About Frazer_Stockton

Frazer_Stockton · 02-15-2025

Hello, I'm wondering if someone else has encountered this problem, I have a Cisco 1100 series router running 17.12.4a. I need to configure an IPsec VTI with FQDN destination as the remote side is using dynamic DNS and subject to periodic IP change. M...

Frazer_Stockton · 02-17-2025

Hello Rob, Thanks for your reply, I had a look at the dVTI option, unfortunately my side is the initiator for all the peers (as bizarre as this sounds). I didn't see a clean way of making that work. I'm also doing some policy-based routing via the tu...

Frazer_Stockton · 06-02-2022

6 years later - this post is still relevant. I was trying to join a 2702 to a 9800 CL for 'ISE 3.1 Sandbox v1.1' on dcloud and received the below: *Jun 2 10:00:39.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 198.19.11.10 peer_p...

Frazer_Stockton · 07-04-2018

icmp permit any outside

Frazer_Stockton · 07-04-2018

Try adding:policy-map global_policyclass inspection_default inspect icmp

Frazer_Stockton · 07-04-2018

As far as I'm aware, there are two methods for implementing redundant VPNs on an ASA. 1) If your 3rd parties support a route based VPN - configure VTIs and overly unicast BGP. You can then weight a preferred path, and prepend a less desirable one ...

Member Since	‎07-04-2018 09:39 AM
Date Last Visited	‎04-15-2025 01:46 AM
Posts	6
Total Helpful Votes Received	1

User Statistics

User Activity

IOS-XE VPN to FQDN Peer

Re: IOS-XE VPN to FQDN Peer

Re: I think I have seen this

Re: ASA 5506 NAT and access-list

Re: ASA 5506 NAT and access-list

Re: ASA S2S VPN with route-injection