Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About lcaruso
07-04-2018
Stats
Member since
10-22-2001
927
Posts
61
Helpful
9
Solutions
03-25-2016
07:20 AM
Hi,
On a 4507R+E chassis with 4712 linecards, I need show which ports are mapped to which ASICs.
Help is appreciated.
Thanks.
... View more
- Tags:
- 4712 4507 ASIC
Labels:
FWIW...
I have an 887VA and VDSL2 (PTM) from an ISP working.
They don't use PPPoE so I'm not sure this will help any that require it.
All I had to stop using ATM interfaces and use interface E0
(no subinterface as recommended elsewhere) and then
controller vdsl 0
operating mode vdls2
... View more
02-18-2016
04:53 PM
That's the key point, isn't it...thanks for jogging my memory
As long as your ASA can get to your clients and your WCCP server via the same interface (inside)
... View more
02-18-2016
02:36 PM
Hi,
I recall reading wccp can only redirect to the ASA inside.
On the new 5506 that have no switch ports, this creates an issue where a webfilter was directly connected previously and obviously cannot now.
Is that wccp restriction truly only inside? Can I have it redirect to another interface that is a dedicated connection to a webfilter?
thanks.
... View more
- Tags:
- wccp asa webfilter
Labels:
02-16-2016
04:45 AM
Thanks for confirming. Don't always have time to re-read the docs.
... View more
02-15-2016
08:29 PM
Hi,
I"m looking to confirm that NAT is not needed when crossing ASA interfaces; for example, when going from an inside interface (sec 100) to a dmz interface (sec 50) and back.
Back when NAT was required to cross ASA interfaces, I know there were different setups like exemption and hiding, but I thought it was possible now to just let traffic go across the interfaces and all that is needed is ACLs.
Don't have a test unit at the moment and need to make some changes that will work the first time.
Thanks for your input.
... View more
- Tags:
- ASA NAT
Labels:
02-09-2016
04:13 PM
Hi,
Looking for a way to avoid using separate objects that are already in an object-group for dynamic nat outbound via interface.
object network one subnet 10.0.0.0 255.0.0.0 object network two subnet 172.16.0.0 255.240.0.0 object-group network one-two network-object object one network-object object two ! don't want this object network one nat (inside,outside) dynamic interface object network two nat (inside,outside) dynamic interface ! want this but it does not parse object-group network one-two nat (inside,outside) dynamic interface
... View more
- Tags:
- NAT Object-Group
Labels:
Hi Larry,
TLS v1.1 is not supported by the Anyconnect client v3.x . For you will have role back to TLS v1.0.
Regards,
Gurjot Singh
Cisco TAC
... View more
11-17-2015
08:54 AM
Hi,
I'm attempting to get an ASA to PCI compliance so TLS v1.0 cannot be used.
When I disable TLS v1.0 and enable TLS v1.1, AnyConnect v3.x clients cannot connect
AnyConnect v4.x clients (which require a preimum license) can connect.
Is there a solution without having to upgrade to an AnyConnect Premium license?
Thanks.
... View more
- Tags:
- TLS AnyConnect
Labels:
08-10-2015
11:13 AM
Originate only would be used on an ASA with a DHCP assigned address that then has a site to site tunnel with another site setup for dynamic tunnel negotiation. This is used with the originate only site is DHCP assigned address instead of static. There's no way for the other end to know ahead of time what the ip address will be so it cannot originate traffic.
... View more
07-09-2015
03:35 PM
Hi, I have been told one cannot do this... NAT inbound from one public ip address to two separate internal email server addresses ss required for failover. This is specifically just for OWA/https and not SMTP. Is there a NAT solution that would be applicable for this requirement?
... View more
- Tags:
- nat
Labels:
Created by
lcaruso
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
06-29-2015
12:42 PM
06-29-2015
12:42 PM
Hi, I'm trying to validate this IPS is working. I've been using NMAP on various host addresses within the ASAs outside range as well as the interface address and no events are being generated. I opened a ticket with TAC and so far they cannot tell me if this is expected or not. The question is will NMAP trigger signatures in the IPS signature database? Anyone know? Thanks.
... View more
- Tags:
- IPS NMAP
Labels:
06-17-2015
05:55 PM
Hi, Anyone know for certain if S170 can do Etherchannel to a Cisco switch? Thanks.
... View more
- Tags:
- IronPort WSA S170
Labels:
03-25-2016
Hi, On a 4507R+E chassis with 4712 linecards, I need show which ports
are mapped to which ASICs. Hel...
02-18-2016
That's the key point, isn't it...thanks for jogging my memory As long as
your ASA can get to your cl...
02-18-2016
Hi, I recall reading wccp can only redirect to the ASA inside. On the
new 5506 that have no switch p...
02-15-2016
Hi, I"m looking to confirm that NAT is not needed when crossing ASA
interfaces; for example, when go...
02-09-2016
Hi, Looking for a way to avoid using separate objects that are already
in an object-group for dynami...
11-17-2015
Hi, I'm attempting to get an ASA to PCI compliance so TLS v1.0 cannot be
used. When I disable TLS v1...
08-10-2015
Originate only would be used on an ASA with a DHCP assigned address that
then has a site to site tun...
07-09-2015
Hi,I have been told one cannot do this... NAT inbound from one public ip
address to two separate int...
06-29-2015
Hi,I'm trying to validate this IPS is working. I've been using NMAP on
various host addresses within...
Public Statistics
| Date Registered | 10-22-2001 08:19 AM |
| Date Last Visited | 07-04-2018 12:05 AM |
| Total Messages Posted | 927 |
| Total Helpful Votes Received | 61 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 10 | |
| 5 | |
| 5 |
.jpg "VIP Mentor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
Helpful Votes From
