About Crag Muer

Crag Muer · 04-22-2024

I have multiple AnyConnect connection profiles for various remote users that provide access to different internal networks. The authentication method needs to be certificate only, but there doesn't seem to be a way to prevent an issued certificate ho...

Crag Muer · 04-19-2024

I'd like to know if it's possible to give a remote client a certificate that they can import to use for SSL VPN authentication instead of having them generate the request and giving it to us to sign and hand back to them. Using an enrollment server i...

Crag Muer · 10-01-2018

I have a server that I need to move to another network whose IP address I can't change. For example, the server is on the 192.168.0.0/24 network with an IP of 192.168.0.100 and I need to move it to the 192.168.10.0/24 network. Each network has a gate...

Crag Muer · 05-13-2015

I have two internet connections, one primary and one secondary: The primary internet is static IP from a cable modem and the secondary internet is an MPLS connection. Each connection terminates at its own ASA 5550 on the same local subnet (192.168....

Crag Muer · 06-17-2013

I am going live soon with a new failover configuration utilizing IP SLA monitoring. I have tested my configuration as best I could in GNS3 and was hoping someone could take a quick look at what I've done before I go live. Any help is greatly apprec...

Crag Muer · 04-19-2024

In messing around with this a bit more I'm going to answer my own question here in case anyone is looking to do something similar.As stated in the original question, our main requirement for this was to have as little end-user interaction as possible...

Crag Muer · 10-30-2018

@paul driver Yep, each router acts as the gateway for the local subnet, routing traffic over a simple L2 metro Ethernet connection provided by a local ISP. The routers are Cisco 2951 ISRs and behind each router is a Catalyst 4507+E switch running a m...

Crag Muer · 10-30-2018

@Richard Burts First, I would really like to thank you for all of your help. I've tested your solution and it worked perfectly. Unfortunately, as I went to test this on the network I realized it isn't going to work. It's entirely my fault as I failed...

Crag Muer · 10-10-2018

@Richard Burts Actually, that sounds perfect. I could fairly easily work around the issue of a small number of IP addresses not being accessible, that shouldn't be a problem. What would be the best way to proceed in this instance? I have a lab set up...

Crag Muer · 10-09-2018

@Richard Burts Unfortunately the original network (192.168.0.0) is not going away and users will still need to access services on both the old and new (192.168.10.0) networks. I also don't have the option of changing that network either as there's to...

Member Since	‎03-19-2013 12:59 PM
Date Last Visited	‎04-22-2024 04:50 PM
Posts	24
Total Helpful Votes Received	3

User Statistics

User Activity

Lock AnyConnect profile to specific certificate

Providing certificates for ASA SSL VPN Authentication

Route server traffic to new network while using old IP address

Two internet connections: How to use secondary internet for one specific host?

Can you verify my IP SLA config?

Re: Providing certificates for ASA SSL VPN Authentication

Re: Route server traffic to new network while using old IP address

Re: Route server traffic to new network while using old IP address

Re: Route server traffic to new network while using old IP address

Re: Route server traffic to new network while using old IP address