About dhau

dhau · 11-20-2024

I am preparing to implement site-to-site VPN across multiple firewalls located at two sites. I will be setting up 2 DVTI hubs, one hub for each site. I will set up the 2 DVTI hubs to be redundant to each other, so in the event that one hub goes down,...

dhau · 08-17-2023

Our ISE running 3.1 patch 7. It only has the Device Admin license and devices are only authenticating to ISE using tacacs.I see data in the ALARMS and SYSTEM SUMMARY dashlets but the "No data available." message shows up for AUTHENTICATIONS, NETWORK ...

dhau · 05-11-2023

We have upgraded some firewalls to ASA 9.19.1. I noticed that if I change the hash of some other user's password on the firewall, that when that other user logs in, they are forced to change their password. The idea is that the admin who put in the h...

dhau · 02-10-2023

I'd like to disable inter-vlan routing on NXOS switches so it would act as a Layer 2 switch and would not contribute to routing. On Catalyst switches I know the method is to run "no ip routing", set up a default-gateway and it's all done. However, I ...

dhau · 05-18-2022

In our environment we have two sites, each site is behind an ASA firewall. The sites are connected through a lower-speed WAN link (e.g. 10.70.0.1, 10.71.0.1) and a higher-speed leased line. I'd like to encrypt the traffic between the two sites but wi...

dhau · 08-18-2023

Is there a reason these dashlets are only for RADIUS?

dhau · 05-11-2023

I see. Thanks for the quick reply. We are moving towards ISE to do device administration so this won't cause issues in the long-term.Thanks again.

dhau · 02-13-2023

Hello,I tried that and I think that resolves my issue. I read on a different thread also and my approach will be to keep "feature interface-vlan" but run "no interface vlan #" for all VLANs except for the one that I plan on using for inline band mana...

dhau · 05-23-2022

It's a weird situation that I found myself in. The reason I need 2 VTIs is because I have 2 paths between Site A and Site B:Path 1: Internal network path, lower bandwidthPath 2: Leased line network path, significantly more bandwidth, considered less ...

dhau · 05-23-2022

@Rob Ingram I was able to get traffic through the tunnel interface now so it's working.I have one last question that will complete the whole setup: How do I set up policy routing to route to one VTI or the other VTI depending on the destination? I kn...

Member Since	‎05-21-2018 10:28 AM
Date Last Visited	‎08-26-2025 01:25 PM
Posts	15
Total Helpful Votes Received	12

User Statistics

User Activity

ASA DVTI Dual Hub Setup, Configure spoke to prefer closer hub

ISE 3.1 Device Admin Only, No data available

ASA 9.19 Forced Password Changes

Configure NXOS Switch as Layer 2 or disable inter-vlan routing

Site-to-Site Tunnels between two ASA firewalls but different routes

Re: ISE 3.1 Device Admin Only, No data available

Re: ASA 9.19 Forced Password Changes

Re: Configure NXOS Switch as Layer 2 or disable inter-vlan routing

Re: Site-to-Site Tunnels between two ASA firewalls but different route

Re: Site-to-Site Tunnels between two ASA firewalls but different route