Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a pair of FPR2110 running ASA 9.9(2)1. I configured the ASA HA first, then tried to register smart license. The 2 instance registered OK and shown up on Cisco smart license portal, however there are only 1 ASA standard license and 1 3DES lice...
This is FP4100 running FXOS 2.3. I’m testing AAA tacacs+ for FDM login, authentications work but I’m in read-only. According to FXOS config guide, looks like this one. However I don’t find more details what need to be done.
User Roles in Remote Aut...
FPR 4100 comes with 8x10G SPF network module. via Quick start Guide, it needs to assgin a one of these 8 ports for ASA management. It is too expensive if only for mgmt access.
I may configure inside interface to allow mgmt HTTP/SSH access. However ...
I'm not sure if this is by design. Anybody else run into this?
After re-image FPR2110 from FTD to ASA9.8.2, the chassis (FXOS) mgmt interface UI become "Forbidden- you don't have permission to access / on this server"
https://mgmt-ip
SSH int...
Need help.
Configuring interfaces on FPR4110 FXOS v2.3(1.58), all 1 Gig interface connecting to a single switch.
It was no issue for eth1/1, 1/2, 1/3, 1/4 when I set them speed =1gbps, all came UP ok. However after I created a port-channel and ad...
This is expected behavior on FPR2100. I tested to failover ASA, the active-secondary ASA then consume 1 license and the passive-primary became no license. They still just consume 1 license.
I assume the logic is like this: on FPR2100 running ASA...
Confirmed with Cisco that it is true on FP4100 you have to assign a data port as dedicated ASA management interface. FP2100 is different, it shares the chassis MGT interface for ASA management.
Found errors logged on ASDM as following HTTPS access 403 forbidden error.
authz_core:error AH01630:client denied by server configuration:/isan/apache/
(70014)Enf of file found: AH01991:SSL input filter read failed.
...etc
I also verified on CLI fire...
Seems I messed up the concept of clustering and high availability. I want to achieve 2x FPR4110 chassis HA but had been looking at ASA clustering for a week. Tried switch ether-channel setting, it worked on mgmt port and cluster control port, but st...