About fsebera

fsebera · 04-02-2021

Cisco IOS-XE configuration supports multiple phase 1 crypto isakmp PSK options for ip address-peers. We have a large number of IPSec peers (700+) and would like to use one PSK per network range instead of per peer or the same PSK for all peers with ...

fsebera · 03-02-2021

We are moving from IKEv1 to IKEv2 on our hundreds of VPN tunnels. We are being told to use asymmetric PSK because it’s more secure than using PKI and private in-house certificates. I disagree but I’m not the expert in the area. Can anybody clarify ho...

fsebera · 02-17-2021

HiI built an EEM menu into my routers to expedite results. Currently -below- is my IPSec MENU. This EEM script is 4+ pages long and thus would like to modularize the menu into separate modules for ease of updates and any EEM troubleshooting. In my a...

fsebera · 12-09-2020

We are about to start migrating some Cisco network IOS router point-to-point static VPN links from IKEv1 to IKEv2. We have an established QoS and MTU policy that is hard set to the exact values for remote end client routers. The question is - Can w...

fsebera · 12-08-2020

Hi,I have asked my EEM questions in other groups but have received no responses so perhaps I was in the wrong groups.I'm trying to get the following IP addresses into different variables. The show crypto session | i port cli command provides this res...

fsebera · 04-02-2021

The reason I ask is most peers fall within the 3 defined ranges of:192.168.0.0 /24172.16.0.0 /2410.0.0.0 /16 while other peers don't fall within a supernet at all - think ISP static addressing which will be covered by the 0.0.0.0 wild-card range.Shou...

fsebera · 04-02-2021

Hi Rob, Thank you for the quick reply. Yea my password is a bad example no doubt :)..., and unfortunately our Juniper boxes (I didn't mention) do not support asymmetric PSKs -yikeeeeeeessss. In behind the curtains does the IOS just cycle through the ...

fsebera · 03-05-2021

Hi Sheraz, I somehow missed your response until now. My bad.Thank you for responding and providing good detail. I was expecting there would be a technical reason, something concrete that would spell it out. Anyway, Thanks again for your helpFrank

fsebera · 02-18-2021

Ok I figured out how to remove some of the excess noise by including no service timestamps debug at the beginning of the script. Then after each module script runs, reenable. The last portion that would be VERY helpful if it disappeared appears to...

fsebera · 02-17-2021

To help better understand what is happening I have posted the results of BEFORE and AFTER. EEM Menu BEFORE modularizationalias cc calls the EEM applet menu. R1#cc______________EEM Crypto Status Ver 6___________________Choices:1 - Show ISAKMP IKEv2...

Member Since	‎04-09-2002 12:46 PM
Date Last Visited	‎04-02-2021 01:05 PM
Posts	802
Total Helpful Votes Received	93

User Statistics

User Activity

IPSec IKE PSK with IP peer address

IPSec IKEv2 with PSK more secure than PKI

EEM - How to modularize MENU (separate into modules)

Cisco router IKEv1 to IKEv2 migration

EEM - How to get ip address into variable

Re: IPSec IKE PSK with IP peer address

Re: IPSec IKE PSK with IP peer address

Re: IPSec IKEv2 with PSK more secure than PKI

Re: EEM - How to modularize MENU (separate into modules)

Re: EEM - How to modularize MENU (separate into modules)