About TheSlyOne

TheSlyOne · 02-14-2020

I upgraded all my firewalls from 9.4 to 9.8(4)12. They are running in single context routed mode. I disabled the rest-api agent, as per the upgrade instructions, while doing the upgrade. After upgrading the OS, I upgraded the Rest API package to asa...

TheSlyOne · 11-14-2019

SCP to my firewalls in Japan and USA from the UK is painfully slow. I suspect this is because the firewall does not do any window scaling. If I copy from a local machine, I get a transfer time of about 1m30s for a firmware image. Transcontinental i...

TheSlyOne · 10-14-2019

I am about to build an OOB Management network, for about 10 sites, and am trying to identify the most cost effective hardware. I intend to provide OOB Ethernet and Serial connectivity to each network device on my main network which is around 100 dev...

TheSlyOne · 10-04-2019

The workaround shows clearing the IKEv1 SA. Does this bug also affect IKEv2 connections, or is it limited to IKEv1?

TheSlyOne · 08-20-2019

I can not for the life of me see where I set the DPD timers when using IKEv2 on the ASA. All of the Documentation and guides seem to only talk about it using IOS and/or FlexVPN. does anyone know what the command is?

TheSlyOne · 11-03-2021

Bug CSCvu48285 was registered for this issue. I think it was fixed in 9.8.4.26.

TheSlyOne · 01-12-2021

Did you ever work out how to do this? Cisco API's are turd compared to other vendors. I seem to be able to rarely get or set the config/data I need, and have to resort to CLI manipulation. The Docs are terrible.

TheSlyOne · 04-15-2020

Apparently there are two of us ;)

TheSlyOne · 08-20-2019

Yup that did it. It doesn't help that isakmp is supposed to only be IKEv1, so that is misleading.

TheSlyOne · 08-20-2019

Thanks RJI, I will give it a try. It's L2L that I am using. does the isakmp setting apply to IKEv2? It wouldn't surprise me if it did as Cisco ASA's are inconsistent. I sooooo much prefer setting up VPN's on IOS.

Member Since	‎04-29-2012 06:23 AM
Date Last Visited	‎11-05-2021 12:18 AM
Posts	29
Total Helpful Votes Received	22

User Statistics

User Activity

ASA Rest API not working since upgrade

ASA scopy (SCP) Slow over high latency links

OOB Management Hardware selection

CSCvj28716 - ASA VPN with multiple peers drops incoming packets after failover

ASA IKEv2 DPD timer settings

Re: ASA Rest API not working since upgrade

Re: how can i get the rule hit-count via rest api?

Re: Found the solution.

Re: ASA IKEv2 DPD timer settings

Re: ASA IKEv2 DPD timer settings