Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Moises Araujo
Stats
Member since
03-13-2012
19
Posts
0
Helpful
0
Solutions
09-24-2015
01:27 PM
7.5 code does not apply to my cenario, I am using 8.0.120.0 I am using Access Point as local mode and traffic to internet only worked after I added the rule number 5. Another important point that I noted is that ACL-REDIRECT only need to allow traffic between the guest network and the ISE. All other traffic is automatically redirected to the ISE, however DNS and DHCP do not need to declare in the ACL, the ACL allows this traffic. Third point, if I add a rule number 3 deny ip any any to ACL-REDIRECT, the redirect CWA process does not works
... View more
09-24-2015
09:16 AM
1) Are these APs in FlexConnect or Local mode? What WLC version? AP in FlexConnect mode and WLC version 8.1.102.0 2) Does the Message Log in the WLC give any clues? Management > Logs > Message logs none 3) If you remove the ACL from the HOTSPOT-INTERNET authz profile, does it change the behavior? If remove the ACL the access works fine Now I am with a new lab and all is working fine with a few differences: AP in Local mode, WLC version 8.0.120.0
... View more
Created by
Moises Araujo
in Policy and Access
in Policy and Access
09-18-2015
08:09 AM
09-18-2015
08:09 AM
I configured the Hotspot portal on ISE 1.4 The first process works fine, the redirect occurs and the device MAC Address join in the Endpoint group.When I connect again, ISE check if the MAC Address is in the Endpoint group and match the authorization profile, apply the Airspace ACL-INTERNET to the device. I can see in the WLC the device connected with IPv4 ACL-INTERNET received from ISE, but I have no access to Internet. I created the rule number one of ACL-INTERNET to permit ip any any in the WLC. I can resolve the sites name and ping my gateway, but cannot ping any external site address or telnet in any external ip address port Anyone else seen this behavior?
... View more
Labels:
Created by
Moises Araujo
in Switching
in Switching
06-05-2015
05:56 AM
06-05-2015
05:56 AM
Related bug: CSCuo67590 - Sup2t C6800-16P10G-XL module power down due to improper idprom FRU type. Problem: Cisco 6807 not recognize module C6800-16P10G, status: Power down / not supported Solution: Upgrade IOS to 15.2(1)SY or later
... View more
Labels:
07-11-2014
07:20 AM
Hi Alon, I have two Nexus 5548UP and checked the PI 2.1 release notes about this bug. Yesterday I upgraded PI from 2.0 to 2.1 with no success, got same problem.
... View more
Re: Rota estática no roteador CISCO 291...
in Discussões Segurança
01-09-2014
08:00 AM
01-09-2014
08:00 AM
Pablo, pelo que entendi voce quer que o tráfego HTTP sai por um link e o restante do tráfego sai pelo outro link. Voce pode usar esse exemplo de configuração: https://supportforums.cisco.com/docs/DOC-8313
... View more
07-20-2013
06:25 PM
Hello guys, can somebody help me? I am searching installation guides for ASA 5515-X AVC (Application visibility and control) and WSE - Web Security Essentials (URL Filtering) This installation will be through the HD SSD installed in the ASA. Thanks
... View more
Labels:
Created by
Moises Araujo
in VPN and AnyConnect
in VPN and AnyConnect
10-15-2012
07:32 AM
10-15-2012
07:32 AM
Jennifer, I configured the CN to the public IP Address as you said, now the certificate is no more asking to install. Thank you very much:)
... View more
Created by
Moises Araujo
in VPN and AnyConnect
in VPN and AnyConnect
10-15-2012
06:41 AM
10-15-2012
06:41 AM
I checked in the Trusted Root Certification Authorities, the certificate has the ASA inside IP Address: How can I create the CN= that says "CN= "? Thank you
... View more
Created by
Moises Araujo
in VPN and AnyConnect
in VPN and AnyConnect
10-14-2012
05:56 AM
10-14-2012
05:56 AM
I am using the public IP Address to connect. Every time that I connect the client ask to install certificate: I already installed the certificate in the Trusted Root Certification Authorities with no sucess. Thanks
... View more
Created by
Moises Araujo
in VPN and AnyConnect
in VPN and AnyConnect
10-13-2012
10:29 AM
10-13-2012
10:29 AM
Hi, after I have installed AnyConnect VPN client, every time that I connect the client ask to install certificate. I already installed the certificate in the Trusted Root Certification Authorities with no sucess. I configured the AnyConnect with LDAP option with memberof option and its working fine, but the certificate message is displayed every time I do login. Any idea how I can install it permanently? Thanks
... View more
Labels:
Created by
Moises Araujo
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
10-03-2012
11:53 AM
10-03-2012
11:53 AM
Hello guys, can somebody help me? I can't access the IPS software module in the ASDM. When I try acess I got the error message: Error connecting to sensor. Error Loading Sensor Output from ASA: ASA# sh module ips details Getting details from the Service Module, please wait... Card Type: ASA 5525-X IPS Security Services Processor Model: ASA5525-IPS Hardware version: N/A Firmware version: N/A Software version: 7.1(4)E4 App. name: IPS App. Status: Up App. Status Desc: Normal Operation App. version: 7.1(4)E4 Data Plane Status: Up Status: Up License: IPS Module Enabled perpetual Mgmt IP addr: 11.0.0.2 Mgmt Network mask: 255.255.255.0 Mgmt Gateway: 11.0.0.1 Mgmt Access List: 0.0.0.0/0 Mgmt web ports: 443 Mgmt TLS enabled: true I can access the IPS from ASA, but I can't ping the IP address from ASA, access from my LAN or access from ASDM from AnyConnect VPN session: ASA# sh module ips details Getting details from the Service Module, please wait... Card Type: ASA 5525-X IPS Security Services Processor Model: ASA5525-IPS Hardware version: N/A Firmware version: N/A Software version: 7.1(4)E4 App. name: IPS App. Status: Up App. Status Desc: Normal Operation App. version: 7.1(4)E4 Data Plane Status: Up Status: Up License: IPS Module Enabled perpetual Mgmt IP addr: 11.0.0.2 Mgmt Network mask: 255.255.255.0 Mgmt Gateway: 11.0.0.1 Mgmt Access List: 0.0.0.0/0 Mgmt web ports: 443 Mgmt TLS enabled: true ASA# session ips console Opening console session with module ips. Connected to module ips. Escape character sequence is 'CTRL-^X'. ASA# ping 11.0.0.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 11.0.0.2, timeout is 2 seconds: ????? Success rate is 0 percent (0/5) ASA# ping 11.0.0.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 11.0.0.1, timeout is 2 seconds: ????? Success rate is 0 percent (0/5) ASA# Thanks
... View more
- Tags:
- asdm
- ips
- management
Labels:
Created by
Moises Araujo
in Policy and Access
in Policy and Access
08-01-2012
10:55 AM
08-01-2012
10:55 AM
Allowed IP Fragment for the all three Domains controllers. The Domain Controllers are in the same vlan of the nac server trusted interface. I am using OOB Virtual Gateway L2 Thanks Moises
... View more
Created by
Moises Araujo
in Policy and Access
in Policy and Access
08-01-2012
10:44 AM
08-01-2012
10:44 AM
Tarik Adman, I executed the nslookup in the machine that I am testing and in the NAC Server, there are three AD Servers, and they are the same in the machine and in the NAC Server. I already added the policy to permit the requested ports in the Unauthenticated Role for the three AD Servers: TCP: 88,135,139,389,445,636,1025,1026,3268,49152-65535 UDP: 88,123,137,389,636 ICMP to the three AD (I can ping the three AD from de cmd testing machine when I am waiting for authenticate) The NAC Agent is still showing two times the certificate and after about 5minutes he try to logon in the Windows Domain (about 3 minutes to logon) Thanks Moises
... View more
09-24-2015
7.5 code does not apply to my cenario, I am using 8.0.120.0I am using
Access Point as local mode and...
09-24-2015
1) Are these APs in FlexConnect or Local mode? What WLC version?AP in
FlexConnect mode and WLC versi...
09-18-2015
I configured the Hotspot portal on ISE 1.4The first process works fine,
the redirect occurs and the ...
Created by
Moises Araujo
in Switching
06-05-2015
06-05-2015
Related bug: CSCuo67590 - Sup2t C6800-16P10G-XL module power down due to
improper idprom FRU type.Pr...
07-11-2014
Hi Alon,I have two Nexus 5548UP and checked the PI 2.1 release notes
about this bug.Yesterday I upgr...
Created by
Moises Araujo
in Discussões Segurança
01-09-2014
01-09-2014
Pablo, pelo que entendi voce quer que o tráfego HTTP sai por um link e o
restante do tráfego sai pel...
07-20-2013
Hello guys, can somebody help me?I am searching installation guides for
ASA 5515-X AVC (Application ...
Created by
Moises Araujo
in VPN and AnyConnect
10-15-2012
10-15-2012
Jennifer, I configured the CN to the public IP Address as you said, now
the certificate is no more a...
Created by
Moises Araujo
in VPN and AnyConnect
10-15-2012
10-15-2012
I checked in the Trusted Root Certification Authorities, the certificate
has the ASA inside IP Addre...
10-14-2012
I am using the public IP Address to connect.Every time that I connect
the client ask to install cert...
10-13-2012
Hi, after I have installed AnyConnect VPN client, every time that I
connect the client ask to instal...
Created by
Moises Araujo
in Intrusion Prevention and Detection Systems (IPS - IDS)
10-03-2012
10-03-2012
Hello guys, can somebody help me?I can't access the IPS software module
in the ASDM. When I try aces...
Created by
Moises Araujo
in Policy and Access
08-01-2012
08-01-2012
Allowed IP Fragment for the all three Domains controllers.The Domain
Controllers are in the same vla...
Created by
Moises Araujo
in Policy and Access
08-01-2012
08-01-2012
Tarik Adman,I executed the nslookup in the machine that I am testing and
in the NAC Server, there ar...
Public Statistics
| Date Registered | 03-13-2012 10:20 AM |
| Date Last Visited | 03-10-2019 06:23 PM |
| Total Messages Posted | 19 |
