About Mathias Peter IT

Mathias Peter IT · 11-26-2025

vpn(config)# crypto ca enroll acme_cert % Start certificate enrollment .. % The subject name in the certificate will be: CN=acme_cert % The fully-qualified domain name in the certificate will be: acme_cert % Include the device serial number in the...

Mathias Peter IT · 08-31-2024

What does "status fixed" mean for this enhancement request? The UI is not helpful to find out if the enhancement has been implemented and in which versions that has happened. I'm running ASA 9.16(4)67 and the CLI still doesn't accept IPv6 addresses.

Mathias Peter IT · 08-15-2023

Please excuse what might me an off-topic post to this board. I have not found an appropriate board for my issue, and in here I assume most people with generic Cisco IOS and hardware experiences to be present. I got a Cisco ISR 1101 running 17.03.05 t...

Mathias Peter IT · 04-24-2023

I'm trying to implement SAML Authentication for a certain Tunnel Group for Cisco Anyconnect. The Identity Provider is Keycloak being set up from another vendor and actively being used by other SSO Service Providers (clients). I was using Configure a ...

Mathias Peter IT · 04-03-2023

Hello,I have a DMVPN scenario using EIGRP as routing protocol withtwo hubs (for device redundancy) in a DC,two routers as spoke (for connection and device redundancy) in an external location.One of the spoke routers is connected to the Internet via D...

Mathias Peter IT · 11-27-2025

APIPA apparently is not the base problem, but the wrong LE enrollment URL was. My findings so far:Documentation is wrong, because the Let's Encrypt server URL is not auto-populated.Documentation is misleading because example.com is used instead of tr...

Mathias Peter IT · 11-27-2025

Apparently, the hostname derived from Linux certbot defaults isn't a valid hostname. Why the documentation doesn't mention the correct Letsencrypt hostname is beyond me. More research necessary…

Mathias Peter IT · 11-27-2025

Thank you for pointing this out. I have corrected the URL accordingly. enrollment interface outside enrollment protocol acme authentication http01 outside enrollment protocol acme url https://acme-v01.api.letsencrypt.org/directoryExpectably, the er...

Mathias Peter IT · 10-08-2025

Thanks for clarifying! Again a message is misleading to weak crypto instead of the command having been moved.This is the most stupid CLI change unloaded to long standing admins I can imagine. I see my future self adding another conditional into my m4...

Mathias Peter IT · 05-17-2024

The whole thread and this answer is utterly confusing. In addition, the lack of proper English language doesn't help.It's still not clear how to reveal the VTP password in IOS XE based switches, when it was entered with just vtp password newpassword....

Member Since	‎09-30-2021 02:56 AM
Date Last Visited	‎11-27-2025 02:08 AM
Posts	22
Total Helpful Votes Received	7

User Statistics

User Activity

ACME cert enrollment on FP1120/w ASA fails due to APIPA address

CSCwk36512 - Add IPv6 to shun CLI

Cisco ISR 1101 not keeping startup configuration between reloads

SSO with Anyconnect SAML Authentication with Cisco ASA vs. Keycloak

Redistribute Routes between EIGRP and change route metrics

Re: ACME cert enrollment on FP1120/w ASA fails due to APIPA address

Re: ACME cert enrollment on FP1120/w ASA fails due to APIPA address

Re: ACME cert enrollment on FP1120/w ASA fails due to APIPA address

Re: Crypto Key RSA no longer supported

Re: C9200L show vtp password, VTP Password is configured.