Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About alkabeer80
Stats
Member since
01-30-2010
202
Posts
5
Helpful
0
Solutions
02-15-2014
09:04 AM
Hi nkumarsr, I have cretaed tcp string signature for ports 9001, 9090 and also i have added it in builtin signature 5816/0 and 5816/1 i have luanch TOR and it is not fired, i took capture on client PC and seached for tcp.port == 9001 and 9090, it is not showing. do u have any other ideas ?
... View more
02-11-2014
05:42 AM
Hi, I want to create custom signature to produce alert whenever any machine lunches TOR application, i have searched and found that there already two signatures cretaed 5816/0 5816/1, i have enabled them and tested it did not fire. I have ips in promoscous mode monitoring all vlans, working normally. I dont have ssl interception @ any device, so once TOR is establish then i dont have visibilty over the traffic. i need help in creating usch signature, i have took wireshark capture of traffic and all i can see on application layer is proxy connect and proxy port (see attached) thanks for your help.
... View more
Labels:
01-18-2014
05:59 AM
Hi, I have asa with policy map below when ever anybody wants to upload large file it drops after some time, since i have multiple services i exclude ip of upload server from access-list and then evrything works normally i want to add and fine tune the below policy map tcp-map tcp-NORM_Map check-retransmission checksum-verification exceed-mss drop queue-limit 5 timeout 3 syn-data drop window-variation drop-connection policy-map CONNS_policy class CONNS_Class set connection conn-max 1500 embryonic-conn-max 200 per-client-max 10 per-client-embryonic-max 15 set connection timeout embryonic 0:00:45 half-closed 0:05:00 tcp 0:10:00 reset dcd 0:00:20 3 set connection advanced-options tcp-NORM_Map
... View more
Labels:
01-01-2014
07:41 AM
yes i am able to ssh from server2 (which is on same subnet) to server1
... View more
01-01-2014
02:37 AM
Hi, I have cisco ASA in transparnt mode with the below setup: PC ------- ASA --------- Server1 I am trying to allow ssh from PC to Server1 through ssh, i have add access-list to allow port 22 and from PC i am able to telenet to port 22, but when i establish ssh session nothing happen, the server is not responding, on putty i can see black screen with no errors. to troubleshoot i login to another server2 in same subnet of server1 and establish ssh session sucssufuly. thanks for help
... View more
Labels:
12-29-2013
07:39 PM
Hi Mike, I am asked to do it with prefix-list, not route map. Is it possible to achieve it ?
... View more
12-28-2013
09:30 PM
Hi, R1 (Area 0 )---------- ASA -----------(Area 1) R2 3.3.3.3 4.4.4.4 I want to apply prefix-list to OSPF process 1 on cisco ASA which deny advertising 3.3.3.3 and 4.4.4.4 prefix-list abc deny 3.3.3.3/24 prefix-list abc deny 4.4.4.4/24 prefix-list abd permit 0.0.0.0/0 le 32 router ospf 1 network 1.1.1.1 255.255.255.0 area 0 network 2.2.2.2 255.255.255.0 area 1 area 0 filter-list prefix abc in i have apply these config but still in routing table of R2 i can see 3.3.3.3 and 4.4.4.4.
... View more
Labels:
12-28-2013
12:51 AM
Hi Singh, there is one more requirment which is i want to access the server on port base https://www.xyz.com:9000 what is the way to allow port 9000 and another port 9001 ? thanks
... View more
12-27-2013
08:32 AM
Hi, This is the first time i am configuring cisco ACE for SSL offloading, i need help in accomplish this task. i have router outside which nat public ip to vip on ace. i want to configure ssl offloading on ace and after ACE traffic to pass as clear text port 80. i have purchased public certifcate and install it on ACE, internal server is not yet ready . How i can verify my config. , Is this correct , first i dont want to apply any filter or any L7 inspection ? How to test it before the server is ready ? rserver host Host1 ip address 1.1.1.1 conn-limit max 4000000 min 4000000 probe HTTP inservic serverfarm host SF1 probe HTTP rserver Host1 conn-limit max 4000000 min 4000000 inservice sticky ip-netmask 255.255.255.255 address source STICKY timeout 60 timeout activeconns serverfarm SF1 ssl-proxy service ID1 key KEY1.PEM cert ID1.pem chaingroup ID class-map match-all VIP_ID 2 match virtual-address 1.1.1.2 tcp eq https policy-map type loadbalance first-match VIP_ID-l7slb class class-default sticky-serverfarm STICKY policy-map multi-match Client-side-VIP class VIP_ID loadbalance vip inservice loadbalance policy VIP_ID-l7slb nat dynamic 2 vlan 11 ssl-proxy server ID1 show crypto certificate all ID1.pem: Subject: /serialNumber=*********** Issuer: ******* Not Before: Nov 20 08:33:55 2013 GMT Not After: Nov 21 10:53:19 2016 GMT CA Cert: FALSE
... View more
Labels:
11-05-2013
06:40 AM
thx Jouni, can u share good tutorial for such config ? thxxxxxxxxxxxxxxxxxx
... View more
11-05-2013
06:34 AM
ciscoasa# sh run : Saved : ASA Version 8.4(2) interface GigabitEthernet0 nameif inside security-level 100 ip address 192.168.1.2 255.255.255.0 ! interface GigabitEthernet1 nameif outside security-level 0 ip address 192.168.2.2 255.255.255.0 ! interface GigabitEthernet2 shutdown no nameif no security-level no ip address ! interface GigabitEthernet3 shutdown no nameif no security-level no ip address ! interface GigabitEthernet4 shutdown no nameif no security-level no ip address ! interface GigabitEthernet5 shutdown no nameif no security-level no ip address ! ftp mode passive object network out host 192.168.2.1 object network in host 192.168.1.1 object service 80 service tcp destination eq www object service 8080 service tcp source eq 8080 object network R1 host 192.168.2.1 access-list l extended permit ip any any pager lines 24 logging enable logging buffered debugging mtu inside 1500 mtu outside 1500 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 ! object network R1 nat (outside,inside) static 192.168.2.1 service tcp www 8080 access-group l in interface outside timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 dynamic-access-policy-record DfltAccessPolicy user-identity default-domain LOCAL no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept
... View more
11-05-2013
06:20 AM
Hi, same thing i am getting R2#telnet 192.168.1.1 8080 Trying 192.168.1.1, 8080 ... % Connection refused by remote host %ASA-6-302013: Built outbound TCP connection 53 for ouside:192.168.1.1/8080 (192.168.1.1/8080) to inside:192.168.2.1/55789 (192.168.2.1/55789) %ASA-6-302014: Teardown TCP connection 53 for ouside:192.168.1.1/8080 to inside:192.168.2.1/55789 duration 0:00:00 bytes 0 TCP Reset-O %ASA-7-609002: Teardown local-host inside:192.168.2.1 duration 0:00:00 %ASA-7-609002: Teardown local-host ouside:192.168.1.1 duration 0:00:00
... View more
11-05-2013
06:11 AM
%ASA-6-302013: Built inbound TCP connection 46 for ouside:192.168.2.1/42377 (192.168.2.1/42377) to inside:192.168.1.1/8080 (192.168.1.1/8080) %ASA-6-302014: Teardown TCP connection 46 for ouside:192.168.2.1/42377 to inside:192.168.1.1/8080 duration 0:00:00 bytes 0 TCP Reset-I
... View more
11-05-2013
06:11 AM
%ASA-6-302013: Built outbound TCP connection 44 for ouside:192.168.2.1/8080 (192.168.2.1/8080) to inside:192.168.1.1/29489 (192.168.1.1/29489) %ASA-6-302014: Teardown TCP connection 44 for ouside:192.168.2.1/8080 to inside:192.168.1.1/29489 duration 0:00:00 bytes 0 TCP Reset-O
... View more
02-15-2014
Hi nkumarsr,I have cretaed tcp string signature for ports 9001, 9090and
also i have added it in buil...
02-11-2014
Hi,I want to create custom signature to produce alert whenever any
machine lunches TOR application, ...
01-18-2014
Hi, I have asa with policy map below when ever anybody wants to upload
large file it drops after som...
01-01-2014
Hi,I have cisco ASA in transparnt mode with the below setup:PC -------
ASA --------- Server1I am try...
12-29-2013
Hi Mike,I am asked to do it with prefix-list, not route map.Is it
possible to achieve it ?
12-28-2013
Hi,R1 (Area 0 )---------- ASA -----------(Area 1) R23.3.3.34.4.4.4I want
to apply prefix-list to OSP...
12-28-2013
Hi Singh,there is one more requirment which is i want to access the
server on port basehttps://www.x...
12-27-2013
Hi,This is the first time i am configuring cisco ACE for SSL offloading,
i need help in accomplish t...
11-05-2013
ciscoasa# sh run: Saved:ASA Version 8.4(2)interface GigabitEthernet0
nameif inside security-level 10...
11-05-2013
Hi, same thing i am gettingR2#telnet 192.168.1.1 8080Trying 192.168.1.1,
8080 ...% Connection refuse...
11-05-2013
%ASA-6-302013: Built inbound TCP connection 46 for
ouside:192.168.2.1/42377 (192.168.2.1/42377) to i...
Public Statistics
| Date Registered | 01-30-2010 11:13 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 202 |
| Total Helpful Votes Received | 5 |
