About ghostinthenet

ghostinthenet · 07-12-2016

Introduction Midmarket and small business branch installations often present some unique problems and access for remote support can be a prevalent one. This is especially true when one wants to avoid opening unnecessary access from the Internet. Perm...

ghostinthenet · 04-07-2016

I'm working on an EEM applet (but may migrate to a TCL script if it becomes necessary) to capture a combination of events. event manager environment _port1 42195 event manager environment _port2 53429 event manager environment _port3 53429 ! event ma...

ghostinthenet · 01-05-2016

I'm wondering if anyone has found a workaround for this problem. In order to be PCI DSS compliant, TLS 1.0 must be completely disabled on Internet-facing devices by June of this year. This is actually a bit of a misstatement because PCI scanning serv...

ghostinthenet · 07-19-2015

We're in the process of migrating from an IOS-based AnyConnect SSL access VPN architecture to an ASA-based one.Everything appears to be working correctly except for one thing. We use a RADIUS-defined split-include setting to ensure that certain users...

ghostinthenet · 10-29-2014

Has anyone noticed that the "Answer Questions" page isn't updating, or is it just me? It doesn't matter which device I sign in from, the newest question is listed as: Configuring Secure LDAP in CUCM 8.6 Hi,I have 2 clusters of CUCM version 8.6 depl...

ghostinthenet · 04-19-2019

Addressing point-by-point. > 1. On my topology (attached) is their an STP issue? There is no redundant> path, everything is just one direct line as it is. There's no specific issue with your STP here, but your ISP is complaining because they don't wa...

ghostinthenet · 03-07-2018

If all of the addresses provided are public, no NAT is required. You have a /30 facing the Internet provider, so if your WAN interface is .214, then your gateway is .213. ip route 0.0.0.0 0.0.0.0 x.x.x.213

ghostinthenet · 03-07-2018

That should already be attached to your WAN interface.

ghostinthenet · 03-07-2018

That's fairly easy to accomplish. Just attach the /29 to a loopback interface and source the tunnel off of that. interface Loopback0 ip address x.x.x.x 255.255.255.248 ! interface Tunnel0 tunnel source Loopback0

ghostinthenet · 03-06-2018

Odd. We're using different sequence crypto maps for redundancy at a couple of customers and they're working just fine. Admittedly, we're not using IKEv2, so that may change things up somewhat.

Member Since	‎10-08-2006 07:43 PM
Date Last Visited	‎10-19-2022 08:33 AM
Posts	631
Total Helpful Votes Received	438

User Statistics

User Activity

You Can't Try It If You Don't Knock It

Variable preservation and pulling results from multiple triggers.

IOS and IOS-XE AnyConnect, TLS 1.0 and PCI DSS Compliance

RADIUS-defined split-include on ASA

"Answer Questions" page not updating?

Re: Access mode port to access mode port with different VLAN each, possible to allow traffic??

Re: Basic Routing question

Re: Basic Routing question

Re: Basic Routing question

Re: VPN redundancy - backup peer with different ASA?