Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About paul snoep
Stats
Member since
03-26-2013
12
Posts
21
Helpful
0
Solutions
09-23-2014
12:40 PM
I appreciate your reply, please find below my filtered addition. CX blade working both ways = answered CX blade and multicontext - complex, but answered According to the engineers installing the ASA/CX, I need to define the policy. Since the CX can work both ways, what performance impact do I get? They say traffic flows either through the ASA or through the CX. This does not match your reply, as the MPF and the interface roles determine what is passed through the CX. So, what is wisdom to configure on this box? Where can I find some examples or hints on the policy to install using the CX for traffic in both ways on such a box? Caevats running the CX blade - I would like a call - to understand all of it Theoretical functionality is not in the userguide. Any other way to resolve? Many thanks Regards
... View more
09-20-2014
11:50 AM
Hi, Posting here as the answers seems hard to find and/or create even more uncertainty. We are considering deploying an active/standby pair on ASA 55xx-x with the CX blade, in multi-context mode. There are rumors the CX functionality only works from inside->outside, not from outside-> inside. This is unexpected. Secondly, I have heard CX functionality has some hurdles when running in mulit-context mode. My questions: - Does the CX blade works both ways, or do you need to select a direction? - What are the details of multi-context and CX blade? - Any hint on what policy to install since its either internal ASA, or through the blade. If through the blade, you need to select a policy. - What are the caveats running the CX blade? - Any proper clear document in which the theoretical functionality is explained? Many thanks Regards
... View more
Labels:
08-11-2014
07:50 AM
Hi, Full mesh in the network using ISR and DMVPN. Security needs to improve - no firewall between the connections - therefore I feel they need to move to flexvpn on CE ISR to central ASA from the -X series. I know migrating from DMVPN to flexvpn should be easy, however I cannot find a trace on the real why we need to go forward with flexvpn. - Ike v2 for flexvpn vs ike v1 for dmvpn - ASA as the endpoint for the flexvpn -... Pro's/Con's anyone? Caveats? Thanks
... View more
Labels:
Created by
paul snoep
in VPN and AnyConnect
in VPN and AnyConnect
08-11-2014
07:42 AM
08-11-2014
07:42 AM
Hi Heather, The first link is not related to the question, unfortunately. The question is not how to setup the certificates, it is about certificate requirements: what fields need to be used? The second link shows examples, which we have found also. Due to the massive amount of information, release dependent, we already found that article too, however got lost in the amount of information. The last link provides some information about EKU, however they seem to handle IPSEC, while we will be using SSL VPN We just want to know/read/understand if these are all EKU requirements and what other (E)KU requirements exist, by name, by explanation. It all seemed an easy question? Thanks
... View more
Created by
paul snoep
in VPN and AnyConnect
in VPN and AnyConnect
08-08-2014
02:16 AM
08-08-2014
02:16 AM
Hi Heatther, Thanks sofar, I will have to read those and assemble the replies for the collegues who need this information. I will get back to you either with more questiions or to mark this as the correct answer. Cheers Paul
... View more
Created by
paul snoep
in VPN and AnyConnect
in VPN and AnyConnect
07-30-2014
12:03 PM
07-30-2014
12:03 PM
Hi, The question below seems hard to get answered, who can help? ASA release 9.2/9.3 Thanks All the abundantly available documentation mentions [=>] specific key usages and extended key usage s , which fields need to be filled , however documentation contradicts. We would like to have a clear overview (table?) which usages need to be filled in the key usage and extended key usage for both SSL client certificate as SSL server certificate. Additionally, what other requirements must be filled to enable a secure certificate based connection? (SHA2 requirements, f.e.)
... View more
Labels:
Created by
paul snoep
in Other Data Center Subjects
in Other Data Center Subjects
03-18-2014
01:16 PM
03-18-2014
01:16 PM
Hi Charles, FWIW: We use FP to enable a smooth transition between locations, as we are on the move. DC A and DC B are FP interconnected. Since DC A is relocated, we just have to add DC A" to the FP cloud. Then we just have all vlans available in DC A". Although it is not the hardware bus like Juniper QF, it works and does its job. We will keep FP in its place as I feel this is a better solution than running dual VPC between the two sites. Ease of operation and visibility int the FP cloud is for us the main purpose. It all depends on how you intend to facilitate SDN. By means of VMware NSX, ACI on the 9K - which does not support FP, but does support VXLan, or by means of VMware SRM. NSX and SRM can use FP, ACI on the 9K with FP will be an issue HTH Paul
... View more
Created by
paul snoep
in Other Data Center Subjects
in Other Data Center Subjects
01-21-2014
01:20 PM
01-21-2014
01:20 PM
Hi Amit, This sure helps Many thanks Paul
... View more
01-18-2014
09:30 AM
Hi For a customer we have implemented a FP network based on N5K and N7K. With the new Nexus switches and the rumors on no support for FP, what is the future of FP with Nexus? N9K does not support FP, the N6K does not support FP, N77K supports FP on F2e and F3 linecards. Thanks Regards
... View more
Labels:
09-23-2014
I appreciate your reply, please find below my filtered addition.CX blade
working both ways = answere...
09-20-2014
Hi,Posting here as the answers seems hard to find and/or create even
more uncertainty.We are conside...
08-11-2014
Hi,Full mesh in the network using ISR and DMVPN. Security needs to
improve - no firewall between the...
Created by
paul snoep
in VPN and AnyConnect
08-11-2014
08-11-2014
Hi Heather,The first link is not related to the question, unfortunately.
The question is not how to ...
Created by
paul snoep
in VPN and AnyConnect
08-08-2014
08-08-2014
Hi Heatther,Thanks sofar, I will have to read those and assemble the
replies for the collegues who n...
07-30-2014
Hi,We have a network consisting of 7Ks with 5Ks on leaf, on two sites.
Between the sites, we have fa...
Created by
paul snoep
in VPN and AnyConnect
07-30-2014
07-30-2014
Hi,The question below seems hard to get answered, who can help? ASA
release 9.2/9.3ThanksAll the abu...
03-18-2014
Hi Charles,FWIW:We use FP to enable a smooth transition between
locations, as we are on the move. DC...
02-17-2014
Hi,From the Q&A Nexus 1000V below an excerpt of the requirements on
ESXi. What I wonder, when I have...
Public Statistics
| Date Registered | 03-26-2013 03:02 PM |
| Date Last Visited | 08-18-2017 04:27 AM |
| Total Messages Posted | 12 |
| Total Helpful Votes Received | 21 |
Helpful Votes From
| User | Helpful Count |
|---|---|
| 2 | |
| 5 | |
| 1 | |
| 2 | |
| 1 |
