About erik.hammervold

erik.hammervold · 11-02-2023

Hello experts I have a L2L tunnel I don't seem to get started. It seems to me that Phase1 is OK, but fails immediately when trying to pass traffic and establish SA's. We use PSK with IKEv2 I have been trying to check the configuration and it seems...

erik.hammervold · 08-12-2021

I'm testing Downloadable Access-lists on a RA-VPN setup But can't seem to get the dACL to be attached to the clients connections. I cannot seem to find a config-guide that explains to me a setup on the Firepower, or if the Firepower just is supposed ...

erik.hammervold · 10-16-2020

Hi I have a small nuisance.We run Firepower 2130 with ASA image, and have several group policies with IPv6, but for a small set of users we need to run IPv4 only. So I set up a group policy for this, but see that the ASA distributes IPv6 adresses fro...

erik.hammervold · 06-18-2020

Hi We had a software upgrade and we lost four N2K-C2232TM-10GE connected to one of our Nexus 5596UP chassis. We have redundancy for 99% so there's not an emergency but... The Fex'es is going in to a boot loob trying to do a image download. Tried on ...

erik.hammervold · 06-09-2020

Hi We are running a pair of ASR 9006 with a A9K-VSM-500 running CGN.The ASR is a beast, does what it is supposed to, and has been a remarkably stable workhorse for us. But they are expensive, and we are in a discussion to upgrade to 100Gbit/s. And ...

erik.hammervold · 11-02-2023

We got this solved in the end. The problem was that the ACL in some way the TrafficSelector did not take effect. It showed all the right values and appeared in show commands etc, but failed to take effect when receiving traffic. We have removed the ...

erik.hammervold · 11-02-2023

Hi Thanks for the reply Yes the TS_UNACCEPTABLE seems to indicate a problem with the traffic selector, but we have taken an extra check on this to double-triple-check this, and I got access to the peer config as well to compare. The ACL is as simple ...

erik.hammervold · 08-31-2021

This also helped me. Exact same issue. Thanks

erik.hammervold · 08-12-2021

HiDid a single line "permit ip any any" acl which did not help.Will do another round of troubleshooting and debug later.Thanx som far.

erik.hammervold · 08-12-2021

Aha.. So.. Back to the drawingboard again then. I do not have the "Filter Name" section at all in the SSL-Tunnel section? show vpn-sessiondb detail anyconnect SSL-Tunnel:Tunnel ID : 7767.2Assigned IP : xxxxxxx Public IP : xxxxxxxEncryption : xxxxxxx...

Member Since	‎06-05-2009 12:26 AM
Date Last Visited	‎09-17-2024 02:33 AM
Posts	23
Total Helpful Votes Received	5

User Statistics

User Activity

L2L VPN tunnel won't come up

Firepower RA VPN with dACL not working

ASA picking from IPv6-pool on non IPv6 enabled Group Policy

C2232TM Fex'es failing image download

ASR9006 with CGN alternative

Re: L2L VPN tunnel won't come up

Re: L2L VPN tunnel won't come up

Re: ISE 2.4 P6 - Backup failed - ISE INDEXING ENGINE BACKUP FAILED

Re: Firepower RA VPN with dACL not working

Re: Firepower RA VPN with dACL not working