About MattMH

MattMH · 08-05-2024

Hello,I have a question about BGP routing as we begin to introduce BGP in prep for Meraki SDWAN. Currently, all routing is using EIGRP right now. Everything I am trying to test is in a lab and I can't get it to work how I would like it to.I have 2 da...

MattMH · 06-19-2024

I am not sure if this is possible, but I can't get it to work.We recently setup an IPSEC/VTI VPN with 'vendor A'. That tunnel and VTI interface are up. Routes are being exchanged via BGP. The VPN was setup on a Cisco ASA. The ASA has 2 VPN's to 'vend...

MattMH · 06-12-2024

In prep for our upgrade to Secure Client, is there any way to hide the Secure Endpoint option from the Client? I don't want to disable it, just prevent it from being seen.

MattMH · 06-10-2024

I am having issues getting my TrustSec policy working on one my switches. When I run the following command I see,27-Switch#show cts environment-dataCTS Environment Data====================Current state = START (always in START)Last status = ClearedTh...

MattMH · 03-05-2024

I have a 2-part question for setting up a site-to-site VPN with a vendor.Question 1We have /28 subnet assigned to us from our ISP. Our ASA is using .2 and our default route is .1 to the ISP. I do not want to set this site-to-site VPN up using our .2 ...

MattMH · 01-13-2025

@ryanbess ... running into somewhat of a similar issue, however it deals with integrating TrustSec with Meraki Adaptive Policy. You said, "...What we ran into was if we forgot assign the NADs to the SGT trustsec_devices...". I am trying to understand...

MattMH · 08-06-2024

This document is what I needed. The only thing that was different for my scenario was that my WAN was EIGRP and my LAN was BGP, so I flipped how/where the weight is applied and works as I had hoped. Thanks!

MattMH · 08-06-2024

@MHM Cisco World @paul driver ... read through the docs and this is exactly what I am dealing with. Question, the doc refers to eBGP and my current lab setup is EBGP between CORE and DIST. Should I keep that setup EBGP or is there any reason I shou...

MattMH · 06-11-2024

@Arne Bier ... thanks for the response. The docs are hard to find with regards to this. However, I was able to get my issue resolved by doing this. 1) I was able to regenerate the PAC by issuing cts refresh pac from the switch. I don't know why this...

MattMH · 03-07-2024

Thanks @Rob Ingram. I was able to get this working in a lab as expected using distribution lists for the BGP peer in AWS.

Member Since	‎10-20-2022 11:23 AM
Date Last Visited	‎01-13-2025 12:23 PM
Posts	30
Total Helpful Votes Received	9

User Statistics

User Activity

BGP Routing When EIGRP Paths are Available

Help Setting up NAT - Cisco ASA with IPSEC/VTI VPN with Vendor

Hide Secure Endpoint from the Secure Client VPN Window

Cisco ISE - Out Of Band (OOB) TrustSec PAC

Cisco ASA Site-to-Site VPN

Re: ISE SGT: TrustSec_Devices

Re: BGP Routing When EIGRP Paths are Available

Re: BGP Routing When EIGRP Paths are Available

Re: Cisco ISE - Out Of Band (OOB) TrustSec PAC

Re: Cisco ASA Site-to-Site VPN