Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm attempting to create a VPN for a Cisco 7962. The phone says VPN Authentication Failed when attempting to connect. I downloaded console logs and I think this is relevant information bolded: 918: NOT 02:57:09.836553 VPNC: cert_vfy_cb: depth:1 of 1,...
Hello!I'm troubleshooting an issue and I found something interesting. I have the same MAC address on two different interfaces and VLANs. See below:Displaying entries from active supervisor:vlan mac address type learn age ports----+----+--------------...
Good Morning, I'm working on a POC for Cisco Phones to VPN for remote agents. I've never done anything like this before but I think I'm close. I am able to get a laptop to connect to the ASA via AnyConnect and obtain an IP from a local pool. However,...
I'm having a really difficult time getting TACACS working on a new ASR1001x.
I have the device cabled on the management interface and I can ping the TACACS server. Management interface is in the Mgmt-intf VRF. Here is a copy of my config, where am...
Having an issue that's stumped me all day and I'm at a loss. We have built a new tunnel for a temp site and I cannot get EIGRP to come up on both sides. EIGRP HELLO is sent and received on one side but only received on the other. Therefore, EIGRP beg...
Windows Firewall was off. About a week after installing this virtual ASA, we started having some issues on a couple of our hosts not being able to access storage. We eventually deleted the ASA VM and reinstalled it and now things work. I'm able to c...
My next step was a Packet Tracer using IP and the Result shows Input Interface: UNKNOWN and Output Interface: UNKNOWN Any idea why that is? It passes all the Phases and the result says RESULT - The packet is allowed. Route lookup says it knows to tak...
Hi Marvin,I believe that ICMP falls under IP but just to check your hypothesis, I added rules on Inside and Outside interfaces stating allow any any ICMP both ingress and egress and I still cannot ping the VPN client. I've also created a global rule ...
Thank you for the explanation, Rahul. Running the packet tracer still shows that the ASA will drop the traffic due to the ACCESS-LIST while using the Inside interface IP.B6A-DC-THOMPSON-VOIP-ASA# packet-tracer input Inside icmp 10.177.69.69 8 0 10.$P...
Thanks for the reply Rahul. I have applied those commands and attempted ping inside as you suggested. A few things to add:The route to 10.69.69.10 is a host route and shows Outside interface. I assume you meant ping Outside but I tried both and neith...