About the-lebowski

the-lebowski · 01-13-2026

Can someone help me figure this out? Unable to ssh from C9300 to a C1000 and it complains about hmac, kex and pretty much everything else. I am not clear on what I need to change, server/client on either to allow this to work? %SSH-3-NO_MATCH: No m...

ASA SAML multiple profiles not working · 11-05-2025

I have a working SAML configuration via OKTA tied to a tunnel-group called tunnel-01. It has its own entity ID and certificate which works fine. We have a request for an additional SAML connection profile using OKTA which we have no luck getting wo...

the-lebowski · 10-27-2025

Can someone please help me figure out why NTP is not being allowed when this ACL is applied inbound on the internet facing interface? everything else works but NTP broke and not sure why. interface GigabitEthernet0/0/0 ip address 1.2.3.4 6.7.8.9...

the-lebowski · 09-16-2025

Having a problem with a new site with the far end behind a firewall. Tunnel interface is up/up, routes are there but nothing is being encapsulated across the tunnel. I see decaps but no traffic passing from hub to spoke. I cannot ping the far end ...

the-lebowski · 08-01-2025

Can someone help me understand what is happening here? no matching proposal from both sides then the hub immediately request deletes and no luck figuring out why. Debugs and relevant configs are below. *Aug 1 21:32:09.155: IKEv2:(SESSION ID = 190,SA...

the-lebowski · 01-13-2026

Not a C1200/1300 its a C1000-48P-4X-L.

the-lebowski · 11-05-2025

Blowing away the trustpoint and re-creating it (via cli) seems to have fixed the issue. Why or how I don't know but its working as it should.

the-lebowski · 11-05-2025

Also getting this error message via ASDM when attempting to auth via vpn-02.Failed to consume SAML assertion. reason: The profile cannot verify a signature on the message.

the-lebowski · 10-27-2025

@Joseph W. Doherty Can you give me an example? What is odd is that nothing changed and that ACL is in use across our environment all using some form of NTP or another but it only broke here which is odd. I don't want to limit to a specific server ...

the-lebowski · 10-27-2025

Added and appears to be working now but not clear why I needed that statement as well?show ntp status Clock is synchronized, stratum 5, reference is 128.199.169.185 nominal freq is 250.0000 Hz, actual freq is 250.0113 Hz, precision is 2**10 209 pe...

Member Since	‎05-31-2006 06:40 AM
Date Last Visited	‎01-14-2026 12:56 AM
Posts	360
Total Helpful Votes Received	81

User Statistics

User Activity

Nested SSH from C9300 to C1000

ASA SAML multiple profiles not working

NTP ACL not working

IKEv2 tunnel not encapsulating traffic

IKEv2 "Received Policies: : Failed to find a matching policy"

Re: Nested SSH from C9300 to C1000

Re: ASA SAML multiple profiles not working

Re: ASA SAML multiple profiles not working

Re: NTP ACL not working

Re: NTP ACL not working