Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About robin.vanacoleyen
Stats
Member since
10-24-2012
6
Posts
5
Helpful
0
Solutions
Created by
robin.vanacoley
in Application Networking
in Application Networking
04-23-2013
03:23 AM
04-23-2013
03:23 AM
Hi, I want to know that if there is a link on a webpage, for example: www.test.com/folder1/folder2/index.html Would be it be possible to rewrite this so that when the webserver provides you with that page, that the ACE rewrites the given URL so that the browser only says in the URL bar: www.test.com Or is this impossible and would the webserver itself need to do this rewrite? Thanks!
... View more
Labels:
Created by
robin.vanacoley
in Web Security
01-28-2013
01:50 AM
01-28-2013
01:50 AM
Hi, Simple question but couldn't find a good answer in the datasheet. When the Ironport WSA asks credentials when using LDAP, no domain is required. Username, password ==> Finished! However, it seems when using NTLM that you are required to: DOMAIN\Username, password ==> Finished Is there a way to disable the need for the end-users to enter the domain? Kind regards, Robin
... View more
Labels:
Created by
robin.vanacoley
in Application Networking
01-25-2013
06:11 AM
01-25-2013
06:11 AM
Francesco, In a way this helped me to find the solution. I added a new multi-match policy that used the same classes as the original multi-match policy Then I played with the NAT a bit to find out where it needed to be applied. When playing I noticed the ARP entry for the NAT got corrupt, so sometimes I had to clear all nat configuration and re-add to test some stuff. But then I found the solution is to add a nat address to the inside interface, but the nat address itself belongs to the outside interface. When applying that nat entry on the policy-map class, it works! Thanks for pointing me in the right direction! Kind regards, Robin
... View more
Created by
robin.vanacoley
in Application Networking
01-25-2013
03:54 AM
01-25-2013
03:54 AM
Hi, Is this possible? Imagine the following situation: LAN LB DMZ: 172.16.16.0/24 <=> ACE <=> LAN DMZ VIP 192.168.0.0/24 <=> FW <=> OUTSIDE Rserver_16 172.16.16.10 Rserver_17 172.16.16.11 LAN DMZ VIP for Rserver_10_11: 192.168.0.10 Rserver_20 172.16.16.20 Rserver_21 172.16.16.21 LAN DMZ VIP for Rserver_20_21: 192.168.0.20 And here is the problem now: Rserver 10 or 11 needs a connection to the Rservers 20 and 21 through the VIP 192.168.0.20. But the connection seems to fail... It seems like there is no solution, other than creating a new VIP on the LAN LB DMZ (inside) interface of the ACE. That loadbalances to the same Rservers as the VIP on the outside. But that would mean you have to change the hosts file on the rservers 10 and 11 so that they do not try to connect to the VIP on the outside, but that they would connect to the VIP on the inside. I assume we would also need a NAT? Or am I missing something here, are there other solutions? I don't think this would have been a problem on other loadbalancers (atleast it isn't a problem on radware WSD...) Kind regards, Robin
... View more
Labels:
Created by
robin.vanacoley
in VPN and AnyConnect
10-25-2012
06:45 AM
10-25-2012
06:45 AM
Hi jportugu, I can't believe it, i serieously though I already did that... And that removed my anyconnect button from the menu. Which is why I started playing with the DAP function in the first place. I tried your suggestion and that now works.. Thanks! The only new problem now is that my bookmarks aren't showing up anymore now. But that must be a different problem I guess. Might be DAP related again? Result: I activated under the default DAP: "Bookmarks" ==> "Enable bookmarks" Now everything works as it is supposed to... Really strange though... I thought I did that already... Thanks jportugu!! Kind regards, Robin
... View more
Created by
robin.vanacoley
in VPN and AnyConnect
10-25-2012
06:14 AM
10-25-2012
06:14 AM
Hi all, I have a problem with my clientless vpn portal. I need to configure that when a user logs in through the portal, something that works just fine, that he ends up on the homepage. Right now he ends up immediatly on the anyconnect button. With the homepage I do mean the first button that says "Home". Users must be able to click on the "Web Applications", below "Home". Below "Web Applications" users must have their "Anyconnect" button aswell. First of all I wasn't able to make the portal display the "Anyconnect" button in the menu. Then after a while, I figured out that when de Dynamic Access Policy said "Unchanged" on the "Access Method" page. When changing that parameter to "Anyconnect client" the portal is no portal anymore, I immediatly end up on the anyconnect client start. When selecting "Web-Portal" I get the portal page, but the anyconnect menu is missing. When selecting "Both-Default-Web-Portal" I get the anyconnect button, and all other menus, which is good. But, I want the home button to be the default. And not the anyconnect button, after logging in you immediatly get the start anyconnect page. And then last but not least, when selecting "Both-Default-Anyconnect" you login to the webportal, anyconnect starts immediatly from the menu. Something we want the end user to do manually (Click "Start Anyconnect") I mean! I'm pretty sure the DAP is forcing that because of the options above. But when selecting unchanged or anything that doesn't include Anyconnect, then the anyconnect button is gone... I don't know what I can do to change that. Am I missing something?? I would say DAP isn't needed, but when I set everything to default in the default DAP, then the anyconnect button is gone in the menu... Kind regards, Robin Here's my configuration: group-policy GP_company_intranet_portal attributes wins-server value x.x.x.x dns-server value x.x.x.x vpn-tunnel-protocol ssl-client ssl-clientless split-tunnel-policy tunnelall default-domain value company.local address-pools value IPP_SSLVPN01 webvpn url-list value BML_company_intranet_portal http-proxy disable anyconnect keep-installer installed anyconnect ask enable default webvpn customization value CO_company_intranet_portal http-comp gzip hidden-shares none activex-relay enable file-entry disable file-browsing disable url-entry disable smart-tunnel auto-signon disable tunnel-group TG_company_portal_localauth type remote-access tunnel-group TG_company_portal_localauth webvpn-attributes customization CO_company_intranet_portal group-url https://portal.company.be enable username testaccount password xxxxxxxxxx encrypted privilege 0 username testaccount attributes vpn-group-policy GP_company_intranet_portal vpn-tunnel-protocol ssl-client ssl-clientless password-storage disable group-lock value TG_company_portal_localauth service-type remote-access Troubleshooting when logged in, just to verify if the right group-policy is being used: FW-company# show vpn-sessiondb webvpn Session Type: WebVPN Username : testaccount Index : 510 Public IP : x.x.x.x Protocol : Clientless License : AnyConnect Premium Encryption : 3DES Hashing : SHA1 Bytes Tx : 114897 Bytes Rx : 16087 Group Policy : GP_company_intranet_portal Tunnel Group : TG_company_portal_localauth Login Time : 14:50:56 GMT+2 Thu Oct 25 2012 Duration : 0h:00m:03s Inactivity : 0h:00m:00s NAC Result : Unknown VLAN Mapping : N/A VLAN : none
... View more
Labels:
You Have No Messages
Public Statistics
| Date Registered | 10-24-2012 04:44 AM |
| Date Last Visited | 08-31-2018 01:00 AM |
| Total Messages Posted | 6 |
| Total Helpful Votes Received | 5 |
