About Aydin Ehtibarov

Aydin Ehtibarov · 01-30-2025

My question is: does esential SDWAN license support IPsec for Hub and Spoke IPsec VPN deployment.BoQ is as below.L-DNA-TIER-ADDYesCisco DNA Subscription License for Routing and SD-WAN---70.00 2 0.00 C1100-8P-DNA-PFYesISR1100 8-Port Platform Selection...

Aydin Ehtibarov · 04-02-2024

Dear community I would like to know is there a method to use advantage license for essential sessions in case if I have a spare Advantage licenses but I am out of compliance on essential licenses.

Aydin Ehtibarov · 07-19-2023

Dear community,we are facing the issue explained below. packets are not being encapsulated, encrypted to the IPSec tunnel on following SA10.118.32.0 255.255.240.0 10.100.0.0 255.255.255.0ipsec sa clearing does not fix the problem.asa version is ASA 9...

Aydin Ehtibarov · 10-06-2022

Dear community We have necessary options configured on DHCP so AP connected to network automatically discovers WLC and join.By default it becomes part of default AP group and all SSIDs are active on it.Is there a configuration to switch Access-point ...

Aydin Ehtibarov · 10-04-2022

Hi, noticed following logs on the Cisco 1832i access-point. Is it something important?Oct 4 07:36:08 kernel: [*10/04/2022 07:36:08.9453] wmi_unified_cmd_send : Cookie alloc Failed for cmd_id : 9001, WMI handle = ed4a0000Oct 4 07:36:09 kernel: [*10/04...

Aydin Ehtibarov · 01-30-2025

Could you please clarify following. If İ would like to use SD-WAN hub and spoke IPSEC VPN Will esential license support it ?

Aydin Ehtibarov · 07-19-2023

It solved the issue. Thank you for your valuable support. Could you please share with us, what conditions lead to this result and how we can prevent this problem from happening again.

Aydin Ehtibarov · 07-19-2023

here it is FW1# show asp table vpn-context detailVPN CTX = 0x0910057CPeer IP = 10.21.48.0Pointer = 0xA20B97A0State = UPFlags = DECR+ESP+PRESERVESA = 0x2B1D5E89SPI = 0xA7E77DF5Group = 0Pkts = 0Bad Pkts = 0Bad SPI = 0Spoof = 0Bad Crypto = 0Rekey Pkt =...

Aydin Ehtibarov · 07-19-2023

seq number 2 is about this i think:crypto map crypto_map_outside_1 2 match address vpn_azersuncrypto map crypto_map_outside_1 2 set pfs group14crypto map crypto_map_outside_1 2 set peer 185.230.199.240crypto map crypto_map_outside_1 2 set ikev2 ipsec...

Aydin Ehtibarov · 04-18-2023

Have similar issue. but instead of object group we have wildcard for source.Connection all of a sudden stopped to work. ACL is like below and traffic coming from 10.0.249.8 to 10.3.12.1 does not hit the ACE 20. Extended IP access list vlan301in5 perm...

Member Since	‎10-19-2012 12:27 AM
Date Last Visited	‎02-13-2025 10:15 PM
Posts	42
Total Helpful Votes Received	23

User Statistics

User Activity

Does SDWAN esential license DNA-P-T1-E-5Y support IPSec

Cisco ISE version 3.2 use advantage license for essential session

ASA 9.2 ipsec pkts encaps is 0

Change AP administrative mode to disabled right after First WLC join

cisco 1832i AP log:FW stats failed and AP is in fair condition

Re: SD-WAN Licensing

Re: ASA 9.2 ipsec pkts encaps is 0

Re: ASA 9.2 ipsec pkts encaps is 0

Re: ASA 9.2 ipsec pkts encaps is 0

Re: 9500 ACL Object-Groups not working