About Michal Bruncko

Michal Bruncko · 04-11-2022

we are using Cisco ASA 9.12 with time-based ACL. it works well for new connections outside of allowed time window which are being blocked. but ASA keeps the connections initiated during allowed time-frame open even after allowed time-frame. is there ...

Michal Bruncko · 04-08-2021

Hello all,there is not too much information about Protected Access Credential (PAC) file deployment and background for Cisco ASA firewalls except this and another official documentation.there are stated following restrictions about importing PAC cred...

Michal Bruncko · 03-24-2020

hi folks I am fighting to retrieve site-to-site VPN tunnel status via SNMP. I am trying to get it from multicontext-enabled Cisco ASA version 9.6(4)20 from VPN dedicated ASA context IP address. - First I tried snmpwalk over OID 1.3.6.1.4.1.9.9.171 f...

Michal Bruncko · 02-14-2020

hi guysplease can anybody advise how to list a configuration of AP which get disconnected from WLC point of view? Usually I am listing configuration of particular AP using the way: "Wireless" -> Access points -> All APs -> use filter/select for speci...

Michal Bruncko · 11-07-2014

Hello folks, I have recently upgraded from 1.3.7.18 to version 1.4.0.88 on my several SG300-28P switches. I am using TACACS authentication. My account is a part of "admins" group which has been set "priv-lvl = 15" (inside tac_plus.conf configuration)...

Michal Bruncko · 11-28-2022

I have checked that data sheet and there is explicitly stated that SNMP is supported on all models except of SG200-08 and SG200-08P (which is unfortunate). Snip from PDF: Simple Network Management Protocol (SNMP):SNMP versions 1, 2c, and 3 with suppo...

Michal Bruncko · 04-11-2022

I have no idea what you mean with MRF.maybe this is misunderstanding. consider it this way:my inside_in ACE is not working now because of "weekends" time statementtherefore I have allowed my TCP video connection with temporary (for purpose of this ac...

Michal Bruncko · 04-11-2022

class-map drop-cctv-oobh match access-list global_mpc_1 policy-map global_policy class inspection_default inspect xyz class drop-cctv-oobh set connection timeout idle 0:00:01 reset time-range weekdays periodic weekdays 0:00 to 23:59 time-r...

Michal Bruncko · 04-11-2022

thank you, this sounds promising, but it relies on connection stream to be idle at least for certain (defined timeout) period of time. please consider the client is CCTV camera with continuous video stream.yes, I have tested this just now and set the...

Michal Bruncko · 04-11-2022

I cannot use absolute statement as the timeframe is reoccuring - all weekends. it will be impossible to define that with "absolute" keyword. access-list inside_access_in line 32 extended permit ip object host_x_y_z_w object-group internet log informa...

Member Since	‎03-01-2012 04:14 PM
Date Last Visited	‎03-26-2026 08:49 PM
Posts	347
Total Helpful Votes Received	230

User Statistics

User Activity

ASA - how to reset connection outside of allowed timeframe

Cisco ASA - Protected Access Credential (PAC) import/resilience questions

Cisco ASA multicontext S2S VPN tunnel SNMP monitoring

WLC list config of disconnected AP

Firmware 1.4.0.88 breaks aaa authorization for TACACS

Re: I would like to know if you

Re: ASA - how to reset connection outside of allowed timeframe

Re: ASA - how to reset connection outside of allowed timeframe

Re: ASA - how to reset connection outside of allowed timeframe

Re: ASA - how to reset connection outside of allowed timeframe