Here's the updated link I found:https://community.cisco.com/t5/network-management/setup-notification-when-new-route-get-put-in-routing-table/td-p/1849740
I opened a case. It turns out there's a simple workaround for per-VRF TACACS+:tacacs server xxxxxxxxxxxx address ipv4 a.b.c.d key yyyyyyyyyyyyyy!aaa group server tacacs+ TAC+ server name xxxxxxxxxxxx ip vrf forwarding zzzzzzz So basically, declar...
I found this bug (not my case): https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv86851Also it's referenced as an open caveat in the 2960-X, 2960-CX and 4500 (and probably some other switches) release notes.
Austin, I couldn't make your workaround work. I've tried with and without AES password encryption, retyping the password each time, but there's been no positive effect.I'll open a TAC case tomorrow.BTW, if you don't use per-VRF TACACS+, you can still...
A customer had the problem, and I found the reason in the AnyConnect 3.1 release notes.http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html#wp1108457"Client certificates must contain an EKU fie...