Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Mark Lancaster
Stats
Member since
07-18-2012
22
Posts
10
Helpful
0
Solutions
07-21-2015
03:11 PM
Hi Jennifer, Is it possible that Cisco changed the behavior of this command in ASA 9.x? I am running 9.1(3), and I observe the ASA attempting to locate the next routed hop via the inside interface for the configured AAA server, rather than using the routing table. I end up with the following errors: - Routing failed to locate next hop for TCP from identity:x.x.x.x/52711 to INSIDE:x.x.x.x/49 - AAA authentication server not accessible This behavior does match the documentation, unfortunately. ( interface-name ) (Optional) Specifies the network interface where the authentication server resides. The parentheses are required in this parameter. If you do not specify an interface, the default is inside, if available. Apologies for the necropost, but this seems to be the most relevant thread.
... View more
CSCsi78581 - Hulc LED Process uses 10-1...
in Cisco Bug Discussions
01-24-2014
01:30 PM
01-24-2014
01:30 PM
I see this issue on a Catalyst 3560X-48P running IOS 15.0(2)SE2. switch#show proc cpu sorted CPU utilization for five seconds: 44%/0%; one minute: 42%; five minutes: 41% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 171 3074931895 362854359 8474 20.31% 20.10% 20.00% 0 Hulc LED Process
... View more
Created by
Mark Lancaster
in VPN and AnyConnect
in VPN and AnyConnect
12-13-2013
01:46 PM
12-13-2013
01:46 PM
I have been labbing DAP Network ACL's in ASA 9.1(3), and the implicity default deny seems to be working as expected for me. I am able to define DAP policy with an associated Network ACL that contains some permit lines, and traffic to all other resources/networks seems to be blocked by default.
... View more
12-10-2013
03:18 PM
I am also seeing the "There was an error while parsing and rendering the content." error messages in Chrome 31.0.1650.63.
... View more
Created by
Mark Lancaster
in Network Management
in Network Management
11-21-2013
05:34 PM
11-21-2013
05:34 PM
cer43tcent, If I look at the UNIX text file in notepad on Win7, it looks like this: terminal length 0show runshow vtp statusshow ntp statusexit I did some additional testing with some routers on IOS 12.2/12.4/15.1, and I noticed that I had to specify the SSH version correctly for this to work: SSH1: plink.exe -1 user@x.x.x.x -pw [snip] < commands.txt >> output.log SSH2: plink.exe -2 user@x.x.x.x -pw [snip] < commands.txt >> output.log Trying adding a -1 or -2 for your SSH version.
... View more
Created by
Mark Lancaster
in Network Management
in Network Management
11-20-2013
03:15 PM
11-20-2013
03:15 PM
Hi cer42tcent, The text file would look exactly like your example, but you need to save it in UNIX format. If you are using Windows, you could use a text editor such as Notepad++ or UltraEdit to do this. You will not be able to do this with notepad.exe or MS Word, for example. The reason is that MS-DOS formatted text files use both a carriage-return (CR) and a line feed (LR) for the return/end of line characters.
... View more
Created by
Mark Lancaster
in Network Management
in Network Management
11-04-2013
03:20 PM
11-04-2013
03:20 PM
Replying to this old thread because I found a solution for Cisco IOS. Although ASA/PIX will accept a multiple-commands file with MS-DOS formatted text, Cisco IOS seems to require a Unix-formatted text file with only line feed (LF's) for your return/end of line character. This syntax now works for me: plink.exe user@x.x.x.x -pw [snip] < commands.txt >> output.log
... View more
Created by
Mark Lancaster
in Policy and Access
in Policy and Access
10-17-2013
01:57 PM
10-17-2013
01:57 PM
Hi Stephen, I was just researching the same exact question and came across this thread. I did find this tidbit on the wikipedia EAP article: "EAP-FAST can be used without PAC files, falling back to normal TLS." http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP-FAST
... View more
NCS / PI Backups: Hot vs. Cold, Applica...
in Wireless Security and Network Management
09-12-2013
03:15 PM
09-12-2013
03:15 PM
peterkuric, any recommendation on hot vs. cold backups for upgrading purposes?
... View more
NCS / PI Backups: Hot vs. Cold, Applica...
in Wireless Security and Network Management
09-12-2013
01:52 PM
09-12-2013
01:52 PM
I am running NCS 1.1.0.58, but this is what I have discovered so far: backup %backupsetname% repository %repositoryname% application NCS The above code will perform an application-only backup. Obviously, you need to have at least one repository configured for this to work. According to the release notes I have read, this is the type of backup used for upgrades. backup %backupsetname% repository %repositoryname% The above code will perform a full appliance backup (including the NCS application). I have not yet figured out what this backup type is used for, but it implies being able to restore the entire appliance, application, and database.
... View more
Created by
Mark Lancaster
in VPN and AnyConnect
in VPN and AnyConnect
05-14-2013
09:00 AM
05-14-2013
09:00 AM
The CA certificates were not added directly to the existing trustpoint. You could add them directly via the ASDM as "CA Certificates" rather than "Identity Certificates", or with code similar to: crypto ca trustpoint Inter_CA enrollment terminal crl configure crypto ca trustpoint Root_CA enrollment terminal crl configure crypto ca certificate chain Inter_CA certificate ca .... crypto ca certificate chain Root_CA certificate ca ....
... View more
Created by
Mark Lancaster
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-08-2013
05:13 PM
05-08-2013
05:13 PM
SE mode on the newer AP's is a fantastic feature, but it's not exactly an ideal replacement for a mobile laptop sniffer. The ability to pick up a laptop and walk it around anywhere you need to sniff without power or wired Ethernet requirements beats a wired AP, but I do like SE mode for remote sniffing. I also tested out Spectrum Expert on a remote 3500 and it would only let me sniff one spectrum band at a time.
... View more
Created by
Mark Lancaster
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-08-2013
10:54 AM
05-08-2013
10:54 AM
*bump* If anybody from Cisco is reading, could you please let us know what is going on with this product line? I concur it is ridiculous to be selling a PCMCIA cardbus device in the year 2013. Just take a look at the link above to see how ridiculous the Cisco AIR-CSCO-SE-WIFI-C device looks compared to a modern USB device. Based on this, I am not going to be recommending the Cisco device and looking at other vendors products.
... View more
Created by
Mark Lancaster
in Other Security Subjects
in Other Security Subjects
05-02-2013
09:40 AM
05-02-2013
09:40 AM
I ran into a similar issue on ACS 4.2(1), and I had to enable the following in ACS under the Network Configuration for the specific AAA Client: "Match Framed-IP-Address with user IP address for accounting packets from this AAA Client"
... View more
Created by
Mark Lancaster
in VPN and AnyConnect
in VPN and AnyConnect
04-29-2013
10:54 AM
04-29-2013
10:54 AM
Update: Android and iOS devices do not have the same trust root CA installed as a MS Windows client. I had to load both the root and intermediate CA certs for Digicert into the ASA. The Android/iOS devices picked up all three certs successfully and no longer generate untrusted sever errors.
... View more
07-21-2015
Hi Jennifer,Is it possible that Cisco changed the behavior of this
command in ASA 9.x? I am running ...
Created by
Mark Lancaster
in Cisco Bug Discussions
01-24-2014
01-24-2014
I see this issue on a Catalyst 3560X-48P running IOS
15.0(2)SE2.switch#show proc cpu sortedCPU utili...
Created by
Mark Lancaster
in VPN and AnyConnect
12-13-2013
12-13-2013
I have been labbing DAP Network ACL's in ASA 9.1(3), and the implicity
default deny seems to be work...
12-10-2013
I am also seeing the "There was an error while parsing and rendering the
content." error messages in...
Created by
Mark Lancaster
in Network Management
11-21-2013
11-21-2013
cer43tcent,If I look at the UNIX text file in notepad on Win7, it looks
like this: terminal length 0...
Created by
Mark Lancaster
in Network Management
11-20-2013
11-20-2013
Hi cer42tcent,The text file would look exactly like your example, but
you need to save it in UNIX fo...
Created by
Mark Lancaster
in Network Management
11-04-2013
11-04-2013
Replying to this old thread because I found a solution for Cisco IOS.
Although ASA/PIX will accept a...
Created by
Mark Lancaster
in Policy and Access
10-17-2013
10-17-2013
Hi Stephen,I was just researching the same exact question and came
across this thread. I did find th...
Created by
Mark Lancaster
in Wireless Security and Network Management
09-12-2013
09-12-2013
peterkuric, any recommendation on hot vs. cold backups for upgrading
purposes?
Created by
Mark Lancaster
in Wireless Security and Network Management
09-12-2013
09-12-2013
I am running NCS 1.1.0.58, but this is what I have discovered so
far:backup %backupsetname% reposito...
Created by
Mark Lancaster
in VPN and AnyConnect
05-14-2013
05-14-2013
The CA certificates were not added directly to the existing trustpoint.
You could add them directly ...
Created by
Mark Lancaster
in Other Wireless - Mobility Subjects
05-08-2013
05-08-2013
SE mode on the newer AP's is a fantastic feature, but it's not exactly
an ideal replacement for a mo...
Created by
Mark Lancaster
in Other Wireless - Mobility Subjects
05-08-2013
05-08-2013
*bump*If anybody from Cisco is reading, could you please let us know
what is going on with this prod...
Created by
Mark Lancaster
in Other Security Subjects
05-02-2013
05-02-2013
I ran into a similar issue on ACS 4.2(1), and I had to enable the
following in ACS under the Network...
Created by
Mark Lancaster
in VPN and AnyConnect
04-29-2013
04-29-2013
Update:Android and iOS devices do not have the same trust root CA
installed as a MS Windows client. ...
Public Statistics
| Date Registered | 07-18-2012 08:59 AM |
| Date Last Visited | 04-11-2019 08:58 PM |
| Total Messages Posted | 22 |
| Total Helpful Votes Received | 10 |
