About irbk

irbk · 01-09-2025

I've got a pair of hosted Cisco ASA 5525's in an HA pair that are being replaced. It's a bit of a weird situation because the hosting company owns the devices but they don't manage the devices. Because they don't manage the devices, they won't perf...

irbk · 05-02-2024

I'm doing some spanning-tree training and I'm wondering if it's possible, in the packet tracer software, to set the MAC address of a 3650 switch. I don't want to just set 1 interface, because I want to control (not via priority but via MAC address) ...

irbk · 02-08-2024

Hello Experts!I'm setting up a new vpn tunnel to a partner. ASA on our side Palo Alto on theirs. When the tunnel connects, it seems to run fine. However, should the tunnel go down, it will not come back up unless they initiate the traffic. They c...

irbk · 11-20-2023

I would like to setup sort of a single source of truth for time on the network. Our WatchGuard box at HQ already has pool.ntp configured on it and our servers are then getting NTP data from the WatchGuard. I'd like to also have the ASA 5525, who is...

irbk · 11-06-2023

We have a "critical security finding" even though our ASA SSLVPN web portal login page is shutdown on our ASA 5525. The "test" that is done is an http get is sent to https://<external IP>:443/+CSCOE+/logon.html and a response is returned. The respo...

irbk · 01-10-2025

Yeah, I think I'm just going to have to pay them to move the cable to the secondary and wipe them separately.

irbk · 01-09-2025

Appreciate the attempted assist but I get a [FAILED] error when I try that.ASA-Primary# failover exec standby write eraseErase configuration in flash memory? [confirm][FAILED]

irbk · 01-09-2025

Which would be a reasonable approach, but I actually only have access to 1 of the devices now. Just sort of a single patch into the primary device. Hosting company would probably charge me to move the cable to the secondary device too. So stupid t...

irbk · 05-02-2024

True, I could just use the first few bits of the MAC and that's likely what I'll do since I can't adjust the MAC within packet tracer. Just IMHO but its still easier to see that AAAA is lower than BBBB or CCCC than it is to see that 0006 is lower th...

irbk · 05-02-2024

Yes, I'm aware. The point of the lesson is that, with all switches having the same priority, the MAC address is the tie-breaker for determining the lowest bridge ID.

Member Since	‎03-10-2023 08:06 AM
Date Last Visited	‎05-12-2025 11:12 PM
Posts	87
Total Helpful Votes Received	24

User Statistics

User Activity

Factory Reset HA pair of Cisco ASAs

Setting a MAC address for spanning tree training

ASA to Palo Alto VPN

NTP through a VPN tunnel

Prevent the ASA from displaying the SSLVPN portal page, at all.

Re: Factory Reset HA pair of Cisco ASAs

Re: Factory Reset HA pair of Cisco ASAs

Re: Factory Reset HA pair of Cisco ASAs

Re: Setting a MAC address for spanning tree training

Re: Setting a MAC address for spanning tree training