About chris-doro

chris-doro · 05-23-2024

I've setup a VPN site2site-tunnel with the ASDM wizard.But I'm still not sure aboute some parameters.In almost every Site2site tunnel I've configured I had the option for 2 timers: Phase 1 (which is usually the longer) and Phase2.But on the ASA there...

chris-doro · 03-15-2024

Trying to access device in dmz from device connected to other interface sec on ASA5545.Both interfaces are connected.Ok, we have some static routes out from the sec interface, but the dmz and sec are connected, so I do not understand, why the logs sh...

chris-doro · 01-12-2024

I've a Cisco Firepower 2110 which is not used at the moment.I just try to bring it up for learning purposes.I did factory-reset via console-cable and added new management-ip-address (mgmt-port).Changed the admin password.I can connect with SSH, but h...

chris-doro · 08-08-2023

I am wondering if it is a bug or feature?We've a WLC5520-HA-pair (software version 8.10.185.0), but I can only access the active WLC directly.I know I can only access the standby-WLC through SSH, but I need to ssh from router, which has one direct co...

chris-doro · 07-23-2023

We've setup a Synology with Adaptive Load Balancing on the Heartbeat-interfaces (I was told LACP is not possible for the heartbeat).We have LACP on the productive interfaces of the Synology and Cisco-switches C9300.But ALB causes permanent MAC-flappi...

chris-doro · 03-16-2024

Thanks for reply.Shame on me.The problem was: not the ASA is the default-gw for "sec" instead a router connected to this subnet.And there is static route on the server which route the inside subnet back to ASA.So I also had to add a static route on s...

chris-doro · 01-12-2024

"install security-pack version 6.2.2-81 force" fails...FTD1 /firmware/auto-install # show detailFirmware Auto-Install:Package-Vers: 6.2.2-81Oper State: ScheduledInstallation Time: 2024-01-12T14:26:55.576Upgrade State: Failed To Install ApplicationUp...

chris-doro · 01-12-2024

FTD1 /fabric-interconnect # show detailFire Power:ID: AProduct Name: Cisco FPR 2110PID: FPR-2110VID: V01Vendor: Cisco Systems, Inc.Serial (SN): JMX21xxxxOOB IP Addr: 192.168.101.241OOB Netmask: 255.255.255.0OOB Gateway: 192.168.101.254OOB Gateway Use...

chris-doro · 01-12-2024

Thanks, but this does not help. Because I've followed these steps, but they do not explain, why I get forbidden for https://.And they do not explain why I get "application not installed, when I see that it exists".And this happens on both firepowers ...

chris-doro · 07-17-2023

Hello, how did you do it? I am trying with Rocky 8.8 (which is more or less like RHEL 8), but ssh with ISE-radius is not working.It's ok when I just do a radtest from Linux-server, but not with real ssh connection (wrong user name or password).It see...

Member Since	‎03-02-2023 05:28 AM
Date Last Visited	‎06-11-2024 01:03 AM
Posts	14
Total Helpful Votes Received	4

User Statistics

User Activity

Cisco ASA ASA5545 Site2site IPSEC Lifetime Phase 1 and Phase 2

ASA5545 no access from other connected if to dmz

Firepower 2110 ftd not installed? https:// forbidden?

WLC 5520 no SSH to standby WLC?

Synology adaptive load balancing - mac flapping

Re: ASA5545 no access from other connected if to dmz

Re: Firepower 2110 basic setup

Re: Firepower 2110 ftd not installed? https:// forbidden?

Re: Firepower 2110 basic setup

Re: Authenticate Redhat Linux ssh login using radius on Cisco ISE