Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Maxim Zimovets
Stats
Member since
03-16-2004
63
Posts
8
Helpful
3
Solutions
08-24-2016
10:53 AM
Hi Sandeep!
I clearly understand, that I'm able to transfer license only for the same model. This is not a problem at all, because we have spare unit from the same pool of controllers.
Problem is - whether we really need to have valid Smart-NET contract to request license re-hosting?
Regards,
Maxim
... View more
05-20-2014
04:08 AM
I don't mix terms. I just presented proposed configuration for my setup. If you take a look into configuration guide You will probable see that in transparent mode ASA can only have only two segments - inside and outside. In the same documentation for ASA clustering all examples also have only two segments. I did not catch any restrictions why not to have DMZ. That was why I went to the support form and asked. If You are sure, that with ASA cluster we can have as many DMZs as we need, that will very good. Please, confirm it. With best regards
... View more
05-20-2014
01:13 AM
Hello everyone! It's time for us to move from old well known PIX-525. Right now main their main duty is to firewall between several networks. It looks like we can take a pair of ASA-5585 and replace failover pair of PIXes. I checked the documentation and it understood we could use Routed Firewall Mode with Equal-Cost Multi-Path Routing. But in the documentation we usually see only two segments - inside and outside (it's perfectly enough for DC). But in my case we have several DMZs on our PIX. Can we create DMZs in ASA cluster? Would it be supported configuration? With best regards, Maxim
... View more
- Tags:
- ASA cluster
Labels:
Created by
Maxim Zimovets
in Network Security
in Network Security
01-16-2014
06:46 AM
01-16-2014
06:46 AM
Small update to the previous post. Cisco issued update to ASDM - 7.1(5)100. But the update did not bring expected results. I'm not able to launch ASDM application, even with workaraound proposed in bug CSCum46193. I was only able to launch ASDM via browser. Maxim
... View more
Created by
Maxim Zimovets
in Network Security
in Network Security
01-16-2014
06:17 AM
01-16-2014
06:17 AM
Hello, everybody! As you all probably know on January 14th 2014 Oracle issued CPU with new java 7u51. After installing it I'm not able to loging to ASA via ASDM, not int to IPS via IDM. I always have the same error: On the java console I see a lot of exception devoted to security.DeployManifestChecker. It looks like all applets suffer from one problem - new security features from Oracle ( https://blogs.oracle.com/java-platform-group/entry/new_security_requirements_for_rias ). I can also say that all Cisco ASA plugins for SSLVPN don't work too. I use ASDM version 7.1.4 on my devices. Downgrade to Java 7u45 resolved the problem. Is it only my problem? Does anyone expirience the same proble with new Java? With best regards, Maxim
... View more
Created by
Maxim Zimovets
in Other Security Subjects
in Other Security Subjects
10-20-2012
10:50 AM
10-20-2012
10:50 AM
Hello! Recently Cisco released a new update for its MARS product - 6.1.6(3511). I tried to update my mars with the version, but it failed: [Error][check_dependency/547]: minimal allowed version(6.1.5.3508.42) > current version(6.1.5.3508.41). [pnadmin]$ version 6.1.5 (3508) 41 Yes, my MARS had been successfully updated to 6.1.5(3508). And I coudn't find anything new related to version 6.1.5(3508)42 on the cisco's site. What should I do now? Where can I get version 6.1.5(3508)42 to update to 6.1.6? What should I do to perform successful update to 6.1.6? With hope to resolve the issue. Maxim
... View more
- Tags:
- mars
- mars_6.1.6
Labels:
Created by
Maxim Zimovets
in Network Access Control
in Network Access Control
02-17-2012
04:56 AM
02-17-2012
04:56 AM
Hello! We have rather old Cisco ACE SE (1112). It works on ACS version 3.3.3.11. I know it is old. But it works for us. We needed to delete a host (length of host name is less than 32 characters). And it gave us following result: Failed to edit XXXX. Reason: The Host no longer exists. After that we successfully created another host with different name and the same address. And now we have 2 hosts. How can I delete first one? With best regards Maxim
... View more
- Tags:
- acs_se_33
Labels:
05-09-2011
11:36 AM
Dear jiangu! Please take a look at following url - http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9a87.shtml Suprisingly this document will show you VPN filter ASA's feature very clear. And VPN filter is most suitable feature for your need, IMHO. Best regards
... View more
05-05-2011
09:40 AM
More correct URL http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ike.html#wp1059912 http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ezvpn505.html#wp1017851
... View more
05-05-2011
09:14 AM
Hello, Jesper! Well, I can suggest you couple of solutions. First You can install some other device in front of ASA5510 and set up NAT on it. In such a case you will forse both your ASA to use NAT-T. I think it's not practical. Second solution is as follows. In the old time of Altiga VPN-concentrator it was possible to use IPSec over TCP. Now ASA supports this mode as well. Please, look through following URL - http://www.cisco.com/en/US/partner/docs/security/asa/asa80/configuration/guide/ike.html#wp1059912 and http://www.cisco.com/en/US/partner/docs/security/asa/asa80/configuration/guide/ezvpn505.html#wp1017851 I hope this will help you. With best regards Maxim
... View more
Created by
Maxim Zimovets
in Network Management
in Network Management
03-27-2011
11:13 PM
03-27-2011
11:13 PM
Hello, Mohammad! Thank you afain for the clear answer. Best regards Maxim
... View more
Created by
Maxim Zimovets
in Network Management
in Network Management
03-27-2011
12:09 PM
03-27-2011
12:09 PM
Hello, Mohammad! Thank you for the clear and straight forward answer. I have just only one question left - what about 3 IOS images (SRB5a, SRD2a and SRE0a) suggested by software advisor? Were these images specially built with this feature? With hope to hear the same type of answer. With best regards Maxim
... View more
Created by
Maxim Zimovets
in Network Management
in Network Management
03-20-2011
11:31 AM
03-20-2011
11:31 AM
Hello, Mohammad! Please, pay attention to the atteched screen shot. All advised versions hava a letter a in their names. Is it possible that Egress Netflow neede special IOS version? With best regards
... View more
Created by
Maxim Zimovets
in Network Management
in Network Management
03-20-2011
11:12 AM
03-20-2011
11:12 AM
Hello, Mohammad! Thank you for your answer. Unfortunately right now I'm not able to show output from "show version". But I checked Software Adviser as you suggested.And it showed exactly the same as Feature Navigator did. I attached screen shot with Software Advisor loaded. And SRD5 is not listed in the list. Should I move to SDR2a or perhaps to SRE train? With best regards Maxim
... View more
03-18-2011
05:10 AM
Hello! I have a cisco 7609 router with RSP- 720 and installed Advanced IP services 12.2(33)SRD5 IOS. We tried to set up Egress Netflow Accounting on the box. And we failed.We can only see traffic on its ingress. I checked Cisco Feature Navigator for mentioned IOS and indeed Egress Netflow was not mentioned for this particullar IOS build. But it was mentioned for SRD2a. I' get used to see all the features from previous version be incorporated in to next version. Documentation about the feature devoted for IOS at all. I was not able to find any documentation for particular 7600 platform. Can anyone shed some light on what IOS version really supports Egress Netflow Accounting on 7609/RSP-720? Is the feature supported at all on the platform? With best regards Maxim
... View more
Labels:
08-24-2016
Hi Sandeep! I clearly understand, that I'm able to transfer license only
for the same model. This is...
05-20-2014
I don't mix terms. I just presented proposed configuration for my
setup.If you take a look into conf...
05-20-2014
Hello everyone!It's time for us to move from old well known PIX-525.
Right now main their main duty ...
01-16-2014
Small update to the previous post.Cisco issued update to ASDM -
7.1(5)100. But the update did not br...
01-16-2014
Hello, everybody!As you all probably know on January 14th 2014 Oracle
issued CPU with new java 7u51....
10-20-2012
Hello!Recently Cisco released a new update for its MARS product -
6.1.6(3511). I tried to update my ...
02-17-2012
Hello!We have rather old Cisco ACE SE (1112). It works on ACS version
3.3.3.11. I know it is old. Bu...
Created by
Maxim Zimovets
in VPN
05-09-2011
05-09-2011
Dear jiangu!Please take a look at following url -
http://www.cisco.com/en/US/products/hw/vpndevc/ps2...
05-05-2011
More correct
URLhttp://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/ike.html#wp10...
05-05-2011
Hello, Jesper!Well, I can suggest you couple of solutions.First You can
install some other device in...
03-27-2011
Hello, Mohammad!Thank you for the clear and straight forward answer.I
have just only one question le...
03-20-2011
Hello, Mohammad!Please, pay attention to the atteched screen shot. All
advised versions hava a lette...
03-20-2011
Hello, Mohammad!Thank you for your answer. Unfortunately right now I'm
not able to show output from ...
Public Statistics
| Date Registered | 03-16-2004 08:33 PM |
| Date Last Visited | 01-17-2020 12:04 AM |
| Total Messages Posted | 63 |
| Total Helpful Votes Received | 8 |
