Cisco router have route based Ikev2 IPsec tunnel to Fortigate . The WAN IP on Fortigate is dynamic because of redundancy . So I have used virtual-access interface. Phase1 /Phase2 comes up but unable to encrypt traffic from Cisco side. Fortigate is ab...
On FP2100 running as ASA appliance mode, how can I have http and ssh access to FXOS via ASA inside data interface. FXOS management interface in 192.168.45.45/24 and ASA inside interface is 10.0.0.0/24. What configuration is required to make it possib...
HI
I have included the given line in my EEM script
event manager session cli username "USER"
The "USER" is a AAA user authenticated via ACS. The fall back method for radius is local.
My question is how the authentication will work in case the rout...
We have cisco 2500 series WLC with software version of 8.0.121.0. While configuring WlANS Layer 2 security as WPA + WPA2. There is no option of WPA2 encryption. Is it related to dtls encryption licesnse?
Hi
I have deployed DMVPN phase 3 and spoke to spoke dynamic tunnels expires after 5 min. Is it default behavior or some command causing it.? Can it be adjusted?
Config on two spokes is like this:
crypto isakmp policy 1 encr aes hash sha256 authenti...
HiThis feature is new to me so can you please share more info on configuring that. route set remote LAN-behind-Fortigate <- this is same as set route for IKEv1 and add static route ONLY after IKEv2 end exchange phaseI & II.
Loopback is in the same subnet (/28) as peer tunnel IP.I have static for remote Lan and tried the routing protocol but the issue is that router is not able to identify that the peer tunnel ip is over the virtual-access interface. as you can see the '...
Hi MHMRemoved the tunnel source. Output is enclosed at end of this message. I guess the issue is ' down' protocol status of virtual-template interface. Because of that, the tunnel subnet is not showing as ' connected' in routing table and the router...
No NAT configured on router and I cant even ping opposite tunnel IP and no encaps for that. Am I on right path to use virtual-access interface in case of dynamic peer? us- test-R01#ping 172.19.100.2 !!! opposite tunnel IP on Fortigate !!!Type esc...
.png "Hall of Fame"){kind=icon}
