eve working after re-install. posted on cisco forum, as most of the community is very helpful. ... View more

I don't think my question has been answered. I'm just trying to confirm that if I pass one of the 2 exams, Encore or Enarsi, this will renew the CCNP Ent for another 3 years. Regards, mk ... View more

Here is the config: This will encrypt traffic & send over vpn to that destinsation, everything else will be routed locally. In your scenario, you could try try permit any over the tunnel & deny the zoom meeting IP addresses - not sure if that would work but might be worth a try. Regards, mk   access-list split- tunnel standard permit 192.168.1.0 255.255.255.0 group-policy TELECOMM attributes split- tunnel -policy tunnelspecified split- tunnel - network -list value split- tunnel ... View more

This may help. Regards, mk https://www.packet6.com/cisco-asa-zero-downtime-upgrade/   ... View more

Pinging the interface from the lan should work by default, once its been configured & saved, as opposed to pinging through the asa. I would ask Cisco TAC to take a look at the hardware. Regards, mk ... View more

The question is a little confusing, but you need to configure syslog separately within each context. Hope that helps. Regards, mk ... View more

Hi, Just checked on 3650 Denali Version 16.3.7, see below: line con works as expected, no option for tftp though. 3650#sh run | sec line con line con 0 logging synchronous login local stopbits 1   3650-Stack(config)#no service ? alignment Control alignment correction call-home Enable call-home service compress-config Compress the nvram configuration file config TFTP load config files counters Control aging of interface counters dhcp Enable DHCP server and relay agent disable-ip-fast-frag Disable IP particle-based fast fragmentation exec-callback Enable exec callback exec-wait Delay EXEC startup on noisy lines finger Allow responses to finger requests hide-telnet-addresses Hide destination addresses in telnet command internal Enable/Disable Internal commands linenumber enable line number banner for each exec log-hidden Enable syslog msgs for hidden/internal commands nagle Enable Nagle's congestion control algorithm old-slip-prompts Allow old scripts to operate with slip/ppp pad Enable PAD commands password-encryption Encrypt system passwords prompt Enable mode specific prompt pt-vty-logging Log significant VTY-Async events sequence-numbers Stamp logger messages with a sequence number slave-log Enable log capability of slave IPs tcp-keepalives-in Generate keepalives on idle incoming network connections tcp-keepalives-out Generate keepalives on idle outgoing network connections tcp-small-servers Enable small TCP servers (e.g., ECHO) telnet-zeroidle Set TCP window 0 when connection is idle timestamps Timestamp debug/log messages udp-small-servers Enable small UDP servers (e.g., ECHO) unsupported-transceiver enable support for third-party transceivers   Regards, mk ... View more

Hi Eric, I would run the asa packet-capture on both interfaces to confirm your hypothesis. Also try sh conn | i x.x.x.x - the ip address. The connection from the outside-in will cause the asa to create an entry in the state-table, so the return traffic from the lan-outside will bypass any acl on the interface, as the connection already exists. Regards, mk ... View more