About dsandre-toh

dsandre-toh · 04-07-2011

What is the difference in the 2 entries below - it must be significant, else it wouldn't be in the Getvpn documentation.deny tcp any any eq sshdeny tcp any eq ssh any

dsandre-toh · 05-18-2010

Doing some testing before live implementation, have a small GETVPN lab network, single KS, 5 GMs, all at 12.4(15)T10. All encryption,routing,etc. is working fine except for something odd that I noticed.From Key server;C2851_Key_Srvr#sh cry gd ks meG...

dsandre-toh · 01-23-2008

Hello,Will the pix perform NAT before sending traffic to an IPSEC tunnel?specifically:========================================name 172.28.2.24 EORLAname 10.1.0.19 WHBIZTALKaccess-list 150 permit ip host WHBIZTALK host EORLA pdm location 172.28.2.24...

dsandre-toh · 11-02-2007

Hi,have some questions about a recent STP issue in our network. After reviewing several Cisco STP design & troubleshooting guides, the documents repeatedly indicate that a STP failure is usually the result of a blocked port transitioning to forwardi...

dsandre-toh · 01-13-2011

that's an excellent planning document !is there a similar document with encryption performance numbers? ie. max. encrypted thru-put, max tunnels ?

dsandre-toh · 05-28-2010

here are a few lab configs, fairly straight forward, nothing fancy in terms of routing, etc. fairly flat topology for simple lab setup

dsandre-toh · 05-27-2010

to question #1:sh cry isa sa - shows only the SAs for ike phase1, not for traffic encryptionsh cry ips sa - will show u what traffic is being encrypted - that's why with sniffer you still see traffic encrypted.see: getvpn design & impl'n guide sectio...

dsandre-toh · 05-27-2010

hi, your isa lifetime should be 1200 on the GMs but defaulted on the KS (86400) - the GM value will take precedence. the tek life on KS should be 7200sec and the kek should be default of 86400.

dsandre-toh · 05-27-2010

hi,pls post/attach the getvpn portion of config from KS and several GMs, need to review the isa & ips policies, tek, kek timer setup, etc.

Member Since	‎08-30-2007 05:15 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	14
Total Helpful Votes Received	4

User Statistics

User Activity

ACL

GETVPN

nat and ipsec on pix 6.2

STP failures

Re: Router recomendation for a 100 Meg WAN?

Re: GETVPN

Re: GETVPN

Re: GetVPN Rekeys

Re: GETVPN.....