About ds6123

ds6123 · 09-01-2021

Hi,I have a new Firepower running ASA image 9.14(2)15. It listens for Anyconnect connections on the standard port (443). We also have an existing ASA that is listening for Anyconnect connections on a custom port (let's say 8443). It would make our li...

ds6123 · 05-02-2014

Suppose I'm troubleshooting an issue and only want to display Radius authentication logs related to a certain user or mac-address. How do I do it? When I launch the interactive viewer, all of the handy search buttons are grayed out. So I thought ma...

ds6123 · 04-30-2014

From what I understand when using PEAP and EAP-TLS, it's the radius server that first determines which one to use.From draft-kamath-pppext-peapv0-00.txt : So my question is how does ACS select which one to use. I'm assuming its the "Access Services"...

ds6123 · 06-02-2013

Just wondering if anyone has run into this problem. I ran into it the other day at a customer site. We had a hard time tracking down the issue.Apparently Microsoft's SCCM has a new feature called "wake up proxy" whereby host a pretends to be host b...

ds6123 · 05-30-2013

Hello,Suppose I have 20 remote sites each connected to a metro ethernet provider with a simple layer 2 vpn back to a single "hub site".The hub site is where 99% of resources are (app servers, internet access, etc.). So the actual traffic flow will b...

ds6123 · 08-26-2014

Thanks for this thread! I was running into the same question during a new deployment where I upgraded the PRSM/CX from 9.1 to 9.3 and they relaxed the licensing quite a bit. The documentation doesn't really mention it except for sneaking it in on p...

ds6123 · 08-21-2014

I'm having the same issue and have a few questions/comments. I can get root/admin access working via NPS/radius by justing telling NPS to send PI the NCS:role0=Root (or Admin) and NCS:virtual-domain0=ROOT-DOMAIN radius attributes. But I also have so...

ds6123 · 05-06-2014

Not sure if doing things in my mac broke things because of the different "new line" characters or what. But I redid everything on a Windows box (and made sure the virtual-domain0 line existed... I put it at the end) and things work fine now.

ds6123 · 05-05-2014

Thanks for the response ravsingh! Because the logical communication of EAP messages is between the EAP components on the EAP peer and the authentication server, the EAP authenticator does not need to support any specific EAP methods. Sure, I totally ...

ds6123 · 05-05-2014

Thanks for the response ravsingh! I think collection filters are an overkill for what I want. I don't want to prevent anything from being recorded in the database. I just want a "display filter" to limit what I see while I'm troubleshooting. For e...

Member Since	‎04-15-2010 11:44 AM
Date Last Visited	‎09-07-2021 08:48 AM
Posts	74
Total Helpful Votes Received	41

User Statistics

User Activity

Can ASA listen on multiple ports for Anyconnect?

How do I filter ACS 5.5 logs?

How does ACS select EAP type to send to client?

MAC Address Flapping and SCCM Wake Up Proxy

Fancy QoS on ME3600X vs. Software Based Routers

Thanks for this thread! I

I'm having the same issue and

Not sure if doing things in

Thanks for the response

Thanks for the response