About Doug Engel

Doug Engel · 05-06-2015

Hello Remote Site: NYC 150 Mb/sec internet linkLocal Site: Baltimore 400 Mb/sec internet linkBackup Site: Washington 200 Mb/sec internet link My main site and my backup site are connected via a gigabit Ethernet circuit between the respective site cor...

Doug Engel · 01-09-2014

HiI have a 6509 running 12.2(33)SXI4 that has an interface config that I have never seen before:interface TenGigabitEthernet3/2 description hv Sw-2-1 switchport switchport trunk encapsulation dot1q switchport trunk native vlan 308 switchport trunk al...

Doug Engel · 09-10-2013

HiI have a 3560 running 12.2(25)SEE3 which has a 768 bit key. We need to replace that key with a 1024 bit key. After I create the new key, it appears that the switch does not use it. Looging in with putty and looking at the (putty) log, I see the ...

Doug Engel · 04-14-2017

Not anymore you can't. Seems like Cisco is really clamping down on the evaluations software. They should take a page from CheckPoint and F5 rather than limit who can play around with their software, it will only benefit them in the end.

Doug Engel · 12-08-2015

My big obstacle is/was DHCP for each site. I think I have overcome it, although I have not had a chance to move an AP to a remote site to test. Between your design and this doc, I'm hoping its solved. https://supportforums.cisco.com/document/98646/...

Doug Engel · 12-07-2015

Did this end up working? I need to set up this identical situation. Thanks

Doug Engel · 05-15-2015

I got TAC involved and they set me completely straight. Rather than build a profile for each peer, I should have built a tunnel group for each peer and then added both peers to the same crypto map. This is on me not ever setting up IPSec in an ASA. T...

Doug Engel · 05-08-2015

OK, so I kind of dropped back and punted. I created the profiles by hand, not wizard, and got tunnels up to both sites, but I had to use individual profiles and crypto maps. For example, I created a policy for both Baltimore and Washington on the NY...

Member Since	‎09-10-2013 07:39 AM
Date Last Visited	‎08-18-2017 04:27 AM
Posts	17

User Statistics

User Activity

Can I Weight IPSec Tunnels Between ASAs

Switchport trunk allowed vlan add statement listed in interface config

3560 not using new crypto key

Not anymore you can't. Seems

My big obstacle is/was DHCP

Did this end up working? I

I got TAC involved and they

OK, so I kind of dropped back