About slicerpro

slicerpro · 12-15-2023

This one FTD was greyed out on the FMC for a few days. This happened when the FTD had a power outage and it rebooted. Whenever I log in, it says "You have logged in while system startup is in progress. Please wait, some feature may be unavailable unt...

slicerpro · 11-15-2021

We just inherited a network that needs a lot of cleanup. The current setup consists of a core Cisco4510 connected via a ten gig link to a Juniper EX4600 which is in turn connected to several EX3400 access switches. The problem is that the Cisco shows...

slicerpro · 02-06-2018

When I do a wireshark capture on a switchport, I see my client's SYN go out and the SYN ACK come back within the same second. However, on the FWSM module sitting on the same switch, the SYN ACK doesn't arrive until after 30 sec and so it gets dropped...

slicerpro · 06-22-2017

Our client has two sites connecting to us via eBGP. Both client's sites are connected via eBGP and our two local devices are connected via iBGP. We have a need so that whenever any of the remote site networks are not reachable via one site, then the ...

slicerpro · 01-25-2017

My client's firewall is logging and dropping ipsec packets because they fail anti-replay check. I've seen elsewhere that you can disable the check globally. I have also seen that it is possible to disable the check per crypto map on IOS, but haven't ...

slicerpro · 10-23-2019

I would check with your AWS/Google/Azure solutions architect.

slicerpro · 10-23-2019

slicerpro · 02-13-2019

This is very old. Either way, my questions would be: vpn-filter value filter_S2S_TunnelTwo_TeleCon --- where and how is this acl configured? default-group-policy S2S_TunnelOne_Primary ---- where and how is this GP configured? vpn-filter value filter_...

slicerpro · 02-13-2019

I agree on the alternative way to lock down the traffic, I would only add that the VTI interfaces would be on the ISR's, as ASA 8.4 would not support them.

slicerpro · 02-13-2019

On the asa's the crypto acl should contain the GRE source/destination IP's, then you should do twice-nat for that traffic on the asa as well. With that, the rest of the traffic will be natted and not be sent on the tunnel.

Member Since	‎04-01-2008 04:41 PM
Date Last Visited	‎01-02-2024 04:24 AM
Posts	75
Total Helpful Votes Received	21

User Statistics

User Activity

FTD 2110 dropping from FMC

P2P self-loop

Traffic Packets getting delayed between switch and FWSM

dynamic BGP route failover

Can we disable anti replay check on ASA 9.0(4)23 per crypto map?

Re: NAT forwarding on ASA to public Cloud

Re: NAT issues

Re: Cisco ASA vpn-filter inexplicably applies to multiple tunnels

Re: Need to secure GRE traffic through ASA firewalls with IPSec tunnels

Re: Need to secure GRE traffic through ASA firewalls with IPSec tunnels