About Philippe Latu

Philippe Latu · 06-11-2020

Hello, This is a "what am I doing wrong?" question. Any hint would be appreciated ;)) The code works fine as long as I set GUA IPv6 addresses, but when I try to set a link-local IPv6 address with the code below, I get the following error :$ python3 ....

Philippe Latu · 12-12-2012

Hello,I am migration an IPsec site to site VPN config to a new ASR1001 router «facing» a Linux box (ipsec-tools + racoon).As the Debian Linux does not offer VTI, I am using a crypto map.The working config is given below with the corresponding logs on...

Philippe Latu · 11-13-2012

Hello,While reading the page linked below, I was surprised to see an ACL is created and never referenced in the class-map that comes afterward.http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_zbf/configuration/xe-3s/fw-stateful-icmp.htmlIs the AC...

Philippe Latu · 09-01-2008

Hello,This is my first post so please forgive my poor english ...We have a ISR 2851 + NME-16ES-1G with per-vlan subinterfaces defined at the router level.The Gigabit internal link is used as a trunk between these subinterfaces and the network module ...

Philippe Latu · 03-13-2013

Hello,If you can read french or read through automated translation (which can be quite funny), I started a documentation at the following page : http://www.inetdoc.net/articles/site2site-ipsecvpn/Here is a sample racoon.conf :# # Please read racoon.c...

Philippe Latu · 12-13-2012

Hello,That's it ! A big thank you for your time Following your advice, I set up a new ESP only transform set and both IKE phases worked perfectly.It seems the issue you mentionned is independant of any hash or encryption algorithm and ASR1k IOS ...

Philippe Latu · 12-13-2012

Hello,Here are the requested informations.As a proof of interesting trafic, I can only show the access list matches~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~asr1001-gw#sh ip access-lists 120Extended IP access list 120 10 permit ip host 130.120.124.8 host 19...

Philippe Latu · 12-12-2012

Here it is ... in the attached text file.

Philippe Latu · 09-01-2008

Hello Rick,Thanks for your answer. The encapsulation problem is related to arp requests as we have incomplete entries in arp table.I tested the 'native' keyword after the encapsulation instruction.The problem is still there and:. the 'native' keyword...

Member Since	‎04-17-2007 11:41 AM
Date Last Visited	‎07-05-2023 08:45 AM
Posts	10

User Statistics

User Activity

Unable to set a link-local IPv6 address with yang + restconf

IKE Phase 2 SA expires immediately - site 2 site ipsec over gre

ASR1k inspection of ICMP -> ACL vs ZBF

ISR 2851 to Etherswitch communication trouble

IKE Phase 2 SA expires immediately - site 2 site ipsec over gre

Re: IKE Phase 2 SA expires immediately - site 2 site ipsec over

Re: IKE Phase 2 SA expires immediately - site 2 site ipsec over

Re: IKE Phase 2 SA expires immediately - site 2 site ipsec over

Re: ISR 2851 to Etherswitch communication trouble