About Mark Pace Balzan

Mark Pace Balzan · 10-27-2025

Hi,I have a VPN setup between two cisco IOS routers running IKEv2It works fine with no issuesI see the logs below and Im not sure I understand what they are.I see IKEV@-5-SA_DOWN every time the IKEv2 SA lifetime is up and renews. I also changed the l...

Mark Pace Balzan · 10-15-2025

Hi,I setup site to site IPSEC VPN between two cisco ios routers.This is running with IKEv2 (config below)VPN is up and traffic flows but PFS in Phase2 doesnt seem to be up as per output below.R1#show crypto ikev2 sa detailed IPv4 Crypto IKEv2 SA Tu...

Mark Pace Balzan · 09-05-2025

Hi,I have an on prem server up and runningIt appears that the only way I can get a successful registration is to disable crl revocation check - this sounds wrong, even if it appears to be documented in some cisco guides.So I need some help with some ...

Mark Pace Balzan · 09-05-2025

Hi,I have on prem server up and running and working for (classic) call-home config and devices are registering correctlyNow on some IOS-XE devices like ASR1k and Cat9k it seems Smart Lic Using Policy (SLUP) and CSLU is needed and this is getting me a...

Mark Pace Balzan · 08-25-2025

Hi,Im struggling to understand what this command <ip ssh maxstartups value> actually does.documentation seems to indicate that this limits the total concurrent ssh ssessions to the specified value.reading some info about the ssh daemon itself (man pa...

Mark Pace Balzan · 10-15-2025

spot on @Rob Ingram worked like a charm

Mark Pace Balzan · 10-15-2025

@Rob Ingram thanks ! - we learn something new every day - will check and get backcheers Mark

Mark Pace Balzan · 09-05-2025

Hi thanks for the response - the issue should be fairly clear in my original post but let me know if you need further detailMark

Mark Pace Balzan · 08-25-2025

tried that - it does not work as you say

Mark Pace Balzan · 08-25-2025

Hello M02@rt37 ah i see - this now makes more sense. its the ssh sessions 'inflight' rather than the total ssh sessions established whether authenticated or not, correct ?unfortunately documentation is misleadingthanksMark

Member Since	‎02-18-2005 11:18 PM
Date Last Visited	‎10-27-2025 05:46 AM
Posts	148
Total Helpful Votes Received	37

User Statistics

User Activity

IKEv2 logs are not clear

PFS not coming up with IKEv2 VPN

smartlicense on XR devices - certificate issue

SLUP CSLU and SSM On-Prem - some confusion

ip ssh maxstartups

Re: PFS not coming up with IKEv2 VPN

Re: PFS not coming up with IKEv2 VPN

Re: smartlicense on XR devices - certificate issue

Re: ip ssh maxstartups

Re: ip ssh maxstartups