About Valkyrie3

Valkyrie3 · 05-01-2025

I have an FMC 2700 on version 7.4.2.1 which is managing an FTDv running 7.2.9 and having a problem getting a site to site VPN working, it's the 5th one I've set up and the first one to this particular company (the other four have all worked fine firs...

Valkyrie3 · 02-06-2025

I have a UCS 5108 chassis with eight B200 M5's, I upgraded the chassis manager from 4.3.4a to 4.3.5a at Christmas time but when upgrading a blade from 4.2.1f to 4.3.5a this week it failed at the following step:Associate Check Power Availability - Che...

Valkyrie3 · 09-11-2024

I'm using a pair of C8000v routers which have been working well until recently the site has been encountering internet performance issues, I found the following error when the problem is starting:%IOSXE-4-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:000 TS...

Valkyrie3 · 05-02-2024

I have a pair of FMC 2500s running 6.6.7.1 in an HA pair which I've upgraded previously without issue. I upgraded the standby unit to 7.0.3 successfully but when it rebooted, neither FMC can see each other although I can log into either one without ...

Valkyrie3 · 02-22-2024

I have some external systems which are sending data to a syslog server on UDP port 514 which is behind an FTDv(v6.6.7.1) which is managed by a Cisco FMC (v6.6.7.1), I have a rule in the ACP on the FTD to allow traffic from these external systems on p...

Valkyrie3 · 05-07-2025

The vendor has replied saying they changed the local and remote CIDR's on their side which brought the phase one tunnel up but there was an authentication error. I changed to a new shared secret and provided it to the vendor so the VPN is now finall...

Valkyrie3 · 05-02-2025

I'm on 7.2.9, I don't know what the vendor is on yet. They've offered to have a call to try and sort this out so I'm hoping to get more information next week.

Valkyrie3 · 05-02-2025

Thanks for having a look through that text, is that the AES setting on the ESP encryption for the IPsec proposal you think isn't correct? Also does "type: 4, reserved: 0x0, id: DH_GROUP_256_ECP/Group 19" mean it's using DH group 19 or something else?

Valkyrie3 · 05-02-2025

I couldn't find a packet option so I ran the debug crypto ikev2 platform 10 and debug crypto ikev2 protocol 10 which produced the output below (there's a lot of other VPN traffic but I think this is everything related to the one I'm troubleshooting)...

Valkyrie3 · 05-02-2025

Where will the output of the commands show, if I set the main logging or VPN logging to 7-debug I get a lot of messages and not sure of the easiest way to find the specific ones relating to the debug commands. The logging is configured to send debug...

Member Since	‎09-23-2022 04:54 AM
Date Last Visited	‎05-01-2025 11:12 AM
Posts	32
Total Helpful Votes Received	7

User Statistics

User Activity

No proposal chosen on FMC managed FTDv - any helpful debug commands?

Check power availability failure after upgrading blade to 4.3.5a

Increase max NAT translation limit on c8000v router

HA pair cannot see each other after upgrade to 7.0.3

Unable to see some syslog data traversing FMC managed FTDv firewall

Re: No proposal chosen on FMC managed FTDv - any helpful debug command

Re: No proposal chosen on FMC managed FTDv - any helpful debug command

Re: No proposal chosen on FMC managed FTDv - any helpful debug command

Re: No proposal chosen on FMC managed FTDv - any helpful debug command

Re: No proposal chosen on FMC managed FTDv - any helpful debug command