Community
Buy or Renew
EN US
Chinese
EN US
French
Japanese
Korean
Portuguese
Spanish
Log In
MENU
CLOSE
Buy or Renew
Log In
EN US
Chinese
EN US
French
Japanese
Korean
Portuguese
Spanish
NOTICE: You can now engage in the community. Learn about the great new Cisco Umbrella content.
qiangzh2
Cisco Employee
Member since
10-15-2014
07-25-2019
Recent Badges
Awards
User Statistics
13
Posts
3
Solutions
0
Helpful votes Given
86
Helpful votes Received
Recent Badges
See all
Certifications
Cisco Community
About qiangzh2
Please click
here
to merge your Webex community account with this Cisco.com community account
User Activity
Posts
Replies
【原创】IKEV2 Troubleshooting 常用命令解析
03-27-2018
ASA 常用show命令show crypto ikev2 sa detailed 显示所有IKEv2 SA参数show crypto protocol statistics ikev2 显示IKEv2协商统计信息show crypto ipsec sa detailed 显示IPSec SAshow crypto sockets 显示加密套接字相关信息show crypto accelerator load-balance detail显示负载均衡的详细信息OS/IOS-XE 常用...
【原创】ISE REST-API 配置案例
02-27-2018
启动ERS APIs服务:登录到ISE PAN node, 转到 Administration > System > Settings and select ERS Settings from the left panel. 勾选 Enable ERS for Read/Write 保存配置 使用如下链接访问SDK https://ise.domain.com:9060/ers/sdk创建ERS API用户: ...
【原创】ASA SSL故障排查
02-27-2018
背景介绍:在新的平台的ASA会有SSL cache的概念针对新建的ssl session,所以也会因此导致出现memory leak,这个我会在后续的文章再做详解解释。正常情况下,SSL的cache会因为一下几种原因被清楚掉:1. SSL session超时2. cache entry超过上限,会清楚最老的session3. 8.0.3.10之后的版本会每分钟尝试去clear 超时的session常用的show命令:asa# show ssl cache #查看cache的...
通过IPsec L2L VPN 实现U-turn的Internet访问
05-22-2015
今天为大家带来一份L2L VPN的配置案例,针对某些用户本地没有internet访问权限,所有流量都通过VPN到达中心站点,然后经过中心站点访问internet.1. 拓扑: 2. 基本步骤: 俩侧站点分别使用ASA 9.x 或 8.4 通过IPsec VPN实现互联。站点1是中心站点,站点2是分支站点。俩个站点间的所有通信都是经过IPsec 隧道加密保护。站点1中的192.168.1.0/24网段的主机通过ASA1本地的internet出口访问互联网。站点2中的192.168.2.0/24网段...
FPWR系列防火墙K9许可申请
07-25-2019
需要销售给你的设备的PID添加进合同中,这部分应该是免费的,之后你就可以开license case确认下你的smart acount中是否有了3DES license,如果有了就正常注册即可.
Cisco AnyConnect 对 169.254.0.0/16网段的识别问题
03-20-2018
试试AnyConnect Scripting,也许可以帮助你实现你的需求
思科ASA防火墙Failover未配置stanby参数
03-04-2018
不配置standby ip,你无法完整判断数据端口是否正常可用,你只能因为unit级别的failure导致设备切换
关于思科ASA做QOS
02-27-2018
如果你的QOS策略都是一样的,可以在你的ACL里面不断新增加IP地址信息,无需再额外增加策略配置
思科ASA版本9.1(7)11,更改哪个参数,能够及时判断VPN已断开,及时回收已分配地址?
02-27-2018
参考如下链接配置DPD feature即可https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/svc.html#wp1090788
View more
Community Statistics
Member Since
10-15-2014
12:21 AM
Date Last Visited
07-25-2019
01:35 AM
Posts
13
Total Helpful Votes Received
86
Helpful Votes From
User
Helpful Count
xiaocqu
10
shuangbao wang
16
byl_qware_com
20
Yanli Sun
40
See all >