About kerstin-534

kerstin-534 · 04-19-2023

We need Trustsec SXP to ASA via Internet facing Interface for using Security Group Tags in access control lists.VPN is encrypting traffic to outside interface, the whole SXP connection is encrypted.Has somebody success in this scenario ? We can see o...

kerstin-534 · 11-08-2022

brandnew 9130AX with 17.6.4.56 cannot do 9800 controller with IOS-XE 17.3.5.42.There is a loop see in console:Discovery Response from 10.x.x.xDiscovery response from MWAR 'wlc1' running version 17.3.5.42 is rejected.Failed to decode discovery respons...

kerstin-534 · 08-22-2022

Can somebody help me ? IPSEC throughput is catastrophic.I have seen that the hardware accelerator is not enabled, how it is enabled ?ciscoasa(config)# sh inventoryName: "module 0", DESCR: "Firepower 2110 Appliance, 1RU, 12 GE, 4 xSFP, 1 MGMT"PID: FPR...

kerstin-534 · 07-21-2022

Can somebody help me.We have changed ASA 5512-X to FPR 2110. There is a IPSEC tunnel running on it.Here is the throughput with ASA5512-X one parallel flow. This is inbound to ASA5512-XEncryption Settings belowProtocol : IKEv1 IPsecEncryption : IKEv1:...

kerstin-534 · 07-20-2022

Brandnew FPR 2110 with ASA Image 9.14.1 on it boots after each reload into ROMMON. Reimaged it with last 9.14.4 interim release, did not resolve the problem. Since there is no configuration register as on classic ASA I don't know how to persuade devi...

kerstin-534 · 04-19-2023

There is no ISE, this is DC environment with Nexus 9000. There is also no ASAv. This is Firepower 2100.

kerstin-534 · 03-02-2023

Index of AP cannot change, it is simply the decimal notation of the base radio MAC addresse.g.Index = 240.29.45.77.90.64 (in Hex F01D.2D4D.5A40 = Base Radio MAC)

kerstin-534 · 01-18-2023

"no space left on device" problems can be resolved with TAC and only with TAC. They do such commandfirepower-1010(local-mgmt)# secure-loginChallenge String (Please copy everything between the asterisk lines exclusively) :****************************...

kerstin-534 · 01-13-2023

We have similar problems with the Firepower 1010. They do not reboot themselves, but if we reboot them they don't come up, even if the internal linux /var/log/messages isn't filled up as they usually do. We also consider to switch brand to get rid of...

kerstin-534 · 01-04-2023

I have set backup time to 5:00 pm and have done "psn/admin# debug backup-restore backup 7"There happens nothing at all. Cisco ISE sleeps.I have same backup setup/configuration with ISE 2.6P12 without problems.

Member Since	‎08-04-2009 12:12 AM
Date Last Visited	‎04-21-2023 12:06 AM
Posts	152
Total Helpful Votes Received	51

User Statistics

User Activity

CTS SXP to outside Interface of ASA

CAPWAP Join issues with new 9130AX to 9800

how to enable Firepower 2100 crypto hardware accelerator

FPR 2110 slow IPSEC with ASA

Firepower 2100 boots into ROMMON

Re: CTS SXP to outside Interface of ASA

Re: SNMP AP Index

Re: FirePower 1010 ASA 'write error: No space left on device'

Re: Firepower 1010 reliability

Re: Cisco ISE 3.1 Automated backup configuration issue