About Tyson Joachims

Tyson Joachims · 06-21-2023

In IOS-XE, there is a command that allows you to encrypt the TACACS+ and RADIUS keys to Type 6 so you don't get the annoying alert about using deprecated password types. When I worked on a C1000 today (which is not using IOS-XE), I did not see the co...

Tyson Joachims · 06-26-2022

Just recently swapped out a C3200 with a C8500. The C3200 had an Aux port that we could use reverse telnet to access the modem which would dial another modem at a remote location and enter the router there as a backup connection (if the VPN to that r...

Tyson Joachims · 09-25-2021

===Goal===Port forward inbound HTTPS requests on TCP-4434 on the outside interface and translate it to TCP-443 as it is sent to a webserver===Issue===When trying to reach the web server using https://[outside IP address]:4434 in Firefox, I am automat...

Tyson Joachims · 06-07-2021

Goal: Filter AnyConnect VPN connections on Firepower 2120 (managed by FMC) in a similar way that ASA's use DAP. Users authenticate to a Microsoft Network Policy Server (NPS). Problem: I've found some admins talk about sending dynamic ACLs via the RAD...

Tyson Joachims · 02-23-2020

Hardware: ASA 5510Version: 9.1(7)25AnyConnect File: anyconnect-win-4.7.01076-webdeploy-k9.pkg I've read many posts and watched multiple videos but for some reason I cannot get the web deploy page to show up that allows a user to authenticate and then...

Tyson Joachims · 02-01-2024

Romel, hopefully you have higher end switches available. The only solution I see is to: Run the commands from my initial post on something like a Catalyst 9300 switch (possibly any switch running IOS-XE)Type the RADIUS or TACAC+ configuration into th...

Tyson Joachims · 06-28-2023

That is not how that command works. When you specify the number 6 after the word "key", you must enter a password that is already encrypted using the type 6 encryption. C3560-CX-CORE(config-radius-server)#key ? 0 Specifies an UNENCRYPTED key wi...

Tyson Joachims · 06-26-2022

I've looked at that page but it references "A terminal server is a router with multiple, low speed, asynchronous ports that are connected to other serial devices" but the 8500 has none of these (from what I can tell). The weird parts is the fact that...

Tyson Joachims · 09-25-2021

@balaji.bandi I changed the port to TCP 4434 instead of 443 and tested to verify I could reach it via Firefox. I was using LibreNMS on a Ubuntu server and just changed to using a Catalyst switch since it would be easier to change ports around. Here i...

Tyson Joachims · 06-09-2021

I was able to find a work around and thought this could come in handy for someone else1. Create a Realm under System > Integration > Realm. This is the connection to Active Directory so that the firewall can see the security group membership of the r...

Member Since	‎12-24-2014 10:21 AM
Date Last Visited	‎02-05-2024 12:29 AM
Posts	265
Total Helpful Votes Received	505

User Statistics

User Activity

C1000 not allowing password encryption for TACACS Configuration

Reverse Telnet on Catalyst 8500 (no Aux port)

Port Forward HTTPS from 4434 OUTSIDE to 443 INSIDE

AnyConnect Dynamic ACL on Firepower Threat Defense

ASA-5510: Unable to get to the Web Deploy page for the AnyConnect download

Re: C1000 not allowing password encryption for TACACS Configuration

Re: In the context provided, you can use the command "key [0...

Re: Reverse Telnet on Catalyst 8500 (no Aux port)

Re: Port Forward HTTPS from 4434 OUTSIDE to 443 INSIDE

Re: AnyConnect Dynamic ACL on Firepower Threat Defense