Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About infrateam
Stats
Member since
08-18-2014
99
Posts
45
Helpful
0
Solutions
Created by
infrateam
in Cisco Software Discussions
in Cisco Software Discussions
11-19-2019
11:39 PM
11-19-2019
11:39 PM
Six months on... any further info on this?
... View more
Created by
infrateam
in IP Telephony and Phones
in IP Telephony and Phones
10-28-2019
11:35 PM
10-28-2019
11:35 PM
Thank you for this @CHRIS CHARLEBOIS - you saved me tons of work and hours :)
... View more
08-06-2019
05:27 AM
My developers would love to utilise Ubuntu for dev but AMP for endpoints only runs on RHEL/CentOS. So we're currently trialing CentOS on laptops. I feel a better choice would be Fedora (not supported) or Ubuntu (likewise). Does anyone know of anything in the roadmap for AMP on Fedora or other Linux other than RHEL and CentOS ? Anything on the horizon in terms of possibly coming in the future?
... View more
Labels:
Created by
infrateam
in IP Telephony and Phones
in IP Telephony and Phones
02-16-2019
06:14 AM
02-16-2019
06:14 AM
Did you fix this? I have this problem too.
... View more
Created by
infrateam
in Network Security
in Network Security
01-10-2019
09:49 PM
01-10-2019
09:49 PM
Steps to create a working ssl certificate with Windows server CA:
go to your windows CA and go to "manage" your cert templates so you can create a new template. In my case, I had a web server template so I "duplicated" that template.
Now you need to change compatibility. Mine was initially set for windows 2003 even though my server is 2012. I set mine for windows server 2012 R2 for server and for client I set the same
Now in the "extensions" tab, select the "basic constraints" field and click edit
in the box which opens, select the 2 options "enable this extension" and "make this extension critical"
save the template
Now back at the CA (certsrv) right click certificate templates and select "new > certificate template to issue" and choose your newly created template. This makes the template available to issue certs in my understanding
now issue the cert for FMC
to issue the cert for the fmc you need to generate the CSR on the fmc. Then what I do is use powershell via this command:
certreq -submit -attrib "CertificateTemplate:WebServer5year-win2012-basic-c" csr.txt
Now go to the fmc gui and "import https server certificate"
In the box which opens you have 3 fields. If you generate the CSR on the FMC then you will not need to use the private key field. This just leaves the top field "server certificate" (which is where you paste the cert you generated from the CA) and the bottom field which is the "certificate chain". In the cert chain field, you need to include your CA cert and any intermediary CA certs there. In my case I just have one CA and no intermediaries so I just pasted in the CA cert and clicked Save.
After I done the above the cert imported first time without any errors at all. I simply enabled and set the basic constraints field to "critical". Seems like the "bug" here is the cisco docs... if Cisco simply included this "requirement" in their guides it would save a lot of confusion I think.
Hope the above helps someone (else I wasted 30 mins :) )
... View more
Created by
infrateam
in Network Security
in Network Security
01-10-2019
07:57 PM
01-10-2019
07:57 PM
@Marvin Rhoads Thanks for the info although I could not find any such detail in the config guide: https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/system_configuration.html?bookSearch=true#id_73638
Seems the "bug" is not a bug but an error in the documentation?
Bug ref: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg28901/?rfs=iqvred
- Regarding your web server template, I have used the same method to generate a ssl cert for my fmcv and it's failing to import because it's missing those fields (I'm struggling to find where to update the template for those fields though ;) ) ps. my template version shows 4.1, I have windows CA server 2012
... View more
Created by
infrateam
in Cisco Bug Discussions
in Cisco Bug Discussions
01-07-2019
10:06 PM
01-07-2019
10:06 PM
This does not work for me:
CIN-SL-5506# show reload
Reload scheduled for 03:00:00 IST Wed Jan 9 2019 (in 15 hours and 26 minutes) by admin from ssh (remote 192.168.10.159)
CIN-SL-5506#
CIN-SL-5506# show module sfr
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
sfr FirePOWER Services Software Module ASA5506 JADxxxxxxxx
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
sfr 4001.xxxx.xxxx to 4001.xxxx.xxxx N/A N/A 6.2.3.8-51
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
sfr ASA FirePOWER Up 6.2.3.8-51
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
sfr Up Down
Can you give more info or context as to the specific steps you took, the appliance model etc? May be I am not doing something exactly like you did?
... View more
05-06-2018
08:45 AM
You need to select the new cert you imported to be used. Sounds like although you imported the new cert, it’s sitting idle and the VPN config is still using the old cert.
... View more
03-07-2018
08:01 PM
Thank you John and Marvin for firstly the excellent first post stating exactly what is needed and secondly to Marvin for taking it onboard and responding with the concise help!
I did look for this earlier in the week and the Cisco documentation doesn't give these instructions or notes at all... I knew that regenerating a CSR was not the right way to go.
I thought I'd add some additional info in case anyone needs it.
After downloading your renewed SSL cert bundle from your cert authority, here's the steps you need to get the PFX file that you can then import into your ASA via ASDM:
1. You might need to create a cert 'bundle' if your CA has given you the server cert and separate root and intermediate certs. You do this by opening up all of the files with a text editor and making a new notepad file. Copy and paste everything from each cert into the one file. The server cert is first, followed by the intermediate and then root certs. Save the new file as .crt like the others and it should open in windows fine.
2. Use a linux shell with openssl (I use windows bash.exe for this) and create the pfx file. You need the 2 files that are 1) your certs private key file and 2) the new cert bundle you just created (you will be asked to set a password for it)::
openssl pkcs12 -export -out new-asa.pfx -inkey private.key -in bundled.crt
3. now you can import the pfx into the ASA using the password. I actually created a new trustpoint, since the private key was being imported again.. although I'm not sure if I could have re-used the same trustpoint as before.
:)
... View more
Created by
infrateam
in Wireless - Mobility Documents
in Wireless - Mobility Documents
08-02-2016
12:53 AM
08-02-2016
12:53 AM
Depends on if the APs support LAG.
... View more
08-02-2016
12:50 AM
OP I raised a TAC for this issue back in April 2015.
You must use DTLS for phones, else they fall back to using TCP. The result is extremely poorly working phones. Have you tested this?
... View more
05-08-2016
06:43 PM
This is wrong:
LACP and PAgP are not supported on the controller
"Make sure the port-channel on the switch is configured for the IEEE standard Link Aggregation Control Protocol (LACP), not the Cisco proprietary Port Aggregation Protocol (PAgP)."Controller only supports the on mode of the LAG.
This should say "Make sure the port-channel on the switch is configured to channel unconditionally without a negotiation protocol; IE channel-group mode on"
The text above first says that LACP is not supported on the WLC, but then the next part says to make sure you enable LACP. The OP is confused about the command channel-group x mode on. The "on" means that physical link will be within a port-channel without negotiation.
... View more
Created by
infrateam
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
03-04-2016
12:30 AM
03-04-2016
12:30 AM
It's okay, after over an hour of searching Google AND Cisco.com and using Google to search Cisco.com I eventually found the documentation:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-1/mobility_express/b_Mobility_Express_Deployment_guide/b_Mobility_Express_Deployment_guide_chapter_01100.html#task_7B18649C99D94D2BB551EDDEB16B6601
... View more
Created by
infrateam
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
03-04-2016
12:16 AM
03-04-2016
12:16 AM
I am now done testing the 1832 I have with our 2504 WLC. And I would like to put the AP back to the autonomous mobility express image and having some troubles.
I have broke the boot sequence and issued tftpboot, which downloaded the .bin file which I extracted from the mobility express .tar image. However I can't see how after the AP has downloaded the .bin, how to tell the AP to boot it.
(RNAQ-C7) # tftpboot Full duplex link Port:2 speed 1000Mbps Using eth0 device TFTP from server 192.168.1.254; our IP address is 192.168.1.1 Filename 'part.bin'. Load address: 0x44000000 Loading: ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ############################# done Bytes transferred = 32865897 (1f57e69 hex) (RNAQ-C7) # dir Unknown command 'dir' - try 'help' (RNAQ-C7) # help ? - alias for 'help' base - print or set address offset bootipq - bootipq from flash device chpart - change active partition cmp - memory compare cp - memory copy crc32 - checksum calculation echo - echo args to console env - environment handling commands ethreg - ethreg - Switch/PHY Reg rd/wr utility exit - exit script false - do nothing, unsuccessfully go - start application at address 'addr' help - print command description/usage i2c - I2C sub-system iminfo - print header information for application image imxtract- extract a part of a multi-image ipq_nand- Switch between SBL and Linux kernel page layout. loadb - load binary file over serial line (kermit mode) loady - load binary file over serial line (ymodem mode) loop - infinite loop on address range md - memory display mm - memory modify (auto-incrementing address) mtdparts- define flash/nand partitions mtest - simple RAM read/write test mw - memory write (fill) nand - NAND sub-system nm - memory modify (constant address) pci - list and access PCI Configuration Space ping - send ICMP ECHO_REQUEST to network host printenv- print environment variables printmfgenv- Print manufacture information data printshenv- printshenv- print shared environment variables reset - Perform RESET of the CPU run - run commands in an environment variable saveenv - save environment variables to persistent storage saveshenv- saveshenv - save shared environment variables to persistent storage setenv - set environment variables setshenv- setshenv - set shared environment variables sf - SPI flash sub-system showvar - print local hushshell variables smeminfo- print SMEM FLASH information source - run script from memory test - minimal test like /bin/sh tftpboot- boot image via network using TFTP protocol true - do nothing, successfully ubi - ubi commands usb - USB sub-system verify_bl- Cisco Bootloader signature verify verify_lx- Cisco Image signature verify version - print monitor, compiler and linker version (RNAQ-C7) # showvar HUSH_VERSION=0.01
How do I revert back to autonomous?
... View more
Created by
infrateam
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
03-04-2016
12:10 AM
03-04-2016
12:10 AM
Hi, yes I have my 1832 working fine with my 2504 WLC.
Did you read the release notes? You need WLC version 8.1 at least.
My next problem is getting the 1832 back to autonomous mode!
... View more
Created by
infrateam
in IP Telephony and Phones
10-28-2019
10-28-2019
Thank you for this @CHRIS CHARLEBOIS - you saved me tons of work and
hours :)
Created by
infrateam
in Unified Communications Infrastructure
09-26-2019
09-26-2019
Could anyone inform me whether `800-35052-01` is still the correct part
number for the hard drive tr...
08-06-2019
My developers would love to utilise Ubuntu for dev but AMP for endpoints
only runs on RHEL/CentOS. S...
Created by
infrateam
in Network Security
01-10-2019
01-10-2019
Steps to create a working ssl certificate with Windows server CA: go to
your windows CA and go to "m...
Created by
infrateam
in Network Security
01-10-2019
01-10-2019
@Marvin Rhoads Thanks for the info although I could not find any such
detail in the config guide:
ht...
Created by
infrateam
in Cisco Bug Discussions
01-07-2019
01-07-2019
This does not work for me: CIN-SL-5506# show reload Reload scheduled for
03:00:00 IST Wed Jan 9 2019...
05-06-2018
You need to select the new cert you imported to be used. Sounds
likealthough you imported the new ce...
03-07-2018
Thank you John and Marvin for firstly the excellent first post stating
exactly what is needed and se...
08-02-2016
OP I raised a TAC for this issue back in April 2015. You must use DTLS
for phones, else they fall ba...
Created by
infrateam
in Collaboration Applications
07-28-2016
07-28-2016
I didn't need the screenshots in the end because the link I supplied in
the previous post helped me ...
05-08-2016
This is wrong: LACP and PAgP are not supported on the controller "Make
sure the port-channel on the ...
Public Statistics
| Date Registered | 08-18-2014 09:24 PM |
| Date Last Visited | 12-03-2019 06:19 PM |
| Total Messages Posted | 99 |
| Total Helpful Votes Received | 45 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 1 | |
| 1 | |
| 5 |
.jpg "Hall of Fame Guru"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
