Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About jimmyc_2
Stats
Member since
08-03-2004
211
Posts
13
Helpful
1
Solution
12-01-2014
01:10 PM
The stated procedure works on a v8.4, but did not work on 9.0. If I get time, I'll open a case with TAC.
... View more
11-24-2014
06:49 AM
Thank you Murali,
That is interesting, and not in any of my ASA books, at least I didn't see it.
You are asking me to copy NewConfig to startup-config prior to reload. Not a problem, but my practical experience says I found a bug, or the documentation is wrong. The documentation says:
By default, the ASA boots from a startup configuration that is a hidden file. You can alternatively set any configuration to be the startup configuration by entering the following command:
hostname(config)# boot config {disk0:/ | disk1:/}[path/]filename
... View more
11-23-2014
09:30 AM
Hi Vibhor, That's worth a shot. I'll try to copy the config file from disk1 to disk0, then inserting the "boot config flash:/Newconfig" into my running config. If I do a "wr mem", that will save it to startup.confg. Here's the question: If I do a reload, the ASA will grab the startup-config. The startup-config has the command "boot config flash:/Newconfig", which means it has to abort the rest of the startup-config and launch a new config from flash. Is that how it works? Thanks.
... View more
Created by
jimmyc_2
in Network Security
in Network Security
11-21-2014
11:09 AM
11-21-2014
11:09 AM
The Cisco web site state: By default, the ASA boots from a startup configuration that is a hidden file. You can alternatively set any configuration to be the startup configuration by entering the following command: hostname(config)# boot config {disk0:/ | disk1:/}[path/]filename When I set that command, wr mem, and reload the ASA, it does not come up with the correct config. It comes up with the old config, and it also zero outs the relevant file on my disk1. config reg is set to 0x1. What am I missing?
... View more
- Tags:
- ASA Configuration
Labels:
11-09-2014
06:31 PM
Thanks Marvin, Please see my reply to Aref for additional information. The text books say I should open ICMP type 3 code 4, but say nothing about type 8, yet that is what I need to establish the tunnel??
... View more
11-09-2014
06:19 PM
Thanks Aref, I forgot that "sysopt connection permit-vpn" is on be default after 7.1... That takes care of allowing ESP and UDP-500. I still don't understand why the tunnel will not establish until I allow ICMP-Echo??? The pinging device is contained in the interesting traffic ACL, on both devices. Neither device has NAT.
... View more
11-08-2014
12:24 PM
In my lab I successfully built an IPsec tunnel between two ASAs. There is a router in the middle to simulate the internet. The tunnel only works when I allow ICMP echo. Allowing ICMP 3,4 doesn't seem to matter. I did not allow ESP, udp 4500 or udp 500 in the access-list, only ICMP echo. Are they now allowed by default? That runs counter to what I've read in the textbooks. Can someone tell me what are the default allowances for v8.4 and above? and what I need to allow in my ACL? Thanks.
... View more
- Tags:
- ipsec vpn icmp
Labels:
Created by
jimmyc_2
in Other Network Architecture Subjects
in Other Network Architecture Subjects
10-31-2014
01:01 PM
10-31-2014
01:01 PM
Thanks Burleyman. Not what I wanted to hear, but good information.
... View more
Created by
jimmyc_2
in Other Network Architecture Subjects
in Other Network Architecture Subjects
10-31-2014
10:24 AM
10-31-2014
10:24 AM
Some of my devices do not have maintenance, as we use them for spares. Can I upgrade the IOS without violating the end user agreement?
... View more
- Tags:
- license
Labels:
Created by
jimmyc_2
in Other Security Subjects
in Other Security Subjects
10-13-2014
01:55 PM
10-13-2014
01:55 PM
We can't seem to find the OID, but it would seem to be pretty common. Has anyone changed an IP address with SNMP?
... View more
- Tags:
- snmp
Labels:
10-10-2014
02:32 PM
Thank you Marvin. How long do you think it will take for F/R to be supplanted by carrier ethernet?
... View more
Created by
jimmyc_2
in Other Data Center Subjects
in Other Data Center Subjects
10-10-2014
01:54 PM
10-10-2014
01:54 PM
I'm replacing an old router that is an endpoint for a frame-relay connection. Can I use an ASA? if so what are the interface commands for the DLCI and encapsulation?
... View more
- Tags:
- asa
- frame-relay
Labels:
09-11-2014
07:28 AM
Thank you Marvin, Several years ago, the IPSec method was deemed more secure than SSL. From a practical perspective, is using AnyConnect with SSL more or less the equivalent of IPSec?
... View more
09-09-2014
02:06 PM
To follow up, has anyone used OpenSSL to build a certificate and use it on Anyconnect/ASA?
... View more
09-09-2014
01:57 PM
I have a lab that I want to build a laptop-to-ASA remote access tunnel, using AnyConnect. I understand AnyConnect requires IKEV2, and certificates. It does not allow for pre-shared passwords, like VPN-client. Is there a way I can build the lab without getting a certificate?
... View more
Labels:
12-01-2014
The stated procedure works on a v8.4, but did not work on 9.0.If I get
time, I'll open a case with T...
11-24-2014
Thank you Murali, That is interesting, and not in any of my ASA books,
at least I didn't see it. You...
11-23-2014
Hi Vibhor,That's worth a shot.I'll try to copy the config file from
disk1 to disk0, then inserting t...
Created by
jimmyc_2
in Network Security
11-21-2014
11-21-2014
The Cisco web site state:By default, the ASA boots from a startup
configuration that is a hidden fil...
11-09-2014
Thanks Marvin,Please see my reply to Aref for additional information.The
text books say I should ope...
11-09-2014
Thanks Aref,I forgot that "sysopt connection permit-vpn" is on be
default after 7.1...That takes car...
10-31-2014
Some of my devices do not have maintenance, as we use them for spares.
Can I upgrade the IOS without...
Created by
jimmyc_2
in Other Security Subjects
10-13-2014
10-13-2014
We can't seem to find the OID, but it would seem to be pretty common.
Has anyone changed an IP addre...
10-10-2014
Thank you Marvin.How long do you think it will take for F/R to be
supplanted by carrier ethernet?
Created by
jimmyc_2
in Other Data Center Subjects
10-10-2014
10-10-2014
I'm replacing an old router that is an endpoint for a frame-relay
connection. Can I use an ASA? if s...
09-11-2014
Thank you Marvin,Several years ago, the IPSec method was deemed more
secure than SSL. From a practic...
09-09-2014
To follow up, has anyone used OpenSSL to build a certificate and use it
on Anyconnect/ASA?
Public Statistics
| Date Registered | 08-03-2004 01:10 PM |
| Date Last Visited | 08-18-2017 04:27 AM |
| Total Messages Posted | 211 |
| Total Helpful Votes Received | 13 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 4 | |
| 9 | |
| 3 | |
| 12 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
