Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ssocsupport
Stats
Member since
02-22-2008
27
Posts
0
Helpful
0
Solutions
Created by
ssocsupport
in VPN and AnyConnect
in VPN and AnyConnect
09-13-2019
08:25 PM
09-13-2019
08:25 PM
Hi Team, We are facing issue with one of our clients where the ftd is building vpn with azure. The problem arises when the tunnel flaps either due to no traffic while rekey or any maintenance from the azure end. Azure end supports route based vpn with any any traffic selectors while on ftd end we have policy with specific subnets and azure is initiating the vpn before ftd, as a result the phase 2 negotiation fails. And even though we are initiating traffic from behind the ftd since there is already a phase 1 ftd doesnt initiate a new one. If we force the ftd to be initiator only, will it not create a phase one when azure initiates? Also is it possible to put any any in the crypto policy and put in the end so it will not cause any disruption to other traffic? Any thoughts around this? Thanks
... View more
Created by
ssocsupport
in VPN and AnyConnect
in VPN and AnyConnect
09-04-2019
11:18 PM
09-04-2019
11:18 PM
Do we have any way to keep the vpn up beyond the rekey lifetime without sending any traffic on it. If not can we raise an enhancement for the same?
... View more
12-22-2015
09:16 PM
Hi All,
Do we have fix for the this reported bug CSCud22276.
or any work around.
I am using 9.2.x
Regards / Ramesh M
... View more
12-12-2013
05:04 AM
Hi, we are not configured any DHCP relay or DHCP server in our network. Regards / Ramesh M
... View more
09-23-2013
11:05 PM
Hi Team, I manage 2 ASA 5520 on HA in 2 sites. Behind each locations, configured 6 zones on 2 of ASA interfaces. I have a requirement to enable multicating between the VLAN situated under common physical interfaces,different interface on same ASA and between locations as well. Can anyone help me if multicating is supported in this scenario and share any documents/syntax if you came across. Regards Thiru
... View more
Labels:
02-20-2013
01:01 PM
Hi, In my 5550 asa with ios 8.2.5(33) phase1 and phase 2 coming up. But some of the phase2 sa not passing traffic... I came to know it may be the issue with SPI.... Can you ny help me out here... In the interesting traffic ACL we have around 400 elements ...the ACL CREATED with separate hosts instead of subnets .... Will it cause issue... Thanks you Ramesh M Sent from Cisco Technical Support Android App
... View more
Labels:
10-11-2012
11:14 AM
Dear Team, Is the DH group is mandatory for VPN. Regards Ramesh M
... View more
Labels:
03-08-2011
03:47 AM
As the device has sevel ssl vpn groups configured, the integration should work only from the respective groups. but here the problem is user is able to authenticate in other groups as well. pls help
... View more
03-08-2011
03:45 AM
Folks, We have a requirement here Integration of openldap with Cisco ASA for SSL VPN users acting openldap and primary authentication and firewall local database as secondary (if openldap fails) We have below configuration aaa-server ldap1 protocol ldap aaa-server ldap1 (AB) host AUTH-SERVER1 ldap-base-dn dc=testgroup,dc=com ldap-scope subtree ldap-naming-attribute cn ldap-login-password * ldap-login-dn cn=Manager,dc=testgroup,dc=com ldap-over-ssl enable server-type openldap authentication-server-group ldap1 LOCAL authentication-server-group (AB) ldap1 LOCAL In openldap, we have seven different groups created. Similarly in firewall seven groups are created for SSL VPN access and users are binded with Here is the problem description 1. Users are able to authen
... View more
- Tags:
- ssl
Labels:
Created by
ssocsupport
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
03-08-2011
02:57 AM
03-08-2011
02:57 AM
We tried that and no luck. After then, we opened the device, unplugged the Slot connected it back again and the device was not detected. Finally, we RMA'ed the slot and configured Anyway THANKS for the comments and help
... View more
Created by
ssocsupport
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
03-03-2011
08:32 PM
03-03-2011
08:32 PM
Hi Allen, We tried to reload and no luck. PairA# hw module 1 reload Reload module in slot 1? [confirm] Module in slot 1 can not be reloaded, not in Up state.
... View more
Created by
ssocsupport
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
03-03-2011
01:15 AM
03-03-2011
01:15 AM
Hello, The AIP-SSM Module installed in the secondary firewall is down. Any thoughts to fix this Regards, irfan
... View more
- Tags:
- aip-ssm
Labels:
Created by
ssocsupport
in VPN and AnyConnect
in VPN and AnyConnect
02-26-2011
12:51 PM
02-26-2011
12:51 PM
I've pix configured for Remote access VPN. Here is the new requirement, it should be allowed only from specific source ip's kindly help
... View more
Labels:
Created by
ssocsupport
in VPN and AnyConnect
09-13-2019
09-13-2019
Hi Team, We are facing issue with one of our clients where the ftd is
building vpn with azure. The p...
Created by
ssocsupport
in VPN and AnyConnect
09-04-2019
09-04-2019
Do we have any way to keep the vpn up beyond the rekey lifetime without
sending any traffic on it. I...
12-22-2015
Hi All, Do we have fix for the this reported bug CSCud22276. or any work
around. I am using 9.2.x Re...
09-23-2013
Hi Team,I manage 2 ASA 5520 on HA in 2 sites. Behind each locations,
configured 6 zones on 2 of ASA ...
02-20-2013
Hi,In my 5550 asa with ios 8.2.5(33) phase1 and phase 2 coming up. But
some of the phase2 sa not pas...
03-08-2011
As the device has sevel ssl vpn groups configured, the integration
should work only from the respect...
03-08-2011
Folks,We have a requirement hereIntegration of openldap with Cisco ASA
for SSL VPN users acting open...
Created by
ssocsupport
in Intrusion Prevention and Detection Systems (IPS - IDS)
03-08-2011
03-08-2011
We tried that and no luck.After then, we opened the device, unplugged
the Slot connected it back aga...
Created by
ssocsupport
in Intrusion Prevention and Detection Systems (IPS - IDS)
03-03-2011
03-03-2011
Hi Allen,We tried to reload and no luck.PairA# hw module 1 reloadReload
module in slot 1? [confirm]M...
Created by
ssocsupport
in Intrusion Prevention and Detection Systems (IPS - IDS)
03-03-2011
03-03-2011
Hello,The AIP-SSM Module installed in the secondary firewall is down.Any
thoughts to fix thisRegards...
Created by
ssocsupport
in VPN and AnyConnect
02-26-2011
02-26-2011
I've pix configured for Remote access VPN.Here is the new requirement,
it should be allowed only fro...
Public Statistics
| Date Registered | 02-22-2008 12:56 AM |
| Date Last Visited | 09-25-2019 12:21 AM |
| Total Messages Posted | 27 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 10 | |
| 5 | |
| 10 | |
| 5 |
