Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About johnlloyd_13
Online
johnlloyd_13
Member since
12-02-2007
Engager
Personal Web Page : http://wannabecybersecurity.blogspot.com/
3151
Posts
1011
Helpful
239
Solutions
Recent Badges
Awards
Spotlight Awards Mobile App Contributor January 2012
1
07-19-2019
06:36 PM
hi, is this a new ASA? try to just hit 'enter' in the password prompt. if it doesn't work you'll need to perform a password recovery.
... View more
07-15-2019
11:24 PM
hi, the ASA 5550 almost looks identical to 5540. why not use the 5540 viso stencil instead?
... View more
07-15-2019
11:19 PM
hi, server team most of the time blame it's the network. you'll need to do some basic troubleshooting first. just to get a background, some questions for you: is the DHCP server locally installed in the branch? or PC get their IP from the HQ DHCP server? what switch platform do you use for the branch site? are they all the same or mixed? can you update the workstation LAN driver or change patch cable? can you also isolate by configuring a temporary DHCP server on the local switch or router and see if it's still 'slow' in getting an IP?
... View more
07-15-2019
12:33 AM
hi, here you go http://www.cisco.com/c/dam/assets/prod/visio/visio/products_visio_icon0900aecd8050a7d7.zip
... View more
Created by
johnlloyd_13
in Firewalls
in Firewalls
07-15-2019
12:29 AM
07-15-2019
12:29 AM
hi, are you referring to the "3DES/AES" free license to isse crypto commands? i think you can download the same 3DES/AES free license to a PIX FW. see link below. http://ccnpsecuritywannabe.blogspot.com/2018/07/cisco-asa-3desaes-free-license.html?m=0 notice there's a hyperlink to download for PIX 3DES/AES license.
... View more
07-15-2019
12:25 AM
hi, is the user on wifi? is the connection still slow when using a "wired" connection to his PC? can you post a brief diagram and 4321 router config? try masking sensitive info.
... View more
07-14-2019
11:55 PM
hi, you can use Cisco CCP to manage the 1921 router via the web GUI (also need java installed). you can use one of the onboard gig ports (2x gig ports total) for your WAN and use dot1q (router-on-a-stick) to support multiple VLANs. in terms of how easy to manage the router is subjective: do you have CCNA/CCENT, do you know how to use CLI?
... View more
07-11-2019
07:30 AM
hi, is this for a router for an ASA FW? i usually issue a show run | sec crypto on a router and show run crypto on an ASA FW to see what crypto commands are applied.
... View more
Created by
johnlloyd_13
in Firewalls
in Firewalls
06-29-2019
06:50 AM
06-29-2019
06:50 AM
hi marvin, is this the ONLY file i need to transfer in the ASA flash? users are ONLY using windows. anyconnect-win-4.7.04056-webdeploy-k9.pkg also, below is my template. appreciate if you let me know if there's any error in my config. do i need to transfer the anyconnect image file twice? one to disk0 and another to the private 'virtual flash'? changeto system class VPN limit-resource VPN AnyConnect 4 <<< I CURRENTLY HAVE 4 ANYCONNECT DEFAULT/BUILT-IN LICENSE limit-resource VPN Burst AnyConnect 4 mkdir PRIVATE_VPN copy ftp://ftpuser:ftpuser@172.x.x.x/anyconnect-win-4.7.04056-webdeploy-k9.pkg flash <<< DO I NEED TO TRANSFER ANYCONNECT IMAGE FILE TWICE? copy flash:/anyconnect-win-4.7.04056-webdeploy-k9.pkg flash:/PRIVATE_VPN/CUST-X context CUST-X member VPN allocate-interface GigabitEthernet0/0 allocate-interface GigabitEthernet0/1.9 config-url disk0:/VPN.cfg storage-url private disk0:/PRIVATE_VPN CUST-X
... View more
06-28-2019
01:57 AM
hi, i'll be configuring anyconnect for remote access VPN in an ASA5500-X 9.8 code. i tried to search but only see this doc which is on asa 9.6: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/200353-ASA-Multi-Context-Mode-Remote-Access-A.html my questions are: 1) what anyconnect 4.x is compatible for asa 9.8 code? i don't see any compatibility matrix. 2) which is the go-to config? private or shared storage? any config example i can follow? 3) is there a specific license/feature needed? I have AnyConnect Premium Peers applied (total of 4x from active-standby FWs). Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 500 perpetual Inside Hosts : Unlimited perpetual Failover : Active/Active perpetual Encryption-DES : Enabled perpetual Encryption-3DES-AES : Enabled perpetual Security Contexts : 50 perpetual Carrier : Disabled perpetual AnyConnect Premium Peers : 2 perpetual AnyConnect Essentials : Disabled perpetual Other VPN Peers : 5000 perpetual Total VPN Peers : 5000 perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual Shared License : Disabled perpetual Total TLS Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual IPS Module : Disabled perpetual Cluster : Enabled perpetual Cluster Members : 2 perpetual This platform has an ASA5555 VPN Premium license. Failover cluster licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 500 perpetual Inside Hosts : Unlimited perpetual Failover : Active/Active perpetual Encryption-DES : Enabled perpetual Encryption-3DES-AES : Enabled perpetual Security Contexts : 100 perpetual Carrier : Disabled perpetual AnyConnect Premium Peers : 4 perpetual <<< 2x from active + 2x from standby FW AnyConnect Essentials : Disabled perpetual Other VPN Peers : 5000 perpetual Total VPN Peers : 5000 perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual Shared License : Disabled perpetual Total TLS Proxy Sessions : 4 perpetual Botnet Traffic Filter : Disabled perpetual IPS Module : Disabled perpetual Cluster : Enabled perpetual
... View more
Labels:
05-25-2019
05:59 PM
hi, we have two independent/separate ASA 5520 8.2 (multiple/context mode) that i need to do failover/HA while waiting for its HW upgrade. both have same 8.2 code and the only difference i see are their RAM and security context license. i just would like to confirm if these two will form failover. ASA-1: Cisco Adaptive Security Appliance Software Version 8.2(5) <system> Device Manager Version 7.6(1) Compiled on Fri 20-May-11 16:00 by builders System image file is "disk0:/asa825-k8.bin" Config file at boot was "startup-config" ASA-1 up 317 days 21 hours Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz Internal ATA Compact Flash, 256MB BIOS Flash Firmware Hub @ 0xffe00000, 1024KB Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0) Boot microcode : CN1000-MC-BOOT-2.00 SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03 IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05 0: Ext: GigabitEthernet0/0 : address is 0007.7dad.00b6, irq 9 1: Ext: GigabitEthernet0/1 : address is 0007.7dad.00b7, irq 9 2: Ext: GigabitEthernet0/2 : address is 0007.7dad.00b8, irq 9 3: Ext: GigabitEthernet0/3 : address is 0007.7dad.00b9, irq 9 4: Ext: Management0/0 : address is 0007.7dad.00b5, irq 11 5: Int: Not used : irq 11 6: Int: Not used : irq 5 Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 20 GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 750 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Disabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled This platform has an ASA 5520 VPN Plus license. --- ASA-2: Cisco Adaptive Security Appliance Software Version 8.2(5) <system> Device Manager Version 7.6(1) Compiled on Fri 20-May-11 16:00 by builders System image file is "disk0:/asa825-k8.bin" Config file at boot was "startup-config" ASA-2 up 317 days 21 hours Hardware: ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz Internal ATA Compact Flash, 256MB BIOS Flash M50FW080 @ 0xffe00000, 1024KB Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0) Boot microcode : CN1000-MC-BOOT-2.00 SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03 IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05 0: Ext: GigabitEthernet0/0 : address is 0023.3353.9da6, irq 9 1: Ext: GigabitEthernet0/1 : address is 0023.3353.9da7, irq 9 2: Ext: GigabitEthernet0/2 : address is 0023.3353.9da8, irq 9 3: Ext: GigabitEthernet0/3 : address is 0023.3353.9da9, irq 9 4: Ext: Management0/0 : address is 0023.3353.9da5, irq 11 5: Int: Not used : irq 11 6: Int: Not used : irq 5 Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 10 GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 750 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Disabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled This platform has an ASA 5520 VPN Plus license.
... View more
Labels:
05-25-2019
06:51 AM
hi, i would need to re-name an existing ASA context since there's no "edit" feature. can someone confirm i just do a "no" on the old context name and point the "new" context to the same config url? changeto system no context OLD-CONTEXT context NEW-CONTEXT allocate-interface GigabitEthernet0/0 allocate-interface GigabitEthernet0/1.1 config-url disk0:/OLD-CONTEXT.cfg
... View more
Labels:
Created by
johnlloyd_13
in Firewalls
in Firewalls
05-21-2019
12:11 AM
05-21-2019
12:11 AM
hi, please post a show version output.
... View more
Created by
johnlloyd_13
in Switching
in Switching
05-21-2019
12:08 AM
05-21-2019
12:08 AM
hi, did you apply other AAA config? if you haven't save the config, try to reboot the switch.
... View more
Created by
johnlloyd_13
in Switching
in Switching
05-13-2019
01:10 AM
05-13-2019
01:10 AM
hi, as others have mentioned, you need to configure option 43 under DHCP config on your router: R1(dhcp-config)#option 43 hex f104.<WLC IP HEX STRING> see helpful link: http://ccnawirelesswannabe.blogspot.com/2016/07/building-my-ccna-wireless-home-lab.html
... View more
51m ago
hi,your FMC has intrusion policy rule (IPS) configured. notice the
yellow shield icon is enabled.it ...
yesterday
hi,is this a new ASA?try to just hit 'enter' in the password prompt. if
it doesn't work you'll need ...
yesterday
hi,the FP module on the ASA talks to FMC via the global policy map (and
ACL) traffic redirection and...
yesterday
hi,there are two ways to manage the ASA with FirePower (FP): locally via
ASDM or via a central FMC.d...
Created by
johnlloyd_13
in FirePOWER
yesterday
yesterday
hi,are you connecting to ASDM via the MGMT interface?is HTTP enabled on
the ASA? post a show run htt...
yesterday
hi,you can activate the FMC (you can VM this) free 90 day eval license
instead under System > Licens...
Monday
hi,server team most of the time blame it's the network. you'll need to
do some basic troubleshooting...
Monday
hi,here you
gohttp://www.cisco.com/c/dam/assets/prod/visio/visio/products_visio_icon0900aecd8050a7d7...
Monday
hi,are you referring to the "3DES/AES" free license to isse crypto
commands?i think you can download...
Monday
hi,is the user on wifi? is the connection still slow when using a
"wired" connection to his PC?can y...
Monday
hi,all of the FMC licenses are currently used by the HQ ASA 5525-X.
notice the count of one "(1)"you...
Sunday
hi,you can use Cisco CCP to manage the 1921 router via the web GUI (also
need java installed).you ca...
Public Statistics
| Date Registered | 12-02-2007 03:31 AM |
| Date Last Visited | 07-20-2019 04:24 AM |
| Total Messages Posted | 3,151 |
| Total Helpful Votes Received | 1011 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 15 | |
| 121 | |
| 5 | |
| 185 | |
| 5 |
.jpg "Hall of Fame Guru"){kind=icon}
.jpg "VIP Advisor"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 10 | |
| 16 | |
| 5 | |
| 5 |
Awards
Community Spotlight Award
Mobile App Contributor January 2012
