Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About gaigl
Stats
Member since
10-10-2010
90
Posts
13
Helpful
0
Solutions
02-17-2020
11:04 PM
now i see the use of the "new" adresses, so it looks like the pool is counting up to the last adress and then starting with the first adress. so thanks guys, everything is fine
... View more
02-17-2020
04:21 AM
this would kill all active connections? edit: I don't have this command
... View more
02-17-2020
02:36 AM
when i enter "sh ip local pool POOL-XXX", the ASA shows all Adresses. btw: the POOL is in the tunnel-group not in the Group Policy
... View more
02-16-2020
10:40 PM
Hello, i had to edit a local adress-pool for anyconnect: old: xxx.xxx.239.5-xxx.xxx.239.240 mask 255.255.255.255 new: xxx.xxx.236.5-xxx.xxx.239.240 mask 255.255.255.255 so this is no problem, but no connection uses the new adresses xxx.xxx.236.5 to xxx.xxx.238.254. is there some cache or something similar?
... View more
Labels:
10-14-2019
02:28 AM
The Neighbourship is up, the rest I'll test next Weekend, cannot test during office-time
... View more
10-10-2019
05:39 AM
I'm not sure about: should I modify on Branch-Router the ospf process 1 that the local connected Net 172.28.0.0 is a network statement in Area 1 ?
... View more
10-10-2019
05:36 AM
is the the routing Process enough? Branch1: Branch 1:
router ospf 1
router-id 192.168.200.100
redistribute connected subnets
network 192.168.191.0 0.0.0.3 area 1
network 192.168.191.100 0.0.0.3 area 1 Router A:
router ospf 1 router-id 192.168.200.209
redistribute connected subnets
redistribute static subnets
network 192.168.22.0 0.0.0.255 area 0
network 192.168.191.0 0.0.0.3 area 1
network 192.168.191.8 0.0.0.3 area 8
network 192.168.191.16 0.0.0.3 area 16 Router B:
router ospf 1
router-id 192.168.200.219
redistribute connected subnets
redistribute static subnets
network 192.168.22.0 0.0.0.255 area 0
network 192.168.191.100 0.0.0.3 area 1
network 192.168.191.108 0.0.0.3 area 8
network 192.168.191.116 0.0.0.3 area 16 sh ip route ospf: Branch1:
...
O E2 172.27.0.0/16 [110/20] via 192.168.191.2, 22:16:00, Tunnel0 (Net HQ)
...
192.168.191.0/24 is variably subnetted, 8 subnets, 2 masks
O IA 192.168.191.8/30 [110/10] via 192.168.191.2, 06:14:07, Tunnel0
O IA 192.168.191.16/30 [110/10] via 192.168.191.2, 22:16:00, Tunnel0
O IA 192.168.191.108/30 [110/103] via 192.168.191.102, 1w2d, Tunnel100
O IA 192.168.191.116/30 [110/103] via 192.168.191.102, 1w2d, Tunnel100
192.168.200.0/32 is subnetted, 3 subnets
O E2 192.168.200.108 [110/20] via 192.168.191.2, 22:16:00, Tunnel0
O E2 192.168.200.116 [110/20] via 192.168.191.2, 22:16:00, Tunnel0
...
Router A:
...
O E2 172.28.0.0/16 [110/20] via 192.168.191.1, 22:18:30, Tunnel0
O E2 172.29.0.0/16 [110/20] via 192.168.191.9, 2w2d, Tunnel8
O E2 172.30.0.0/16 [110/20] via 192.168.191.17, 4w0d, Tunnel16
192.168.191.0/24 is variably subnetted, 9 subnets, 2 masks
O 192.168.191.100/30 [110/102] via 192.168.191.1, 22:18:30, Tunnel0
O 192.168.191.108/30 [110/105] via 192.168.191.9, 06:16:37, Tunnel8
O IA 192.168.191.116/30
[110/7] via 192.168.22.34, 00:00:35, GigabitEthernet0/0/1
192.168.200.0/32 is subnetted, 3 subnets
O E2 192.168.200.100 [110/20] via 192.168.191.1, 22:18:30, Tunnel0
O E2 192.168.200.108 [110/20] via 192.168.191.9, 2w2d, Tunnel8
O E2 192.168.200.116 [110/20] via 192.168.191.17, 4w0d, Tunnel16
...
Router B:
...
O E2 172.28.0.0/16 [110/20] via 192.168.191.101, 1w2d, Tunnel100
O E2 172.29.0.0/16 [110/20] via 192.168.191.109, 1w2d, Tunnel108
O E2 172.30.0.0/16 [110/20] via 192.168.191.117, 00:01:07, Tunnel116
...
192.168.191.0/24 is variably subnetted, 9 subnets, 2 masks
O 192.168.191.0/30 [110/11] via 192.168.191.101, 1w2d, Tunnel100
O 192.168.191.8/30 [110/30] via 192.168.191.109, 1w2d, Tunnel108
O 192.168.191.16/30 [110/11] via 192.168.191.117, 00:01:07, Tunnel116
192.168.200.0/32 is subnetted, 3 subnets
O E2 192.168.200.100 [110/20] via 192.168.191.101, 1w2d, Tunnel100
O E2 192.168.200.108 [110/20] via 192.168.191.109, 1w2d, Tunnel108
O E2 192.168.200.116 [110/20] via 192.168.191.117, 00:01:07, Tunnel116
... some lines I've removed
... View more
10-10-2019
02:24 AM
Hello, we have 3 branches connected via leased line to a ISR 4331, the branch router also have a backup-connection via dsl to a backup-router (also ISR 4331), the branch-router have 2 IPSEC-Tunnels: one to the primary router via leased line, one to the backup-router via dsl. the 3 connections to the branches are area 1, 8 and 16, the 2 HQ roter are ASBR-Router in area 0 and the branch areas. now I see Network 172.28.0.0 from Branch1 on Router A via Tunnel 0 and on Router B via Tunnel 100. We're redistributing connected and static in ospf process 1 Now I'm wondering why I don't have in the routing-table of Router1 the Net 172.28.0.0 via Tunnel 100 and Router B (with another metric. Yesterday I made a backup-test (shutting down Tunnel 0) and clients at branch 1 didn't reach servers in HQ, so maybe the route back from HQ to branch was still routet to routerA, but I think if Router A knows about the route via RouterB and Tunnel 100, it would work. Am I wrong?
... View more
Labels:
01-01-2019
11:47 PM
Hi Mohammed,
that didn't change something, the MTU Size was the default of 1406, I've changed to 1420 and the messages still appear.
I think I need to change the treshold, or not?
... View more
01-01-2019
10:57 PM
Hello,
I've updatet our ASA to 9.10.1 and the anyconnect-client to 4.7.00136, now I receive a lot of messages:
the connections are working and I don't see any drops, but it's annoying.
Does anyone know about this or what Vlue to set?
Received large packet 1406 (threshold 1390)
... View more
- Tags:
- anyconnect
Labels:
12-11-2018
05:28 AM
@ 2.: your Certificate needs "extended Key Usage: Client Auth" and in the Profile Editor you can activate this check.
But again: to use a Cert for Anyconnect-Connection, the Cert needs Key-Usage: Client Auth
and to use "Start before Logon" the Cert should be in the machine store
maybe have a look to "advanced - > ssl-settings.
or: does your ASA trust the CA?
I know it is a bit difficult
... View more
12-11-2018
03:19 AM
that's quit difficult, because we've got some other restrictions.
maybe some screenshots:
client-profile #1
client-profile #2
under tab "Server List" do not enter a group-url after the Servername
cert-map:
under AnyConnect Connection Profiles: (on the Bottom)
deactivate:
maybe this helps, I cannot make screenshots of every point with Anyconnect
... View more
12-11-2018
02:39 AM
you can use the certificate ... map, I did it too.
But you have to remove group-url and such things, also you need a client-profile where you set user/machine certificate, automatic cert-selection and so on.
not very easy but it works.
(We've a 5525-x with 9.8.3
... View more
02-17-2020
now i see the use of the "new" adresses, so it looks like the pool is
counting up to the last adress...
02-17-2020
when i enter "sh ip local pool POOL-XXX", the ASA shows all Adresses.
btw: the POOL is in the tunnel...
02-16-2020
Hello, i had to edit a local adress-pool for anyconnect:old:
xxx.xxx.239.5-xxx.xxx.239.240 mask 255....
Created by
gaigl
in Data Center Switches
12-17-2019
12-17-2019
hello Andrea, thank's very much.I planned for the Scenario on the right,
but when I configured po20 ...
Created by
gaigl
in Data Center Switches
12-16-2019
12-16-2019
Hello Andrea, have a look here:with this Layout everything is fine but
if i patch the ten1/1/9 from ...
Created by
gaigl
in Data Center Switches
12-16-2019
12-16-2019
Hello, we've a remote location with 2 Nexus 5672 connected via dark
fiber to our core C6807-XL as VS...
11-13-2019
Hello, we have 5672UP with N2K-C2232PP-10GE and a numbering of the FEX
like this:Rack 56: FEX 156, n...
10-10-2019
I'm not sure about: should I modify on Branch-Router the ospf process 1
that the local connected Net...
10-10-2019
is the the routing Process enough?Branch1:Branch 1: router ospf 1
router-id 192.168.200.100 redistri...
10-10-2019
Hello, we have 3 branches connected via leased line to a ISR 4331, the
branch router also have a bac...
Public Statistics
| Date Registered | 10-10-2010 10:37 PM |
| Date Last Visited | 03-31-2020 12:16 AM |
| Total Messages Posted | 90 |
| Total Helpful Votes Received | 13 |
.jpg "VIP Advocate"){kind=icon}
