Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About yuri_slobodyanyuk
12-24-2018
Stats
Member since
03-15-2007
34
Posts
17
Helpful
0
Solutions
Created by
yuri_slobodyany
in Unified Computing System Discussions
in Unified Computing System Discussions
10-26-2017
03:32 AM
10-26-2017
03:32 AM
After some digging here is the new location for the detailed RBAC Privileges list :
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucsm_privileges/CiscoUCSManager_Privileges_release21.html
... View more
Created by
yuri_slobodyany
in Firewalls
04-23-2012
11:06 PM
04-23-2012
11:06 PM
Thanks a lot Yuri
... View more
Created by
yuri_slobodyany
in Firewalls
04-23-2012
04:42 AM
04-23-2012
04:42 AM
Good day everyone, I know it has been discussed before but still after reading cisco.com and Netpro resources I came up confused about this, so would much appreciate clarification,if possible with references . Issue is simple - ASA5505 , client wants to have 25 AnyConnect users to be able to connect simultaneously (no need specifically in clientless, network mode Anyconnect will do). My question is - will L-ASA-AC-E-5505= license provide for this ? if not, then which one instead of this or in addition (Security Plus, L-ASA-SSL-25=, something else) ? My problem understanding the documentation is that many sources say that cumulative number of connected VPN clients cannot pass [and here definitions vary] - " maximum concurrent IPsec session count shown in the chart [here ASA5505 is 25]. " or " number of licensed sessions on the device" [how do I see this in ASA ?] ... To simplify my question I see following possible combinations, which one will provide for 25 AnyConnect client users ? Base License + L-ASA-AC-E-5505= Base License + L-ASA-SSL-25= Plus license + L-ASA-AC-E-5505= Thanks Yuri PS Some references I consulted so far : http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e39.html https://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e36.html http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/intro_license.html#wp1971019 https://supportforums.cisco.com/message/3569899#3569899 Sh ver of ASA: System image file is "disk0:/asa832-k8.bin" Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz Internal ATA Compact Flash, 128MB Licensed features for this platform: Maximum Physical Interfaces : 8 perpetual VLANs : 3 DMZ Restricted Dual ISPs : Disabled perpetual VLAN Trunk Ports : 0 perpetual Inside Hosts : 10 perpetual Failover : Disabled perpetual VPN-DES : Enabled perpetual VPN-3DES-AES : Enabled perpetual SSL VPN Peers : 2 perpetual Total VPN Peers : 10 perpetual Shared License : Disabled perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual AnyConnect Essentials : Enabled perpetual Advanced Endpoint Assessment : Disabled perpetual UC Phone Proxy Sessions : 2 perpetual Total UC Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Intercompany Media Engine : Disabled perpetual This platform has a Base license.
... View more
Labels:
Created by
yuri_slobodyany
in Security Videos
10-01-2011
11:19 AM
10-01-2011
11:19 AM
Episode 2 of the IPS series - I show how to manage IPS users, all via CLI , no GUI involved yet.
... View more
Labels:
Created by
yuri_slobodyany
in Security Videos
09-17-2011
10:27 AM
09-17-2011
10:27 AM
Hi everyone, I decided to do a series of clips to introduce those who are new to IPS sensors to what they look and feel like to configure. This is the first one - initial config of connectivity via console .
... View more
Labels:
Created by
yuri_slobodyany
in Networking Videos
09-16-2011
11:14 PM
09-16-2011
11:14 PM
Hi everyone, just wanted to draw your attention to the great future of the IOS that is many times overlooked. http://www.cisco.com/en/US/docs/ios/12_3t/fun/command/reference/cfrgt_01.html#wp1094316 This video will show you how to enable archiving running configuration locally on IOS router for rollback or disaster recovery.
... View more
Labels:
Created by
yuri_slobodyany
in Security Documents
08-18-2011
12:13 AM
08-18-2011
12:13 AM
Great videos, thanks. When doing config videos can you please clarify the IPS <-> Layer 2 interaction with the network topology, namely - the difference, examples, reasoning behind inline pairs/vlan inline pairs/ vlan groups ? Thanks in advance Yuri
... View more
Created by
yuri_slobodyany
in Security Videos
08-06-2011
08:57 AM
08-06-2011
08:57 AM
DVTI for remote access with hairpinning (tunneling all the traffic via the router) , configuration walkthrough. http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/prod_white_paper0900aecd803645b5.html
... View more
- Tags:
- hairpinning
- vpn
Labels:
Created by
yuri_slobodyany
in Security Videos
07-20-2011
08:32 AM
07-20-2011
08:32 AM
In this video you can follow the steps to configure the often overlooked but in my opinion a-must feature of encrypting pre-shared keys stored in IOS configuration. http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_encrypt_preshare.pdf
... View more
Labels:
01-18-2011
09:59 PM
You are right . I would even go further and say if someone says "Hey I am a CCIE" he/she deserves a more attentive look in what she/she knows and does, but doesnt automatically mean she/he knows the stuff (my personal biased view as I seen CCIE with numbers that still couldn't get BGP right as it was not by CCIE workbooks template ) THe badge system as I said was a consolatory thing I devised in place to sweeten a bit my miserable failure on CCIE Security in Brussels 2 months ago
... View more
Created by
yuri_slobodyany
in Security Blogs
01-18-2011
12:50 PM
01-18-2011
12:50 PM
Great article Marcin, thanks and especially for references. IF only Ciso VTI could be vendor-independent and work with say Checkopint VTI and vice versa reliably and not as a lab exercise for geeks ... Yuri
... View more
01-18-2011
11:17 AM
I beg to differ (as a consolatory ROI for some 1700 bucks) - CCIE candidate should be (highly?) regarded as someone who actually took the lab and failed. The next step in recognition would be to issue some badge "I was in DIegem" ,"Been There,Done that,Failed that" . All the rest , studying last 10 years for the CCIE but mostly procrastinating, should console themselves with the title of certified CCIE wannabe
... View more
Created by
yuri_slobodyany
in VPN and AnyConnect
01-18-2011
10:53 AM
01-18-2011
10:53 AM
Thanks Marcin , tomorrow I will eliminate NAT-T as a possible cause by trying to connect from device not behind the NAT. VPN client just says in logs "peer stopped responding" . ON ACL I used to allow IPSEC in ZBF class-maps I see hits on port 500 but nothing on 4500 . If my test tomorrow brings the same result I will post here the show run, as this is my 1st Easy VPn with ZBF , it is possible I missed something in configs. Yuri
... View more
Created by
yuri_slobodyany
in VPN and AnyConnect
01-18-2011
10:43 AM
01-18-2011
10:43 AM
FOr sure you have to do something : 1) Use the command Collin brought - sysopt , this basically bypasses any ACL check of decrypted traffic on WAN interface; THat is anything coming via VPN tunnel is allowed. Just one command and everything magically works; 2) Account for the decrypted traffic in existing ACL on the outside interface. In this case yes , you would see interesting traffic from remote LAN on external interface; 3) recommended by cisco way - use sysopt to exempt decrypted traffic from interface-level ACL check but use vpn filter command under group policy for specific VPN tunnel to apply ACL ONLY to decrypted traffic. Works just fine , only a bit tricky to understand what should be source and destination in the ACL (logic reversed); Cheers Yuri
... View more
Created by
yuri_slobodyany
in VPN and AnyConnect
01-18-2011
01:43 AM
01-18-2011
01:43 AM
Hi everyone, I stumbled upon the following issue with Easy VPN client and would be glad to hear your advice what it could be. Cisco 1941 , trying to configure Easy VPN using DVTI,, also enabled on the router is zone-based firewall, site-to-site tunnels work fine. My guess it is somehow nat traversal does not kick in , and client keeps on talking to port 500 instead of switching to 4500. debug cry isakmp is in attached file. What intersting I guess is this part: *Jan 18 09:21:27.075: ISAKMP:(1024):Input = IKE_MESG_FROM_AAA, PRESHARED_KEY_REPLY *Jan 18 09:21:27.075: ISAKMP:(1024):Old State = IKE_R_AM_AAA_AWAIT New State = IKE_R_AM2 *Jan 18 09:21:27.707: ISAKMP:(0):purging SA., sa=278D7640, delme=278D7640 *Jan 18 09:21:32.159: ISAKMP (1024): received packet from 194.190.3.44 dport 500 sport 4861 Global (R) AG_INIT_EXCH *Jan 18 09:21:32.159: ISAKMP:(1024): phase 1 packet is a duplicate of a previous packet. *Jan 18 09:21:32.159: ISAKMP:(1024): retransmitting due to retransmit phase 1 *Jan 18 09:21:32.659: ISAKMP:(1024): retransmitting phase 1 AG_INIT_EXCH... When I configure DVTI on the routers where it works all goes the same way until this step , then I see: Jan 18 07:52:15.025: ISAKMP:(1008): sending packet to 194.190.3.44 my_port 500 peer_port 4563 (R) AG_INIT_EXCH Jan 18 07:52:15.025: ISAKMP:(1008):Input = IKE_MESG_FROM_AAA, PRESHARED_KEY_REPLY Jan 18 07:52:15.025: ISAKMP:(1008):Old State = IKE_R_AM_AAA_AWAIT New State = IKE_R_AM2 Jan 18 07:52:15.033: IKE Dispatcher: Unexpected destination port 4500. Dropping packet! Jan 18 07:52:15.033: ISAKMP (0:1008): received packet from 194.190.3.44 dport 4500 sport 4564 Global (R) AG_INIT_EXCH Jan 18 07:52:15.033: ISAKMP:(1008): processing HASH payload. message ID = 0 Jan 18 07:52:15.033: ISAKMP:(1008): processing NOTIFY INITIAL_CONTACT protocol 1 spi 0, message ID = 0, sa = 66664EAC Thanks Yuri
... View more
Labels:
Created by
yuri_slobodyanyuk
in Unified Computing System Discussions
10-26-2017
10-26-2017
After some digging here is the new location for the detailed RBAC
Privileges list :
https://www.cisc...
04-23-2012
Good day everyone,I know it has been discussed before but still after
reading cisco.com and Netpro r...
Created by
yuri_slobodyanyuk
in Security Videos
10-01-2011
10-01-2011
LITHIUM.OoyalaPlayer.addVideo('https:\/\/player.ooyala.com\/static\/v4\/production\/',
'lia-vid-1mYT...
Created by
yuri_slobodyanyuk
in Security Videos
09-17-2011
09-17-2011
LITHIUM.OoyalaPlayer.addVideo('https:\/\/player.ooyala.com\/static\/v4\/production\/',
'lia-vid-FyZj...
Created by
yuri_slobodyanyuk
in Networking Videos
09-16-2011
09-16-2011
LITHIUM.OoyalaPlayer.addVideo('https:\/\/player.ooyala.com\/static\/v4\/production\/',
'lia-vid-Vta2...
Created by
yuri_slobodyanyuk
in Security Documents
08-18-2011
08-18-2011
Great videos, thanks.When doing config videos can you please clarify the
IPS <-> Layer 2 interaction...
08-06-2011
This video is currently being processed. Please try again in a few
minutes.(view in My Videos)DVTI f...
Created by
yuri_slobodyanyuk
in Security Videos
07-20-2011
07-20-2011
LITHIUM.OoyalaPlayer.addVideo('https:\/\/player.ooyala.com\/static\/v4\/production\/',
'lia-vid-gxbm...
01-18-2011
You are right.I would even go further and say if someone says "Hey I am
a CCIE" he/she deserves a mo...
Created by
yuri_slobodyanyuk
in Security Blogs
01-18-2011
01-18-2011
Great article Marcin, thanks and especially for references.IF only Ciso
VTI could be vendor-independ...
01-18-2011
I beg to differ (as a consolatory ROI for some 1700 bucks) - CCIE
candidate should be (highly?) rega...
Created by
yuri_slobodyanyuk
in VPN and AnyConnect
01-18-2011
01-18-2011
Thanks Marcin ,tomorrow I will eliminate NAT-T as a possible cause by
trying to connect from device ...
Created by
yuri_slobodyanyuk
in VPN and AnyConnect
01-18-2011
01-18-2011
FOr sure you have to do something :1) Use the command Collin brought -
sysopt , this basically bypas...
Created by
yuri_slobodyanyuk
in VPN and AnyConnect
01-18-2011
01-18-2011
Hi everyone,I stumbled upon the following issue with Easy VPN client and
would be glad to hear your ...
Public Statistics
| Date Registered | 03-15-2007 12:53 PM |
| Date Last Visited | 12-24-2018 03:22 AM |
| Total Messages Posted | 34 |
| Total Helpful Votes Received | 17 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 8 | |
| 5 | |
| 10 | |
| 10 | |
| 5 |
Helpful Votes From
