About newbieftd

newbieftd · 05-17-2022

Using ASDM(7.15(1), I am trying to configure DHCP Relay on my ASA-5506(9.15(1)7, I get:"[ERROR] dhcprelay server 192.168.1.1 inside_1DHCP: Cannot enable DHCP Relay on an interface running DHCP Proxy. Remove VPN DHCP config first."Going to the DHCP Se...

newbieftd · 05-12-2022

iOS 16.3.6 Denali, with ISE 3.6 patch 6 (in monitor mode)#sh license feature-versionFeature Name Version----------------------------ipservices 1.0ipservices eval 1.0ipbase 1.0ipbase eval 1.0lanbase 1.0 I have created a PACL to block all multicast, an...

Can't add external users with UPN · 05-06-2022

I am trying to add external users, but I get "must contain alpha-numeric characters only.... I need to use the full UPN (user@domin.ext) to prevent naming collisions between domains. It will accept the "user" but that is it. Thanks-

newbieftd · 04-25-2022

We have a distributed deployment, with HA pair in Corp, and secondary nodes in remote offices. We use ISE for TACACS (for NADs), and RADIUS (for user VPN/Wireless).The Primary (HA pair), have RADIUS Sequence to forward to RADIUS/DUO proxy (located in...

newbieftd · 10-26-2021

Our external interface (1/1), is bouncing/disconnecting. How can I monitor the interface through the CLI to look for errors?I have run the "show interface g1/1 stats" (and other options), but I don't see CRC errors, or other errors.-newbiftd

newbieftd · 05-12-2022

Thanks, but not sure what you mean by "AAA override" - are you saying ISE is overriding my Block-SIM ACL?Here is the port config - where/how is it overridden?interface GigabitEthernet1/0/33description *** User Data Port ***switchport access vlan 80sw...

newbieftd · 05-12-2022

Thanks - updating the deny rule made it block ssh, so I at least know the ACL rule is working.Is there anything wrong with the format of:10 deny udp any range 7400 7499 any range 7400 7499 log ?I want it to deny any inbound UDP traffic within the por...

newbieftd · 05-12-2022

Thanks again - my deny ssh rule was near the top (with the other deny), here is the complete acl - so deny ssh is prior to any permits, so should block ssh - correct?Extended IP access list Block-SIM10 deny udp any range 7400 7499 any range 7400 7499...

newbieftd · 05-12-2022

Thanks for the response, I have it set on in/out, and I can adjust for in only. But it is not blocking a simple inbound to port 22 (ssh).After setting/applying the ACL to the port, shut/no shut on the port, is there anything else I need to do to have...

newbieftd · 10-26-2021

FTD is directly connected to ISP router.ISP says they are not seeing any errors, but I wany to check via the FTD. Switch would help me to capture, but it is so random. I'd like to see stats like CRC, retries, utilization, .....

Member Since	‎02-14-2017 08:08 AM
Date Last Visited	‎02-01-2023 12:18 AM
Posts	37
Total Helpful Votes Received	10

User Statistics

User Activity

ASA (disable DHCP Proxy) simple but can't set DHCP Relay

3650 Port based ACL not working (also how to log/monitor the ACL)

Can't add external users with UPN

ISE Deployment - process RADIUS/TACACS on remote (secondary) ISE node

FTD (2110) v6.6 Interface bouncing (ISP or FTD?)

Re: 3650 Port based ACL not working (also how to log/monitor the ACL)

Re: 3650 Port based ACL not working (also how to log/monitor the ACL)

Re: 3650 Port based ACL not working (also how to log/monitor the ACL)

Re: 3650 Port based ACL not working (also how to log/monitor the ACL)

Re: FTD (2110) v6.6 Interface bouncing (ISP or FTD?)