Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About CiscoNutt
Stats
Member since
10-03-2011
77
Posts
5
Helpful
0
Solutions
02-05-2018
05:35 AM
Thanks for your replies. Yes I have tried to both restart AnyConnect (by quiting out of it) and restarted PC with no success. It keeps coming up with the previous profile I had there. I deleted it thinking there might be a conflict of sorts and then saved the new profile to same location as I mentioned above, but it keeps just showing the old profile in the AnyConnect client that I deleted, and not the new one.
This is just a regular VPN profile to force the AnyConnect VPN to use machine certificate. no NAM involved.
... View more
02-05-2018
03:18 AM
I am trying to import / copy an AnyConnect client profile to my PC to test machine certificate authentication. However this Profile does not show up as a selection in the dropdown list of AnyConnect Secure Mobility Client.
I have copied it to C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile
Any ideas why this is not working as I expect and how to solve it? AnyConnect version 4.3.02039
... View more
Labels:
Created by
CiscoNutt
in VPN and AnyConnect
in VPN and AnyConnect
02-04-2017
12:01 PM
02-04-2017
12:01 PM
We are looking at implementing two factor authentication into our RA VPN setup. As of today we have the ASA authenticating sending authentication requests to an ACS which in turn maps users to different group-policies based on AD attribute values.
So, I am wondering how I would go about setting up the two factor authentication with MFA Azure?
I would think that I would setup the ASA to authenticate to Azure and then Azure would forward the authentication request to ACS. But I would like confirmation on this and if my understanding is not correct please let me know what I would need to do to get this working.
Thanks in advance.
... View more
Labels:
01-06-2017
02:12 AM
But how does GET VPN rekey work. Does the KS send rekey at the same time to all GMs or do the GMs get the rekey at different intervals?
... View more
01-04-2017
12:22 AM
1) I am replacing the primary KS
2) all GMs are registered with the primary KS
Doing what you suggest is not a an option to remove the secondary from the network at this point in time, which is why the secondary is not going to be replaced for the near future.
Is there anyway to force or manually trigger a rekey on the KS?
... View more
01-03-2017
05:56 AM
Your problem is split-horizon on the hub. Turn it off and then you should be able to send traffic spoke to spoke.
interface Virtual-Template1 type tunnel
no ip split-horizon
--
Please remember to select a correct answer and rate helpful posts
... View more
01-03-2017
05:33 AM
I was wondering if anyone had any tips for replacing a GET VPN key server. It is setup in a high availability environment with two key servers at different locations. The secondary key server is running IOS version 12.4 and the new primary will be running 15.3. just one of the key servers will be replaced at this time as there are some IP addressing issues when we will be replacing the secondary.
Is it just replace the key server and let the rekey happen? If this is the case I would have to assume that alle the GMs rekey at around the same time or the will be a communication problem. Or I would need to jump in on all the GMs to clear the VPN tunnel (which is what I am trying to avoid). Last time I replaced a key server this is what I had to do. I have exported the old RSA key and imported it to the new KS. Again last time I did this the whole network went down due to mismatch SAs when rekey happened and I had to manually go and clear the VPN on all the GMs (about 30). it is just a pain having to do that and
Any suggestions on how to do this with zero, or minimal down time, and not too much administrative interference would be great.
Thanks.
... View more
Labels:
12-13-2016
03:24 AM
I know what the traffic is I was just curious as to the number after UDP which Karsten has answered for me.
Just FYI, the traffic is generated by a trojan (torrentlocker)
... View more
12-13-2016
03:22 AM
Ok. Thanks, odd thing is that in Wireshark the length is shown as 54, so I can only assume that wireshark shows an 8 bit header aswell?
... View more
12-12-2016
05:45 AM
I have a packet capture output and am wondering about the number (46) that comes after udp. What does this indicate? I can find no reference to it in wireshark.
1: 08:35:39.635251 802.1Q vlan#9 P0 10.3.2.7.63325 > 146.112.61.107.53: udp 46
... View more
Labels:
07-19-2016
01:00 PM
No one can confirm that the ASA5515 fan is or is not replaceable?
... View more
07-19-2016
06:49 AM
From the looks of it, the fan in the ASA5515 is built in and not replaceable. Is this correct? I can only find fan replacements for the old 5510, 5520, etc.
Can anyone confirm this?
... View more
Labels:
04-20-2015
03:43 AM
WS-C3750X-24 - 12.2(53)SE2 WS-C2960S-48LPS-L - 12.2(53)SE2 WS-C2960S-48LPD-L - 12.2(53)SE2
... View more
04-17-2015
01:16 AM
I have seen it on the following platforms: WS-C3750X-24 WS-C2960S-48LPS-L WS-C2960S-48LPD-L All had the same error message on the same date (march 3).
... View more
02-05-2018
Thanks for your replies. Yes I have tried to both restart AnyConnect (by
quiting out of it) and rest...
02-05-2018
I am trying to import / copy an AnyConnect client profile to my PC to
test machine certificate authe...
Created by
CiscoNutt
in VPN and AnyConnect
02-04-2017
02-04-2017
We are looking at implementing two factor authentication into our RA VPN
setup. As of today we have ...
01-06-2017
But how does GET VPN rekey work. Does the KS send rekey at the same time
to all GMs or do the GMs ge...
01-04-2017
1) I am replacing the primary KS 2) all GMs are registered with the
primary KS Doing what you sugges...
01-03-2017
Your problem is split-horizon on the hub. Turn it off and then you
should be able to send traffic sp...
01-03-2017
I was wondering if anyone had any tips for replacing a GET VPN key
server. It is setup in a high ava...
12-13-2016
I know what the traffic is I was just curious as to the number after UDP
which Karsten has answered ...
12-13-2016
Ok. Thanks, odd thing is that in Wireshark the length is shown as 54, so
I can only assume that wire...
12-12-2016
I have a packet capture output and am wondering about the number (46)
that comes after udp. What doe...
07-19-2016
From the looks of it, the fan in the ASA5515 is built in and not
replaceable. Is this correct? I can...
Public Statistics
| Date Registered | 10-03-2011 03:42 AM |
| Date Last Visited | 02-12-2018 10:42 PM |
| Total Messages Posted | 77 |
| Total Helpful Votes Received | 5 |
.jpg "VIP Advocate"){kind=icon}
