Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Anukalp S
Stats
Member since
02-01-2013
501
Posts
4
Helpful
3
Solutions
03-30-2020
11:20 PM
Hello.. is there any possibility to update ACL remark on the top of ACL without removing and adding ACL. ip access-list extended VC_ACL remark Match_VC_Traffic ---------------- to be update permit udp any range 16384 32767 any dscp cs4 permit udp any range 49152 65535 any dscp cs4 RR#sh ip access-lists VC_ACL Extended IP access list VC_ACL 5 permit udp any range 16384 32767 any dscp cs4 10 permit udp any range 49152 65535 any dscp cs4
... View more
Labels:
03-25-2020
09:05 AM
Thanks Reza, sh boot show .bin, could also please confirm if i need to upgrade boot loader version also to upgrade IOS from 16.06.04 to 16.9.4, current bootloader version is 16.6.2r[FC1] OR will it auto upgrade. INDRCS01#show boot BOOT variable = bootflash:cat9k_iosxe.16.06.04a.SPA.bin; Configuration Register is 0x102 MANUAL_BOOT variable = no BAUD variable = 9600 ENABLE_BREAK variable does not exist ============================================ ROM: IOS-XE ROMMON BOOTLDR: System Bootstrap, Version 16.6.2r[FC1], RELEASE SOFTWARE (P) System image file is "bootflash:cat9k_iosxe.16.06.04a.SPA.bin" Last reload reason: PowerOn
... View more
03-25-2020
08:30 AM
Hi. Could you please confirm if below switch running in bundled or installed mode?.sh ver output dont display mode on the switch here. Also please confirm if bootloader Version 16.6.2r[FC1] will support IOS Version 16.9.4 as we are planning to upgrade it from Version 16.6.4a to Version 16.9.4. Cisco IOS XE Software, Version 16.06.04a Cisco IOS Software [Everest], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 16.6.4a, RELEASE SOFTWARE (fc3) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2018 by Cisco Systems, Inc. Compiled Fri 26-Oct-18 18:15 by mcpre Cisco IOS-XE software, Copyright (c) 2005-2018 by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. ROM: IOS-XE ROMMON BOOTLDR: System Bootstrap, Version 16.6.2r[FC1], RELEASE SOFTWARE (P) INDRCS01 uptime is 11 days, 10 hours, 20 minutes Uptime for this control processor is 11 days, 10 hours, 22 minutes System returned to ROM by PowerOn at 01:12:35 GMT Wed Nov 27 2018 System restarted at 02:55:32 GMT Thu Mar 14 2020 System image file is "bootflash:cat9k_iosxe.16.06.04a.SPA.bin" Last reload reason: PowerOn This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Technology Package License Information: ----------------------------------------------------------------- Technology-package Technology-package Current Type Next reboot ------------------------------------------------------------------ network-advantage Permanent network-advantage dna-advantage Subscription dna-advantage cisco C9407R (X86) processor (revision V01) with 1916969K/6147K bytes of memory.
... View more
Labels:
03-03-2020
08:54 PM
Hi Cristian, I gone through below link which you share and need some clarification. https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-vpn The VPN server receives an authentication request from a VPN user that includes the username and password for connecting to a resource, such as a Remote Desktop session. In this procedure anyconnect client send request to ASA with primary credentials. Acting as a RADIUS client, the VPN server converts the request to a RADIUS Access-Request message and sends it (with an encrypted password) to the RADIUS server where the NPS extension is installed. In this procedure, ASA converts request to Radius request and send to NPS server(Radius server) The username and password combination is verified in Active Directory. If either the username or password is incorrect, the RADIUS Server sends an Access-Reject message. lets suppose Primary auth get success If all conditions, as specified in the NPS Connection Request and Network Policies, are met (for example, time of day or group membership restrictions), the NPS extension triggers a request for secondary authentication with Azure Multi-Factor Authentication. If primary auth get success NPS extension triggers a request for secondary auth with MFA. So here do we need also to configure secondary auth on ASA pointing again to same NPS server as for Primary auth, please clear. Azure Multi-Factor Authentication communicates with Azure Active Directory, retrieves the user’s details, and performs the secondary authentication by using the method that's configured by the user (cell phone call, text message, or mobile app). If user get code as secondary auth on phone where does it need to put as there is only one password filed in anyconnect client application so how to get another field to put secondary auth in anyconnect client application. Please clear.
... View more
03-03-2020
07:58 AM
Hi. I am planning to setup 2 factor authentication for anyconnect clients, anyconnect vpn has already setup and working with Radius(NPS serverwith AD). i have taken subscription from Azure MFA oncloud and want to deploy second authentication using azure MFA .Could anyone please share any good document to setup anyconnect with NPS and oncloud azure MFA. Also in anyconnect i see only one password field to enter password which i think would be primary Radius-AD but for how to get second authentication field to enter PIN/password from Azure MFA. Please help.
... View more
12-02-2019
03:20 AM
Hi, i need help here, i have FMC where three ASA firepower modules are registered, i want to create separate policy for each firepower modules. I have created three policies but please guide me how to assign these policies to each respective devices.
... View more
Labels:
11-28-2019
03:05 AM
Hi Seb. Thanks for your valuable suggestion..one thing want to confirm if we can have two BGP regular expression under a access-list aspath like below this. Please confirm if it is possible to use two BGP regex under a access-list on router. ip as-path access-list 10 permit ^(_65023)+$ permit ^65012(_65012)+ 65023$
... View more
11-26-2019
04:24 AM
Hi Seb.. Thanks for helpful post, so just to clear.. could you please confirm on below example.. ======================================== In below logs we see prefix 10.11.121.35/32 is being advertise , here Regex ^(_65023)+$ is configured so i think it is because prefix 10.11.121.35/32 is coming from only AS 65023 and matching Regex ^(_65023)+$ RR001#sh ip bgp 10.11.121.35/32 BGP routing table entry for 10.139.255.50/32, version 1097881 Paths: (1 available, best #1, table default, RIB-failure(17)) Advertised to update-groups: 12 Refresh Epoch 1 65023 10.40.8.224 (metric 131228) from 10.40.8.224 (10.13.255.5) Origin IGP, metric 0, localpref 100, valid, internal, best Community: 65023:2198 65023:65023 rx pathid: 0, tx pathid: 0x0 ==================================== =============================================== And in below example prefix 10.13.225.49/32 is not being advertised, here also Regex ^(_65023)+$ is configured. is it because prefix 10.13.225.49/32 is having ASN 65012 65012 65012 65012 65012 65023 which is not matching with Regex ^(_65023)+$ Please confirm. RR001#sh ip bgp 10.13.225.49/32 BGP routing table entry for 10.13.225.49/32, version 1463430 Paths: (1 available, best #1, table default, RIB-failure(17)) Not advertised to any peer Refresh Epoch 1 65012 65012 65012 65012 65012 65023 10.40.8.224 (metric 131228) from 10.40.8.224 (10.13.255.5) Origin IGP, metric 130816, localpref 100, valid, internal, best Community: 65023:2990 65023:65023 rx pathid: 0, tx pathid: 0x0 =====================================================
... View more
11-25-2019
08:49 AM
Hi .. please help me to understand of below expression. ip as-path access-list 135 permit ^(_65023)+$ match as-path 135 Does above expression show that only prefixes from 65023 will be accepted, if i have BGP prefixes like "65012 65012 65012 65012 65012 65023" so in this case will it match with above expression, please help.
... View more
Labels:
10-25-2019
06:05 AM
Hi Marvin, Its ASA with Firepower service module and i want to setup IPS policy and call it in access-policy for outbound to inbound direction.
... View more
10-24-2019
04:41 AM
HI.. I have been running ASA firepower and have setup access policy on FMC, currently policy is setup for IPS as any any. Now i want to setup another IPS policy for outbond to inbound on FMC, could you please help to configure policy for outbound to inbound direction of traffic.
... View more
Labels:
10-06-2019
03:21 AM
Hi . I have recently setup firesight management center and tried to add firepower in FMC but got error. Actually Firepower is at location A and FMC resides in location B and both location are connected through sitetosite IPSec VPN. Do i need to put nat-id here. I am able to ping FMC from firepower.
... View more
09-29-2019
06:12 AM
Hi Marvin, Please see below and suggest. asa# sh access-list sfr access-list sfr; 1 elements; name hash: 0x7b320f74 access-list sfr line 1 extended permit ip any any (hitcnt=9328926) 0x57cb890e asa# sh access-list sfr access-list sfr; 1 elements; name hash: 0x7b320f74 access-list sfr line 1 extended permit ip any any (hitcnt=9344021) 0x57cb890e class-map sfr match access-list sfr policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip inspect netbios inspect tftp inspect icmp inspect pptp inspect icmp error inspect ip-options class global_class flow-export event-type all destination X.X.X.X class sfr sfr fail-open asa# sh service-policy sfr Global policy: Service-policy: global_policy Class-map: sfr SFR: card status Up, mode fail-open packet input 9897398, packet output 9897461, drop 0, reset-drop 0 asa# sh service-policy sfr Global policy: Service-policy: global_policy Class-map: sfr SFR: card status Up, mode fail-open packet input 9897868, packet output 9897931, drop 0, reset-drop 0
... View more
09-29-2019
02:27 AM
Hi Marvin, Thanks for update, i have done same but still no data display in ASDM under firepower reporting section. I had created policy, any any under all section and call IPS and logging as begining of connection.. but still no data displaying. Please suggest.
... View more
09-28-2019
08:54 AM
Hi.. i have done setting up firepower now and able to see firepower tabs and redirected traffic on ASA towards firepower. I have not yet setup any policies, its showing default traffic allow on firepower. But why i am not able to see anything on firepower reporting graph. is there any thing left to do.
... View more
03-30-2020
Hello.. is there any possibility to update ACL remark on the top of ACL
without removing and adding ...
03-25-2020
Thanks Reza, sh boot show .bin, could also please confirm if i need to
upgrade boot loader version a...
03-25-2020
Hi. Could you please confirm if below switch running in bundled or
installed mode?.sh ver output don...
03-03-2020
Hi Cristian, I gone through below link which you share and need some
clarification.https://docs.micr...
03-03-2020
Hi. I am planning to setup 2 factor authentication for anyconnect
clients, anyconnect vpn has alread...
12-08-2019
Thanks, but it doesnot seem signaling issue, as both user jabber audio
work fine in same location
12-08-2019
Hi.. could you please confirm how much bandwidth require if one user
dial Jabber to Jabber voice and...
12-02-2019
Hi, i need help here, i have FMC where three ASA firepower modules are
registered, i want to create ...
11-28-2019
Hi Seb. Thanks for your valuable suggestion..one thing want to confirm
if we can have two BGP regula...
11-26-2019
Hi Seb.. Thanks for helpful post, so just to clear..could you please
confirm on below example.. ====...
11-25-2019
Hi .. please help me to understand of below expression. ip as-path
access-list 135 permit ^(_65023)+...
10-25-2019
Hi Marvin,Its ASA with Firepower service module and i want to setup IPS
policy and call it in access...
10-24-2019
HI.. I have been running ASA firepower and have setup access policy on
FMC, currently policy is setu...
10-06-2019
Hi . I have recently setup firesight management center and tried to add
firepower in FMC but got err...
Public Statistics
| Date Registered | 02-01-2013 06:54 AM |
| Date Last Visited | 04-01-2020 06:22 PM |
| Total Messages Posted | 501 |
| Total Helpful Votes Received | 4 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 5 |
.jpg "VIP Mentor"){kind=icon}
