Hi , We have flexconnect AP with local switching. I would like to set up as in the pic.  flex connect AVC profile controls/limits some applications. and the QOS-role is limiting traffic rate specific to the user roles (like guest,byod). My understanding is AVC will control/limit the users,   guest,byod will get additional QOS-role limitation.  Is it correct to understand like that? Any documentation for this kind of setup?       Thanks Win  ... View more

Hi, We need to install new license for anyconnect version 4 in our ASA HA pair and we are planning to do the IOS upgrade at the same time. So we will install license and upgrade IOS software and then we will reboot the ASA. Can we do in that way? or we need reboot twice for license install and IOS upgrade?     Thanks   ... View more

Hi,  We have SCCM and we use it to deploy the software to our users machines. We are upgrading our AnyConnect VPN client from Version 3.5 to 4.5. Does the user need to connect to the office network to get the AC upgraded? Is it possible to upgrade to the remote user who is already on VPN connection with old AC ? How we can do that?   ... View more

Hi ,   I have Prime server, WLC and AP. I would like to know if one AP down and we replace the AP, how we know which AP group the AP is from. Can we see in Prime or WLC ?   Thanks Win ... View more

Hi,   I am checking if my ASA support for the SHAv2. But I couldn't find any option to choose for SHAv2 for the encryption algorithm. Anyone could suggest how to check if ASA can support SHAv2 and how to enable it?   ASA version is 8.4(7)22       Thanks ... View more

  Hi, We use SSH v2 to login and manage the cisco switches. But recently our internal security team did VA scan and found out the switches are using SSH Server CBC Mode Ciphers. And they suggest to disable SSH Server CBC Mode Ciphers and enable CTR or GCM cipher mode encryption. What is the default encryption mode cisco's ssh using? Can anyone share if it is possible to disable and enable as they suggest?     Thanks   ... View more

Hi, We are going to upgrade the existing license to suppport 250 SSL VPN users. I would like to check if it needs to reboot the device after install the new key. Attach is the existing licence and we are going to upgrade to ASA-SSL-100-250=  (Product name)     Thanks in advance Win ... View more

Hi , I have cisco ASA 5510 box serving as SSL VPN device for remote users. Currently I have security plus device license and 100 AnyConnect Premium Peers allowed. I like to extend my Anyconnect Premium Peers as number of my remote users are increasing. In that case, how can I extend my license so that more Anyconnect users are allowed? Any downtime, reoad needed to upgrade the license? Thanks WPA. ... View more

Hi , I am having issue with my NTP sync. I have configured the NTP as below. The route to NTP server is on int VLAN 221 which is having ACL out. But inside the ACL , i already allowed for the NTP traffic. But my show ntp status still unsync to NTP server. Anyone can advise if any woring in config. Is the locally generated traffic applicable to ACL? NOTE: I got another switch connected another interface( int VLAN 150) on this Switch1. It is syned with NTP server. Switch1 #sh run | i ntp server ntp server y.y.y.y ntp server x.x.x.x prefer Switch1#sh ip route x.x.x.x Routing entry for x.x.x.0/28     * directly connected, via Vlan221       Route metric is 0, traffic share count is 1 interface Vlan221 ip address x.x.x.w 255.255.255.240 ip access-group VLAN_221_out out Extended IP access list VLAN_221_out     10 permit tcp any any established (5 matches)     20 permit udp any host x.x.x.x eq ntp     30 permit udp any host y.y.y.y eq ntp Thanks WPA ... View more