About Karsten Iwen

Karsten Iwen · 03-12-2026

I just learned something new today in the Enterprise Networking Webex group:https://documentation.meraki.com/Platform_Management/Product_Information/Licensing/Meraki_Licensing/Cisco_Cloud_Entitlement_for_DNANo extra license needed for Catalyst Cloud ...

Karsten Iwen · 01-01-2026

Just in case you use the dashboard to determine if your devices are End of Sale or Support:It's not always accurate.

Karsten Iwen · 11-03-2025

And not only that one: https://blogs.cisco.com/networking/the-future-of-wireless-built-on-cisco-powering-the-ai-era

Karsten Iwen · 05-01-2025

Hi all,How do I enable this additional Insight information for the Organization Summary?This is how it looks for me:Have a great day, Karsten

Karsten Iwen · 02-12-2025

Well, kind of ... https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/wireless-9172-series-access-points-ds.htmlFor general use, I still hope for a 9174I.

Karsten Iwen · 05-06-2026

This is, in fact, a little bit more complex. ESP itself supports multicast. But the implementation needs to include some controls. For policy-based VPNs, Cisco never implemented them. But for route-based VPNs, it is a standard, supported feature used...

Karsten Iwen · 05-02-2026

Can't wait to be there. Already counting down the days! 

Karsten Iwen · 05-02-2026

The Firewall will decrypt the traffic if it's the Peer of the IPsec connection. If you use IKE, the whole use case is that no one can decrypt it. The DH exchange ensures that a passive attacker cannot calculate the session keys. The only attack vecto...

Karsten Iwen · 05-01-2026

As already mentioned in your link, the Wireshark option is only for manual IPsec configuration which is only usefull to learn IPsec, but is *never* used in real life. Here is an example:

Karsten Iwen · 04-30-2026

You are likely right with "no real benefit". Some of the Wi-Fi 7 features are nice, but also not world-shaking. When you enable GCMP-256 on your WPA3 SSID, a non-compatible client should just ignore it and connect with CCMP-128. The past has shown th...

Member Since	‎12-21-2006 02:52 PM
Date Last Visited	‎05-11-2026 12:37 AM
Posts	8,864
Total Helpful Votes Received	9498

User Statistics

User Activity

Cisco Cloud Entitlement for DNA

End of Sale / End of Support

The CW9174 shows up on the horizon

Organization Insight

Wi-Fi 7 becomes affordable

Re: IPsec not supporting Multicast

Re: Cisco Community at #CiscoLive Las Vegas 2026!

Re: Decrypting ESP Packet with Wireshark

Re: Decrypting ESP Packet with Wireshark

Re: GCMP 256 in Meraki