Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,
I have an older IOS on a 3560X and for cyber vulnerabilies, I would like to upgrade to the latest stable and supported IOS. We are currently running c3560e-universalk9-mz.122-55.SE5.bin. It seems that I am restricted from downloaded newere ...
Hello,
I was wondering if the Firesight Management Center can be integrated into Microsoft Active Directory? We would like to manage accounts through Active Directory to permit users to logging with certain levels of privileges (Read only/Full acce...
Hello,
I have read that the ASA 5515 can support OSPF "unicast" over an IPSEC tunnel. I have it configured in my device and when I debug ospf hello, I see the messages going out over unicast to neighbor.
I am trying to get a Cisco 2911 router on th...
Hello, Can an ASA 5515-x and 5525-x firewall be configured as failover pairs? I read they must be identical platforms? Anyone have an explanation?
Thank you!
Brett
Hello, I have a cisco 2811 and have setup 2 ipsec tunnels. My router is behind a firewall with 1-1 NAT. I can get one tunnel working as long as IKE peer id is the interface IP address. The second tunnel will only work if i set the crypto isakmp ident...
Hi Leo, thank you for your response! May I ask why you recommend this? The reason I am asking is we are doing some Cyber remediation work and want to eliminate as many vulnerabilities as possible. From a security standpoint and this additional backgr...
Is IPSLA best to be configured to point to the remote firewall for tracking state?
Is OSPF a better option for the fact that this would provide firewall and link redundancy--i.e. primary can route through secondary if primary link fails? If so, I am ...
Thanks Collin!
I have another question, is it possible to set these firewalls up in pairs using HSRP and OSPF to create a redundant inter-site link? There will be a pair of 5515-x/5525-x at location A linking to an additional set of 5515-x/5525-x at...
Hi Rahul,
Thank you for your response! Is this command only available for ipv6 and not ipv4? Is the ipv6 command just to allow you to specify ipv6 if desired?.
Additionally, howdo I link this to my tunnel?
