About AminK

Dot1X User Authentication with MSCHAPv2 · 05-28-2025

Hello Community.We want to start using Dot1X authentication in our company. All computers are joined to Domain and Active directory is integrated with ISE. Everything is OK on this side. So The initial plan was to use PEAP or TEAP with MSCHAPv2 to ac...

AminK · 04-30-2025

Hello Community.I have a very odd problem in my network. There is a N5K-C56128P that I have several private-vlans on it. Now one of these Pimary-VLANS has 269 Community-VLANS on it that are working properly and see their gateway on firewall which is ...

AminK · 12-14-2024

Hi.According to Cisco website and articles, Cisco Firewall Migration Tool is free. But when I try to run it, it asks for my CCO credentials and after I enter them, It gives me error.Now according to this discussion: https://community.cisco.com/t5/ne...

AminK · 12-10-2024

Hi I have two ASA 5545 in a cluster. the software version is 9.14(2)15. I can't access my firewall with ASDM due to having maximum http sessions. When I run #debug menu npshim -w, I see 5 https connections with CLOSE_WAIT state. There is no session i...

AminK · 05-03-2025

Well I had another Primary VLAN with 20 Private VLANs associated with it. I created a new one (Which would be 21) there and it worked perfectly. It is really interesting because all the other things are same in my scenario.

AminK · 05-02-2025

Yeah when I do that they can ping each other like any other community VLAN members. All things work as expected. The problem happens when traffic wants to go on promiscuous port. As a matter of fact I tried with another new vlan, I did all associatio...

AminK · 05-02-2025

Thank you for your response. As a matter of fact yes, I doubted that maybe my firewall is acting up. So I attached a spare router to my Nexus and applied the same config and mappings for promiscuous port under it. Only difference was that I did less ...

AminK · 05-01-2025

Hello and thank you for your response.Yes there is indeed mapping under promiscuous port and also the new vlan is associated with primary vlan in switch settings.Our first guess was there is a limitation for number of private vlans that can be create...

AminK · 03-11-2025

You need a Firepower Service contract associated to your cisco account. So technically if you don't have one, you can't use migration tool. It is not free.

Member Since	‎12-09-2024 11:29 PM
Date Last Visited	‎05-28-2025 08:40 PM
Posts	12
Total Helpful Votes Received	2

User Statistics

User Activity

Dot1X User Authentication with MSCHAPv2

Private VLAN Promiscuous Port Problem

Secure Firewall Migration Tool login error

ASA CLOSE_WAIT for ASDM Solution not working

Re: Private VLAN Promiscuous Port Problem

Re: Private VLAN Promiscuous Port Problem

Re: Private VLAN Promiscuous Port Problem

Re: Private VLAN Promiscuous Port Problem

Re: Secure Firewall Migration Tool login error