About naveen98

naveen98 · 02-08-2023

Hi Community,We have a FPR-2130 with ASA appliance in 2 Firewall cluster. I will refer 2 Firewall as FW-01 and FW-02. Currently FW-02 is in the primary active state and FW-01 is in the secondary standby state. We need to change the FW-01 permanentl...

naveen98 · 12-02-2022

Hi community, We have a requirement on limiting traffic on a Nexus9000 Port-channel to 50Gig. And we have opened a TAC for this configuration change and TAC engineer shared below steps, switch(config)# policy-map type queuing <name> switch(config-pma...

naveen98 · 10-28-2022

Hi All,I'm having an issue with IPSec tunnel which is initiate between CISCO ASA and PaloAlto firewalls.Tunnel Phase 1 & 2 went up after the configurations and also encapsulated traffic. But after tunnel goes down due to inactivity, we could not brin...

naveen98 · 10-29-2022

Hi @Sheraz.Salim thank you for your valuable answer. I do not have administrator access to Palo alto and i will do the changes that you have provided from ASA end and get back to you with the results.

naveen98 · 10-29-2022

Yes PFS is configured. Do we need to configure same PFS groups in both peers ?

naveen98 · 10-29-2022

Dear @balaji.bandi FYR, crypto ikev2 policy 1encryption aes-256integrity shagroup 5 2prf shalifetime seconds 86400crypto ipsec ikev2 ipsec-proposal NTBprotocol esp encryption aes-256protocol esp integrity sha-256*************************************...

Member Since	‎10-28-2022 09:53 PM
Date Last Visited	‎02-08-2023 09:20 AM
Posts	6

User Statistics

User Activity

Change ASA Secondary device into Primary permanently

Traffic shaping - Nexus9000 Port-channel

Inactive IPsec tunnel not coming up for LAN to LAN traffic

Re: Inactive IPsec tunnel not coming up for LAN to LAN traffic

Re: Inactive IPsec tunnel not coming up for LAN to LAN traffic

Re: Inactive IPsec tunnel not coming up for LAN to LAN traffic