Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Is there a way in the ASA to point to a file to update an ACL? Palo Alto has an option to do this. Is there an equivalent in the ASA? https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/configure-...
I am looking for a good configuration example for utilizing eBGP and am struggling to find a good example anywhere. Does anyone have an example for using eBGP over DMVPN? Thanks
The certificates on my ISE servers expire at the end of June. I have two nodes that are doing authentication. The certificates will be used for EAP and wireless. We have a windows PKI setup and will be getting the certificates from that server. If...
My ISE environment is doing posture. One of the posture requirements is that the computer must be on the domain. We are checking for a certain registry entry to confirm that the machines are on the domain. I have a use case where we have a handful ...
I have EEM running in conjunction with a SLA. EEM and SLA works perfect after the SLA is in an up state. The logic of EEM and SLA is if the router can't ping 8.8.8.8 using the cellular interface change the tunnel to use the backup link which is an ...
This is the doc I am working off of to push AnyConnect from ISE.
https://hainc.com/2019/01/11/blog/how-to-update-anyconnect-compliance-modules-on-cisco-identity-services-engine-ise
Here is the full ACL I usually run on my outside interface at my remote sites:
Extended IP access list OUTSIDE_ACCESS_IN 11 permit udp any host x.x.x.x eq non500-isakmp (DMVPN) 12 permit udp any host x.x.x.x eq isakmp (DMVPN) 13 permit e...
I don't have the entire configuration in front of me right now. I was just some more reading and it appears that you cant have the ACL on the outside interface? Would you agree with that?
policy-map type inspect INSIDE-TO-OUTSIDE-POLICY
class typ...
Jon,
Finally got DMVPN implemented and everything is working as expected. My DMVPN router is running EIGRP 100 and 200 processes. My core switch is running EIGRP 100. On my DMVPN router I am redistributing 100 into 200 and 200 into 100. My remote...
Has anyone else seen this issue? I am having almost the exact same problem.
1. If the headset is not hooked up the phone powers fine2. If the headset is hooked up with an aux cable and no usb cable into the headset the phone powers fine3. If the he...
