I want to send emails when a firewalls with vpn detects that a VPN is down. I have this message in the cisco asa buffer: 4|Nov 21 2016 12:04:32|113019: Group = 190.81.188.124, Username = 190.81.188.124, IP = plm-sdu-gsni-1-internet, Session disconnected. Session Type: LAN-to-LAN, Duration: 0h:07m:43s, Bytes xmt: 25740, Bytes rcv: 25740, Reason: Lost Service I also receive this message as an email: <163>Nov 21 2016 12:04:32 plm-cagw-gsni-10 : %ASA-3-713123: Group = 190.81.188.124, IP = 190.81.188.124, IKE lost contact with remote peer, deleting connection (keepalive type: DPD) But I would like to receive the message using the name , not the IP address. How can I do that? This is part of my configuration: name 190.81.188.124 plm-sdu-gsni-1-internet logging enable logging timestamp logging list lista01 level informational class vpn logging list lista01 message 713259 logging buffer-size 128000 logging console warnings logging monitor warnings logging buffered warnings logging trap lista01 logging history warnings logging asdm debugging logging mail lista01 logging from-address tu_amigo_el_cagw10@ecampus.com.pe logging recipient-address slizarraga@pe.ibm.com level errors logging recipient-address jnahuero@pe.ibm.com level errors logging device-id hostname logging host sbb ir-syslog logging class auth buffered debugging logging class webvpn buffered debugging logging class svc buffered debugging logging class ssl buffered debugging logging message 111009 level errors ... View more

I have a 3750X stack in my datacenter that is connected with two interface to an Alcatel Core Switch. I have one interface in shutdown state and the other up, so all traffic goes through this last interface. My Cisco stack runs MSTP and the Alcatel switch runs RSTP. Last weekend I changed the mode in the Cisco stack to RSTP but I lost communication with the Alcatel switch. The port that connected to the Alcatel switch showed in blocked mode. Is there any compatibility issue or special command I need to configure in order to get this 2 devices to talk and work correctly? Thanks for your help!! This is the port configuration: interface TenGigabitEthernet1/1/1 switchport trunk allowed vlan 101,116-119,125,231,950 switchport trunk encapsulation dot1q switchport trunk native vlan 231 switchport mode trunk load-interval 30 no cdp enable end ... View more

I am using an ACS that uses an external identity store which is an AD server, I have configured to use LDAP. I want to limit the max sessions per user and per group, but the limit only works on the Identity Groups, and non of my users are in Identity groups.  I thought I had 2 options:  - Limit in my external identity store (it seems not possible)  - Associate my LDAP groups to my Identity group How can I implement the 2nd option?? Thanks for your help!! (I saw a forum note that ask pretty much the same, but the link does not show how to make this association).  I have an attach with more info. ... View more

I have many users in the ACS that are used by a site-to-site VPNs, they are VPNs from different customers. I would like my customers to be able to change their users passwords by themselves. I am able to create the changeuserpassword role in the ACS, but it has access to change any users password. Is there a way that I can restrict the administrator so it can only change (and see), the passwords of SOME of the users? thanks!! ... View more

I have inserted a C3850-NM-10G module in a WS-C3850-48T but the ports are not being recognized by the switch. I obtained this log: *Jun 21 18:00:31.577: %PLATFORM_PM-6-FRULINK_UNKNOWN_INSERTED: Unsupported FRU module inserted in slot 1 This is the os version of the switch: Switch Ports Model SW Version SW Image Mode ------ ----- ----- ---------- ---------- ---- * 1 56 WS-C3850-48T 03.07.03E cat3k_caa-universalk9 INSTALL 2 56 WS-C3850-48T 03.07.03E cat3k_caa-universalk9 INSTALL It is strange because I also tried with a similar module in a WS-C3850 3.03.05 version and it worked allright. Thanks for your help! ... View more

I bought a N9K-C9372PX-E= by mistake. It is similar to N9K-C9372PX-E (without "=") ,  because the the first one (with "=") is a spare, that does not include installation kit, power supply or fans. I am buying those 3 parts, buy I want to check if I need to also buy the software / license for the devices, I want to use it with NX-OS (not for SDN). Thanks for your help! ... View more

Hello,   I want to know the steps needed to enable TLS.   This is the scenario:   The ESA is used as a relay from an internal host (no TLS needed). All the emails coming from this internal hosts use the same source domain. The ESA is configured to use a public relay (Google Mail) from the Internet, for all the emails coming from this internal host, this is configured by an outgoing content filter. TLS is needed in this part of the communication.   I have created the SMTP authentication profile and I used it in the listener.   I also enabled it in the mail flow policy.   Do I need something else?   I really want to be sure if I need any more configuration.   In the tests I make, I get this answer:   Double bounce: Message 94130457 to BASIS@quimtia.com. Reason: 5.1.0 - Unknown address error 550-"5.1.1 The email account that you tried to reach does not exist. Please try\\n5.1.1 double-checking the recipient\'s email address for typos or\\n5.1.1 unnecessary spaces. Learn more at\\n5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 lq5si6916488igb.63 - gsmtp"   thanks for your help!         ... View more

Hello, I have a router (6506-E) that will have  many VRFs. I need to pass traffic from a common segment (in the global routing table) to all VRFs, it is for monitoring and managing from a socks server. I really prefer not to enable the BGP and / or OSPF process.   I made some test using route target, but the routes are not learned in the VRF routing table.   Is there a way of doing that without enabling the BGP or OSPF processes? I am attaching part of the configuration.   thanks!! ... View more

I am unable to recevie emails from the domain vigarza.com, and the sender receives this message:   554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.   When I use the message tracking, I have no record of this email; thats probably because it is blocked before smtp protocol starts, just in the tcp connection.   How can I track the IP address of the sender, in order to except it from the reputation filter? Which look should I look for? Thanks!!   Sergio ... View more