About jcw009

jcw009 · 01-26-2010

I'm setting up an anyconnect vpn connection. I see that I need to createa ssl key for this. It uses the same command to generate an ssh key.Will the newly generated key replace the existing key? If it does is there any impact outside of the ssh keys ...

jcw009 · 11-04-2009

Hi,Here's my aaa config:aaa-server RADIUS1 protocol radiusaaa-server RADIUS1 host 172.30.10.24 key SuperSecretKeyaaa authentication ssh console LOCALaaa authentication enable console LOCALaaa authorization command LOCALhttp server enableWhenever I tr...

jcw009 · 10-29-2009

Is it possible to clear individual tunnels without bringing them all down? I've seen the clear crypt ips sa & cl crypt isa sa, but that's global. Is there something that I can do to pinpoint individual tunnels to kill?Thanks!

jcw009 · 09-08-2009

Setting up a new DMZ on my ASA 5520 running 7.2(3). I want to allow by exception into the internal network, but allow everything out to the external network. I'm only using private addresses on the internal network. If I simply have a few permit stat...

jcw009 · 09-03-2009

Here's my current isakmp config:crypto isakmp identity addresscrypto isakmp enable outsidecrypto isakmp enable rmtcrypto isakmp policy 10 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400crypto isakmp policy 20 authentication p...

jcw009 · 11-05-2009

Thats phase2, how about phase1?

jcw009 · 11-05-2009

I think what I was trying to do was use my radius box like a tacacs box. It doesn't seem like that would work. I'm using Windows 2003 IAS as a radius server to authenticate vpn clients, and don't want anyone who can vpn in login to the firewall. May ...

jcw009 · 11-05-2009

If I do this, will it mean that anyone who can be authenticated on the radius server can log into the firewall?

jcw009 · 09-03-2009

Nevermind, just saw the identical policy in 30. =\

jcw009 · 09-02-2009

So, as long as there is the 'destination' (per the nonat acl) network somewhere on another interface, it doesn't matter which interface it's on for the nat exemption to work. Correct? Because once the traffic passes through the nat 'engine', then it ...

Member Since	‎03-02-2004 04:09 AM
Date Last Visited	‎08-18-2017 03:56 AM
Posts	69

User Statistics

User Activity

generating new rsa key for anyconnect vpn

ASA AAA Authentication: adding radius server fails

Clear VPN Tunnel phase1/phase2

DMZ ACL

isakmp policy disappears after entering

Re: Clear VPN Tunnel phase1/phase2

Re: ASA AAA Authentication: adding radius server fails

Re: ASA AAA Authentication: adding radius server fails

Re: isakmp policy disappears after entering

Re: NoNat between dmz and inside