About Rabbit Snake

Rabbit Snake · ‎08-05-2018

Thanks. I did find this on my own, but this is the correct answer. I believe the change occurred when I upgrade 11.5.1 SU2 to SU4 using PCD. I must have reset or changed the service parameter.

Rabbit Snake · ‎07-28-2018

I have a 11.5.1 SU4 cluster. I have a RDP configured for a DN with a cell phone listed but SNR is disabled in the entry. From a deskphone registered to my cluster, when I dial the cell phone number, it rings both the cell phone AND the deskphone and then rings through to the Unity voicemail box, not the cell phone VM. When I remove the cell phone from the RDP, it rings the cell phone only and I get the cell phone VM as normal. There are no other forwarding rules for the DN and no translation rules or route patterns for the cell phone If the RDP has SNR disabled, when I dial the cell phone from an on-net phone, why is it ringing the desk phone at all? Shouldn't the call just route out the gateway and ring the cell phone as a normal off-net call?

Rabbit Snake · ‎06-25-2018

I have a hub and spoke WAN with all sites using a dual router MPLS/Inet DMVPN model with 4331 routers. Each remote site has a local internet connection and guest network with inet access through both wired and wireless. The routers provide local LAN routing and are directly connected to either an MPLS circuit or a DMVPN tunnel connected to the internet. The guest network is between Meraki LAN switching and the local firewall, there is no routing provided by local 4331 routers. Here's the basic diagram of the DMVPN design. I would like to setup a guest network that can failover to a remotely connected internet connection utilizing the 4331 routers. I'm setting up a guest VRF in the routers, but I am curious the best method to provide failover to another internet circuit across the WAN. Can I dynamically failover the default gateway for guest network using EIGRP or static routes when local internet failure is detected? Here is the current guest network design for remote offices. The proposed, simplified design is at right. The proposed, simplified design is below.

Rabbit Snake · ‎04-30-2018

I have a one user who get one way audio inbound on externals calls when he has jabber set to desk phone control. If Jabber is set to computer use OR not running at all, the calls have two way audio. I have verified the issue with his handset and his speakerphone. Internal calling works fine. inbound/outbound packets accrue at the same rate on the one way calls. My SIP carrier indicates no issues with the call traffic. None of my other users have this issue, I have verified all configurations are exactly the same between working users and this user. Has anyone seen this or have any suggestions? I am running 11.5.1 CM/IMP with 8961 phones running 9.4.2SR3-1 and Jabber 11.9.3.

Rabbit Snake · ‎05-24-2016

Well, I was able to get a 4.2 client. No dice, same issue.

Rabbit Snake · ‎05-24-2016

No, I cannot ping the inside interface of the asa from the connected VPN client. Do you think this has anything to do with the anyconnect client version? I am using an older client because I'm out of license period on this ASA. I am running a 3.1 client.

Rabbit Snake · ‎05-24-2016

See reply above to Tim. I tried this from two other networks with the same result. Traffic is reaching the ASA as verified with the show vpn-s any command, but it's just not passing through it. Thanks again for your help, but I'm as confused as you are.

Rabbit Snake · ‎05-24-2016

See below for show command. The tx/rx did not increment in the couple minutes I ran this command. I tried to ping and RDP to internal locations between show commands. The full config is listed in my initial post. I purposely tried to make this as simple as possible, so I'm pretty confused at this point why it's not working. This route is on the main router this ASA and all internal clients are using as a gateway: ip route 192.168.200.0 255.255.255.0 10.113.0.204 show vpn-s any Session Type: AnyConnect Username : <username> Index : 28 Assigned IP : 192.168.200.1 Public IP : 98.193.26.3 Protocol : AnyConnect-Parent SSL-Tunnel DTLS-Tunnel License : AnyConnect Premium Encryption : AnyConnect-Parent: (1)none SSL-Tunnel: (1)RC4 DTLS-Tunnel: (1)AES128 Hashing : AnyConnect-Parent: (1)none SSL-Tunnel: (1)SHA1 DTLS-Tunnel: (1)SHA1 Bytes Tx : 11048 Bytes Rx : 6820 Group Policy : GroupPolicy_Local Tunnel Group : Local Login Time : 00:20:01 UTC Wed May 25 2016 Duration : 0h:07m:46s Inactivity : 0h:00m:00s NAC Result : Unknown VLAN Mapping : N/A VLAN : none

Rabbit Snake · ‎05-24-2016

I was testing this through a public wifi network, I'll try it from home and couple other places tonight and let you know. Thanks for all your help.

Rabbit Snake · ‎05-24-2016

Thanks for the help, but sadly no difference in these tests. I ran the following: cap asp type asp-drop all my anyconnect client is 192.168.200.1 I ran the following filter on the capture sh capture asp | inc 192.168 It returns no packets. Without the filter, it returns a traffic hitting the inside interface from the inside and a couple other sources, but nothing from 192.168. I also created the test ACLs above and ran the following: access-list test permit ip host 192.168.200.1 host 10.113.0.204 access-list test permit ip host 10.113.0.204 host 192.168.200.1 cap capin access-list test interface inside I began a ping from the anyconnect client to the Inside interface the capture captures no traffic.

Rabbit Snake · ‎05-24-2016

management-access Inside was already in my config. I cannot ping the inside interface of the ASA from the anyconnect client. debug icmp trace shows no pings incoming. sysopt command: no sysopt connection timewait sysopt connection tcpmss 1380 sysopt connection tcpmss minimum 0 sysopt connection permit-vpn sysopt connection reclassify-vpn no sysopt connection preserve-vpn-flows no sysopt radius ignore-secret no sysopt noproxyarp Inside no sysopt noproxyarp Outside

Rabbit Snake · ‎05-24-2016

Thanks for the reply. Routes are on the VPN connected device always show up correctly, even with your correction, I cannot get to internal networks. See below for routes Let me know if you can see anything else, but my config is rather basic, so I'm not sure what's going wrong here. current split tunnel config: IPv4 Route Table =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 10.38.19.1 10.38.19.189 25 10.0.0.0 255.0.0.0 192.168.200.2 192.168.200.1 2 With corrected split-tunnel config above: IPv4 Route Table =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 10.38.19.1 10.38.19.189 25 10.0.0.0 255.0.0.0 192.168.200.2 192.168.200.1 2 =

Rabbit Snake · ‎05-23-2016

I have configured an 5520 ASA running 9.1(3) for SSL anyconnect. I can connect with the anyconnect client, but I cannot access any networks on the inside of the asa. The config is attached. I have also created a static route to the VPN-POOL network on my main internal router pointing to the inside interface of this asa. Any ideas why I can't get to internal resources once connected?

Rabbit Snake · 10-23-2018

I am deploying a 4331 CUBE to service an Intelepeer SIP trunk. It will be connected to a CM cluster ...

Rabbit Snake · 08-05-2018

Thanks. I did find this on my own, but this is the correct answer. I believe the change occurred whe...

Rabbit Snake · 07-28-2018

I have a 11.5.1 SU4 cluster. I have a RDP configured for a DN with a cell phone listed but SNR is di...

Rabbit Snake · 06-25-2018

I have a hub and spoke WAN with all sites using a dual router MPLS/Inet DMVPN model with 4331 router...

Rabbit Snake · 04-30-2018

I have a one user who get one way audio inbound on externals calls when he has jabber set to desk ph...

Rabbit Snake · 02-24-2017

I need to update the secondary DNS servers on my CM cluster running 10.5.1. I am only changing the s...

Rabbit Snake · 05-24-2016

Well, I was able to get a 4.2 client. No dice, same issue.

Rabbit Snake · 05-24-2016

No, I cannot ping the inside interface of the asa from the connected VPN client. Do you think this h...

Rabbit Snake · 05-24-2016

See reply above to Tim. I tried this from two other networks with the same result. Traffic is reachi...

Rabbit Snake · 05-24-2016

See below for show command. The tx/rx did not increment in the couple minutes I ran this command. I ...

Rabbit Snake · 05-24-2016

I was testing this through a public wifi network, I'll try it from home and couple other places toni...

Rabbit Snake · 05-24-2016

Thanks for the help, but sadly no difference in these tests. I ran the following: cap asp type asp-d...

Rabbit Snake · 05-24-2016

management-access Inside was already in my config. I cannot ping the inside interface of the ASA fro...

Rabbit Snake · 05-24-2016

Thanks for the reply. Routes are on the VPN connected device always show up correctly, even with you...

Rabbit Snake · 05-23-2016

I have configured an 5520 ASA running 9.1(3) for SSL anyconnect. I can connect with the anyconnect c...

Date Registered	‎06-22-2007 05:40 AM
Date Last Visited	‎10-09-2019 12:10 AM
Total Messages Posted	17

Re: RDP configured with SNR disabled ca...

RDP configured with SNR disabled callin...

Guest network with WAN failover design

one way audio ONLY when deskphone contr...

Well, I was able to get a 4.2

No, I cannot ping the inside

See reply above to Tim. I

See below for show command.

I was testing this through a

Thanks for the help, but

management-access Inside was

Thanks for the reply. Routes

ASA 9.1, Anyconnect connected but no ac...

CUBE 4331 Recommended software

Re: RDP configured with SNR disabled calling behavior

RDP configured with SNR disabled calling behavior