About Mathias Peter IT

Mathias Peter IT · 08-31-2024

What does "status fixed" mean for this enhancement request? The UI is not helpful to find out if the enhancement has been implemented and in which versions that has happened. I'm running ASA 9.16(4)67 and the CLI still doesn't accept IPv6 addresses.

Mathias Peter IT · 08-15-2023

Please excuse what might me an off-topic post to this board. I have not found an appropriate board for my issue, and in here I assume most people with generic Cisco IOS and hardware experiences to be present. I got a Cisco ISR 1101 running 17.03.05 t...

Mathias Peter IT · 04-24-2023

I'm trying to implement SAML Authentication for a certain Tunnel Group for Cisco Anyconnect. The Identity Provider is Keycloak being set up from another vendor and actively being used by other SSO Service Providers (clients). I was using Configure a ...

Mathias Peter IT · 04-03-2023

Hello,I have a DMVPN scenario using EIGRP as routing protocol withtwo hubs (for device redundancy) in a DC,two routers as spoke (for connection and device redundancy) in an external location.One of the spoke routers is connected to the Internet via D...

Mathias Peter IT · 12-14-2022

Hello,Cisco is not providing Anyconnect based SSL-VPN on IOS XE, stating IOS XE isn't a "strategic security platform". Aside from this decision annoying customers and administrators likewise, I fail to find a solution for this platform which is easy ...

Mathias Peter IT · 05-17-2024

The whole thread and this answer is utterly confusing. In addition, the lack of proper English language doesn't help.It's still not clear how to reveal the VTP password in IOS XE based switches, when it was entered with just vtp password newpassword....

Mathias Peter IT · 08-15-2023

I've found and solved the culprit myself. It was a hardware issue. Thanks @balaji.bandi to force me to boot the box again to collect the requested information! Usually I don't watch devices boot, but this time it was most helpful! I got an initial me...

Mathias Peter IT · 06-22-2023

Unfortunately, I can't. The Keycloak installation is managed by a 3rd party vendor and I don't have access. Sorry!

Mathias Peter IT · 04-25-2023

Got it to run with two changes:Referencing URLs in Keycloak must be changed to https instead of httpThe base-url-parameter in the IdP-configuration in the ASA seems to be mandatorybase-url https://asa.external.dns.name.goes.here

Mathias Peter IT · 04-25-2023

I've done the same, but with a newer ASA release. AAA is not involved. See configuration documentation.

Member Since	‎09-30-2021 02:56 AM
Date Last Visited	‎10-07-2024 12:52 PM
Posts	17
Total Helpful Votes Received	5

User Statistics

User Activity

CSCwk36512 - Add IPv6 to shun CLI

Cisco ISR 1101 not keeping startup configuration between reloads

SSO with Anyconnect SAML Authentication with Cisco ASA vs. Keycloak

Redistribute Routes between EIGRP and change route metrics

Easy replacement for Anyconnect SSL-VPN on IOS XE

Re: C9200L show vtp password, VTP Password is configured.

Re: Cisco ISR 1101 not keeping startup configuration between reloads

Re: SSO with Anyconnect SAML Authentication with Cisco ASA vs. Keycloa

Re: SSO with Anyconnect SAML Authentication with Cisco ASA vs. Keycloa

Re: SAML asa and Keycloak