Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About bforan
08-12-2019
Stats
Member since
11-30-2004
24
Posts
1
Helpful
0
Solutions
10-19-2016
01:31 PM
I am experiencing the same problem. Did you come up with a fix for this? I was thinking of using DHCP option 60 to send the ccp.avaya.com.
... View more
05-05-2016
11:29 AM
I am running into the same issue, but I cannot seem to get my TACACS config to move down under RADIUS no matter my naming convention. Did you do any other trickery besides adding the Z in front?
... View more
03-09-2015
03:55 PM
We have two Tunnel interfaces configured on a router Tunnel0 and Tunnel1 running BGP. If Tunnel0 is consistenly bouncing over a set period of time and we received 5 BGP down messages in 180 seconds then shut, however first check the status of Tunnel1 and if down do nothing, but if up perform the shut on Tunnel 0. I am guessing that during the scripts actions there is a way to show int Tunnel1 and record/set a variable for the interface status that I can then check against before I shut down the problem interface.
... View more
Labels:
10-02-2014
04:31 PM
I have an extra L-ASA-VPNP-5540= License and I wanted to know if I could apply it to a ASA 5520. When I go to register the PAK to a Serial number it looks like it will work, but I have yet to hit submit. Anyone know if you can apply this license to a different model ASA?
... View more
Labels:
01-24-2011
10:22 AM
Created by
bforan
in Other Security Subjects
in Other Security Subjects
09-24-2008
01:04 PM
09-24-2008
01:04 PM
Looking for feedback on using a Cisco 7206 to terminate Lan-to-Lan tunnels and using same 7206 has EasyVPN server. Are there any issues with doing this?
... View more
Labels:
09-21-2006
11:57 AM
Is the VPN Lan-to-Lan functionality disabled when enabling multi mode on the pix? I am running version 7.21. If not disabled please point me in the right direction. Thanks, Brian
... View more
Labels:
Created by
bforan
in Other Security Subjects
in Other Security Subjects
01-14-2005
01:38 PM
01-14-2005
01:38 PM
Yes, there is already a connection established. PIXPRI(config)# show local-host x.x.x.7 Interface inside: 35 active, 70 maximum active, 0 denied I would assume that the manual command to clear is clear local-host <>, but that command didn't seem to change anything. B
... View more
01-14-2005
11:15 AM
I'm running version 6.3(3) on my pix. I've placed a new element into line 1 of the inbound access-list of my pix. This element is supposed to deny snmptrap traffic from a specific host. But, it fails to block the snmptraps coming from the blocked host. More background: -The Inbound ACL has over 100 other elements to it -The Inbound ACL is applied correctly -All other elements of the ACL work as epected -Turbo ACL enabled -No typos in the non-functioning element of the ACL I'm trying to figure out why these new elements don't take affect immediately. I'm not sure if this has happened before as ACL changes are not normally as critical as this particular one. Any thoughts would be appreciated. B
... View more
Labels:
12-23-2004
11:24 AM
Arun, On the pix, the command to use for backing up your config is actually: write net The 'copy tftp' is to copy over a new IOS from a tftp server. Hope this helps.
... View more
12-23-2004
09:43 AM
Now something strange has happened. At some point last night, that ACL statement started working and now has over 4000 hits. This is the expected behaivor. New question now....Why would it take several hours for an ACL to start working? Will turbo ACL cause this? I think I'll start a new thread with this question. Brian
... View more
12-22-2004
04:54 PM
Yes, the rest of the access-list is working fine. There are a bunch of other elements in it. I put this statement at the top so I knew it would get hits.
... View more
12-22-2004
04:21 PM
Here is how the traffic is flowing: 172.x.x.27->OutsidePix->InsidePix->SNMP Collector(192.x.x.11) The snmp traps aren't originating from the Pix itself, just passing through from the client to a server. 172.x.x.27 is the client and 10.x.x.15 is the server. The Pix doesn't have an interface on the 172.x.x.27 network. It's remote. The traps from 172.x.x.27 are getting through to the collector just fine. I want to stop them by adding an element to the ACL. access-list Inbound line 1 deny host 172.x.x.27 any eq snmptrap This should stop any traps originating at 172.x.x.27 from getting through the firewall. But it doesn't. Thanks.
... View more
12-22-2004
02:49 PM
When you say you have allowed "any", how did you do that? If you did this by allowing IP, then you may need to also allow ESP or AH, depending on the connection type and protocols in use by the Checkpoint client. Probably ESP will be needed, which is protocol 50. Which direction did you allow the traffic? ICMP and telnet will pass if you allow IP. As a troubleshooting step, you can also debug the firewall's outside interface and see what type of traffic is coming and going to/from the client and the other end. Let me know if this helps.
... View more
03-20-2019
Supposedly the following Syntax works on other TACACS platforms but I
have not been able to get the ...
03-19-2019
I am trying to setup TACACS on some older Brocade switches running 7.4
OS. I have configured one att...
Created by
bforan
in Identity Services Engine (ISE)
03-15-2017
03-15-2017
We are looking to move one of our DataCenters to the AWS cloud. Within
this DC we terminate SSL VPNs...
10-19-2016
I am experiencing the same problem. Did you come up with a fix for this?
I was thinking of using DHC...
Created by
bforan
in Identity Services Engine (ISE)
05-10-2016
05-10-2016
Yup, I do have the AAA Server Group for that specific Tunnel-Group set
as RADIUS:tunnel-group SSL-NE...
Created by
bforan
in Identity Services Engine (ISE)
05-10-2016
05-10-2016
This seems like it should be a no brainer for ISE to handle, but I can't
seem to get an answer from ...
05-05-2016
I am running into the same issue, but I cannot seem to get my TACACS
config to move down under RADIU...
Created by
bforan
in Identity Services Engine (ISE)
05-03-2016
05-03-2016
That makes perfect sense, Thank you. I have added the rules for both 80
and 443 to the DACL and the ...
Created by
bforan
in Identity Services Engine (ISE)
05-02-2016
05-02-2016
On our ASA we have over a 100 group policies and each group policy has
their own ACL(vpn-filter). Du...
03-09-2015
We have two Tunnel interfaces configured on a router Tunnel0 and Tunnel1
running BGP. If Tunnel0 is ...
10-02-2014
I have an extra L-ASA-VPNP-5540= License and I wanted to know if I could
apply it to a ASA 5520. Whe...
01-24-2011
Is there a way to monitor the availability or usage of Local IP pools on
an ASA? Maybe an OID string...
Created by
bforan
in Other Security Subjects
09-24-2008
09-24-2008
Looking for feedback on using a Cisco 7206 to terminate Lan-to-Lan
tunnels and using same 7206 has E...
Public Statistics
| Date Registered | 11-30-2004 05:28 PM |
| Date Last Visited | 08-12-2019 01:50 PM |
| Total Messages Posted | 24 |
| Total Helpful Votes Received | 1 |
