About Jay Young

Jay Young · 04-08-2016

Hello folk,Many times a packet capture needs to be performed within the network to diagnose network issues. Luckily there are a couple of platforms (IOS, IOS-XE and ASA) that allow packet captures to be taken on the network devices themselves. Howe...

Jay Young · 10-21-2015

Hello folks, IPsec tunnels between two devices have many configuration options and settings that need to be aligned for the tunnels to come up correctly. In fact we see hundreds of cases per month for configuration assistance requests for VPN tunn...

Jay Young · 04-18-2013

This video is currently being processed. Please try again in a few minutes. This video walks through the updated Site-to-Site IPsec VPN Wizard available within ASDM. The workflow has now been simplified and reduces the need for protocol specific know...

Jay Young · 09-06-2012

Earlier this summer Cisco release the following security advisory for Anyconnect and CSD. The advisory warns of an exploit within the ActiveX and Java applet that are used to web-deploy Anyconnect and CSD. The exploit allows for abitrary code exec...

Jay Young · 10-10-2011

IntroductionRequirementsConfigure via ASDMTestingCaveats and Implemention notes IntroductionSecure VPN remote access historically has been limited to IPsec (IKEv1) and SSL. These were supported using the "Cisco VPN client" for IPsec based VPN and An...

Jay Young · 07-07-2023

@pboynton1 , I know this is a very late response but posting in case someone else has the same question. IKEv1 and IKEv2 are used as a control plane to negotiate and install IPSec SAs. The data going over the tunnel, called the data plane, will us...

Jay Young · 12-10-2018

I'll follow up with the platform team to see why the video is no longer there.

Jay Young · 06-29-2017

Eliska, The EPC is an IOS feature that was designed to capture traffic on routers running IOS. The switch you are using has a different packet forwarding path than compared to an IOS router (like a 2921). As a result that is likely the reason it i...

Jay Young · 05-17-2017

Brianpetes, You can use the following tool made by one of my colleagues to determine the size of the RTP packet and then use as an input to this tool. https://cway.cisco.com/tools/vccalc/ Hope this helps. -Jay

Jay Young · 02-10-2017

Does this link help? http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/107051-cac-anyconnect-vpn.html -Jay

Member Since	‎08-24-2007 04:40 AM
Date Last Visited	‎07-12-2023 12:04 AM
Posts	85
Total Helpful Votes Received	307

User Statistics

User Activity

Tool to assist in Packet Capture and Analysis

Tool to diagnose VPN configuration problems

ASA Site-to-Site VPN Wizard Demonstration

Anyconnect/CSD fails to web-launch on/after Sept 11 2012 (KB2736233)

ASA Anyconnect IKEv2 configuration example

Re: IPSec overhead calculator tool

Re: ASA Site-to-Site VPN Wizard Demonstration

Eliska,

Brianpetes,

Does this link help?