About asabagh

asabagh · 04-06-2011

Hi,I am really confused. The Key Server is configured to rekey every 12 hours (43200 Seconds). This is the part of configuraiton :crypto ipsec profile gdoi-profile-getvpn set security-association lifetime seconds 43200 set transform-set mygdoi-trans ...

asabagh · 02-09-2011

hi,I am trying to apply GETVPN in an operational enterprise with over 150 branches. The only way to migrate a branch by branch without interrubting others, is through denying each branch in the local deny policy at the GM in the DC.The Local Deny ACL...

asabagh · 11-11-2010

Hi,we want to deploy GET VPN and we have a big number of ATMs connected through VSAT connections to the headoffice. At time of congestion, bandwidth of the connection can degrdae to 2 Kbps for each router. (( believe it or not )) and this bandwidth i...

asabagh · 08-09-2010

Hi,We are looking forward to install a Cisco 6513 with IDSM-2 in each chassis in a VSS mode. Does anyone have an experience with the configuration of the 6513 ? Also, lets assume I installed one active IDSM in each chassis with identical configurati...

asabagh · 04-07-2011

Hi,The TEK is configured correctly, and the show crypto gdoi shows the correct remaining lifetimeTEK POLICY for the current KS-Policy ACEs Downloaded: GigabitEthernet0/1: GigabitEthernet0/2: IPsec SA: spi: 0x417DC00B(1098760203) tr...

asabagh · 02-22-2011

Thanks for your input.We are using my mentioned way of migration beacause of a business SLA where we only need to migrate 20 branches while the customer handles the rest. The receive-only migration is documented and the best way of migration, however...

asabagh · 11-21-2010

Hi Wen,thanks for your reply. We will study this issue more in order to decide if GETVPN can be implemented.On the other hand, I want to ask about the ACL used in the GET VPN to determine the traffic encrypted. We have around 300 branches, and they...

asabagh · 08-09-2010

Thank you Raza..I have read the document. But what I am interested in is how the configuration would look like in case of Promescouse mode ot inline mode.Regards,Amro

Member Since	‎05-30-2010 02:04 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	8
Total Helpful Votes Received	5

User Statistics

User Activity

GETVPN REKEYING not correct

GETVPN with Local Deny policy

GET VPN with limited bandwidth

IDSM-2 with VSS system

Re: GETVPN REKEYING not correct

Re: GETVPN with Local Deny policy

Re: GET VPN with limited bandwidth

Re: IDSM-2 with VSS system