About johnchrapkowski

johnchrapkowski · 12-22-2023

Me and my coworker have been working on this problem all day. We have a firepower that is our internet connection and is connected to two internal switches. A cisco 2960LSM and a juniper 4200. There is a Juniper srx345 firewall connected to the ju...

johnchrapkowski · 12-21-2023

Full disclosure, I am a Juniper guy But I've inherited a cisco 1140 firepower ASA firewall appliance. All the docs I'm reading seem to indicate I should be able to ssh in (I can) and then run enable to be able to make config changes(i can't). Ther...

johnchrapkowski · 12-20-2023

We've got a C2960 LSM switch that won't allow traffic that has the 'do not fragment' flag (specifically ssh) to one network. I can ping/traceroute fine, but not ssh. It's a LSM so it doesn'thave command line, so adjusting MSS isn't possible as far ...

johnchrapkowski · 12-19-2023

Working with my colo provider, they’re telling me my firepower is dropping packets that are larger than 1362 bytes. They showed me some juniper logs that seem to validate this. Also if I ping with packets larger, the ping fails but if I do smaller pa...

johnchrapkowski · 11-29-2023

Anyone know why I can't select my other VLANs for this routing ( I have 3)? Also I don't see the routes when I run show ip route after adding them, applying and saving! What's up with that?

johnchrapkowski · 12-22-2023

Thank you for responding. I was trying to be clear in my description, but it looks like I failed.if you conneced to cisco switch IP address same as Juniper switch ? No, they each have their own uniqe IP address give some example - what is end device...

johnchrapkowski · 12-21-2023

Ah that makes sense! Again, all the help is very much appreciated

johnchrapkowski · 12-21-2023

OK thanks for the help, it's really appreciated! Are these devices targeted to the more 'basic' user, and that's why some of the functionality is not able to be configured? For example, I need to set mss to a specific value and the gui doesn't off...

johnchrapkowski · 12-21-2023

I hope this is what you mean by software image, apologies for not being up to speed on the terminology: > show version-------------------[ firepower ]--------------------Model : Cisco Firepower 1140 Threat Defense (78) Version 7.0.1 (Build 84)UUID : ...

johnchrapkowski · 12-21-2023

Thank you so much, this information is very helpful. I think I have full access as I log in with admin and a password via both ssh and the GUI and don't have anything I am prevented from doing that is obvious. Is there a CLI command that will show ...

Member Since	‎12-09-2022 01:37 PM
Date Last Visited	‎12-31-2023 07:57 AM
Posts	29
Total Helpful Votes Received	3

User Statistics

User Activity

Firepwoer 1140 won't forward IP, but wiull forward icmp

Firepower 1140 does not have enable mode

Cisco C2960LSM switc not forwarding packets with "Do not fragment' set

Firepower 1140 is dropping packets bigger than 1362 bytes

C2960L-SM routing

Re: Firepwoer 1140 won't forward IP, but wiull forward icmp

Re: Firepower 1140 does not have enable mode

Re: Firepower 1140 does not have enable mode

Re: Firepower 1140 does not have enable mode

Re: Firepower 1140 does not have enable mode