About Keith Nelson

Keith Nelson · 01-12-2012

Hello. I'm running a IPSec VPN between a 5520 ASA and a 2811 router. The ASA has a static IP and the router has a DHCP interface.The VPN seems to work fine once I get done clearing old SAs, but each new IPSEC SA creates a new ISAKMP SA on the router?...

Keith Nelson · 11-14-2011

Hello. Been chasing this WAE log error for a long time. It's a password user unknown error. Is there an easy way to determine where the unknown user is sourcing from? I'm assuming this is a SNMP query or something? Hoping the 899999 code means someth...

Keith Nelson · 11-13-2011

Started with a single CE datacenter router that is BGP peering with a single PE router for connection to our ISP MPLS network. There are other locations as well, and all of our routers use the same BGP AS. The ISP has their own AS, so we are using eB...

Keith Nelson · 09-03-2011

Hello. Our ACS 5.2 is authenticating ASA VPN users with Radius. I would like to use the ACS to authenticate ASA administrator logins with Tacacs. When I modify the ASA Network Device by checking the Tacacs box in addition to the Radius box, ASA VPN a...

Keith Nelson · 03-13-2015

To get IP SLA on the 1921 or any ISR-G2 router you need to purchase the Data or UC (voice) license from Cisco. I would think it's possible to write a TCL or EEM script to create and monitor a ping result. Don't think IP-SLA will reload a router or sh...

Keith Nelson · 03-04-2015

I think you might need to allow VLAN 801 on the peer-link.-Keith

Keith Nelson · 12-07-2012

I've seen this intermittently with Cisco 2851 routers. Was told it was a known issue on some S/N range and a fix was available, but I never followed up. If you have Cisco support I'd open a ticket.Also, when I saw this issue and connected via console...

Keith Nelson · 01-12-2012

Hi Rod. I have a similar challenge using ACS 5.2 ? Haven't tried yet, but my plan is for the ACS (using RADIUS) to verify the device is a member of the domain, in my case I want to control IP/subnet pool depending on domain membership. Hope someone...

Keith Nelson · 11-24-2011

Thanks for the example and explanation. I had to let it soak in for a couple days. After re-reading your comments I understand. Thank you again.Sent from Cisco Technical Support iPad App

Member Since	‎07-09-2011 10:08 AM
Date Last Visited	‎08-29-2018 12:01 AM
Posts	13
Total Helpful Votes Received	3

User Statistics

User Activity

IOS to ASA VPN Creating Multiple ISAKMP SAs

WAE error in log %WAAS-UMKNOWN-1-899999

Redundant CE routers (same subnet) for MPLS PE Connection

ACS 5.2 Radius for ASA VPN quits when Tacacs is also selected.

To get IP SLA on the 1921 or

I think you might need to

Re: i have electric failure , but the router didnt bootup gain a

Re: Help blocking smart devices from using VPN

Re: Redundant CE routers (same subnet) for MPLS PE Connection