio Miranda , since I don't have FMC, I won't be able to configured this.

Othacon · 11-19-2024

Thank you @MHM Cisco World , this is indeed weird, I get the "error message" that is in the bug description but my FTD has the version 7.6 and not the 6.x reported on the bug. Interesting

Othacon · 11-19-2024

We really just need one ip per host, maybe this FTD doesn't really have the option?

Othacon · 11-19-2024

I did see this thread and saw below that there's a reply saying the latest versions do indeed accept but my 1010 simply won't accept it... if I put a /31 ip the FTD throws an error and doesn’t accept thread change.

Member Since	‎03-20-2020 10:08 AM
Date Last Visited	‎12-20-2025 04:51 AM
Posts	38
Total Helpful Votes Received	5

User Statistics

User Activity

Cisco 9300 - Multicast, Network Objects and ACL Issues

FTD 1010 - Traffic No Action Policy

FTD 1010 with /31 Interface

OSPF Key Chain - Send Lifetime and Accept Time - Doubt

MACSEC - Link Disconnection after Key change

Re: FTD 1010 - Traffic No Action Policy

Re: FTD 1010 with /31 Interface

Re: FTD 1010 with /31 Interface

Re: FTD 1010 with /31 Interface

Re: FTD 1010 with /31 Interface