Hello Team,I’ve encountered an issue while setting up an IPSec VPN tunnel between an AWS-hosted Firepower Threat Defense (FTD) firewall (managed by FMC) and an on-site Cisco IR1101 router.In this setup, the FTD is located behind an AWS Network Load B...
Hi Cisco Community Team,I need help configuring a Dynamic Virtual Tunnel Interface (DVTI) setup in a hub-and-spoke topology where:The Cisco Secure Firewall Threat Defense (FTD, managed by FMC) is the hub (with a static public IP).The Cisco IOS XE rou...
I’m seeking a solution for a scenario where I need to use the same subnet across multiple sites, meaning the same network, same IP addresses, and subnet mask, and these sites will connect to our cloud infrastructure via IPSec VPN. My plan is to diffe...
Hello Community Members,I'm struggling to find the SNMP MIB that can provide information about the current users logged in through SSH using local credentials on my Cisco router, which is running the firmware universalk9.17.09.04a.SPA.bin.I’ve alread...
TopologyProblem DescriptionI have a topology on eve-ng in which I have 3 CSRv and 1 ISRv routers, In that topology I created a IPSEC tunnel over VTI. The problem I'm facing is that the tunnel interface on the router which is on side 1 is down (Protoc...
Hello @Rob Ingram Thanks for sharing the information.This is exactly what I was looking for - apologies if I sound a bit greedy here, but I’m curious: is this the only way that FTD learns the tunnel peer IP address? Are there any alternative methods ...
Hi Rob,Okay, there is static route to reach spoke routers public IP and Vice versa.However I don't find any option to create static route for interesting traffic sitting behind spoke. Please note that spoke tunnel IP (172.16.32.10) is not pingable fr...
Hello Irshad,Appreciate your input. My DVTI tunnels are indeed UP, but the challenge I’m dealing with is that the FTD (Hub) cannot reach the spoke tunnel IP.From the spoke side, I can successfully ping the FTDv tunnel IP, but the return path from FTD...
Hello @rob,Thanks for sharing the informationI’ve successfully configured the dynamic VPN, but I’m facing an issue: I cannot ping the tunnel IP of the Cisco ISR 1000 router from the FTD.However, when I ping the FTD tunnel IP from the ISR 1000,it work...
