About johanhofmans

johanhofmans · 05-23-2012

all,since yesterday, I cannot logon with adsm anymore.when I run adsm, I type in my pw, and the screen keeps displaying "contacting the device". No timeout, just stays this way.I've updated the java version, no luck.I can connect with SSH with no pro...

johanhofmans · 06-14-2011

Hi,We have two C3750 in stack, with the two Ten0/1 uplinks connected to a core 6500.These two Ten uplinks are channeled in a portchannelrelevant config below:---interface TenGigabitEthernet1/0/1 (2/0/1 = identical config) description BE01NS31 switchp...

johanhofmans · 06-14-2011

Hi all,Currently, I have in a number of remote sites (with dynamic public address) a C800.On this Cisco, I have a config for initiating an agressive-mode tunnel to a central ASA.relevant part of the config:---crypto isakmp policy 10 encr aes authenti...

johanhofmans · 09-15-2010

I discovered that recently our FWSM does not want to log deny-flows any more.Whenever I want a certain ACE to be logged, I enable the logging with the alert level - and it gets Syslogged.Configuration used:---BE01NF31/UNIVEG# sh run loglogging enable...

johanhofmans · 02-01-2010

Hi, here's what I would like to do:I have a router with two public IPs from two different providers.I have TWO inside vlans - Now, I want TWO ipsec tunnels, both to the same location. One tunnel will serve vlan1, the other vlan2.Goal is that users in...

johanhofmans · 05-23-2012

YES! I indeed had this "aaa authentication http console LOCAL"Once I removed it, I could logon again.But to my knowledge, this command was always there - very strange that this now was causing issues...THANKS !!!!!

johanhofmans · 05-23-2012

asdm 647 now:-( still the same. I'm getting the impression that something is wrong internally and a reboot could solve it.Any other thoughts?it's very much appreciated - i hate to have to tell my cio that i have to reboot this device - uptime 3yrs+ n...

johanhofmans · 05-23-2012

unfortunately the result is the same -- "contacting the device" is all I get...I can access the page from the browser (as I could before), I can start the java ADSM, enter my credentials, then freeze...

johanhofmans · 06-15-2011

yes! this did the trickBottom line: the command "set aggressive-mode client-endpoint fqdn remotesite1" in the C800 is the same as "crypto isakmp identity key-id remotesite1" in ASA.

johanhofmans · 06-14-2011

... I found a configuration command that might do the trick:crypto isakmp identity key-id remotesite1 (in my case)I'm going to test this (the evening) and report back tomorrow.Meanwhile: if somebody has an alternative config or comments on this ident...

Member Since	‎11-28-2006 06:14 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	30

User Statistics

User Activity

ASA cannot logon w/ ADSM (SSH is OK)

port channel suspended for no reason

agressive mode tunnel on ASA

logging on ACLs - problem with deny ACEs

dual-isp-router / two ipsec tunnels to same location

ASA cannot logon w/ ADSM (SSH is OK)

ASA cannot logon w/ ADSM (SSH is OK)

ASA cannot logon w/ ADSM (SSH is OK)

agressive mode tunnel on ASA

agressive mode tunnel on ASA