About swharvey

swharvey · 04-30-2015

We have a need to determine the breakdown of various sslvpn Anyconnect clients connecting to our hub ASA's. Is there a method, either in the ASDM or CLI (or syslog) to determine the client type and count (e.g. Android vs. Linux vs. iOS vs Windows)?

swharvey · 09-26-2013

Looking for confirmation whether 8.4.3 code (or higher) can support the ability for spoke endpoint ASA5505's to have certificate based, IKEv2 Site to Site VPN tunnels to separate ASA hub sites at separate geographical locations for high availability...

swharvey · 10-11-2010

We have a Cisco 3925 router with an EHWIC-4ESG card running on IOS image c3900-universalk9-mz.SPA.150-1.M2.bin. A show diag shows this card as disabled/not supported. Needing assistance to determine if the IOS code installed is the reason for the c...

swharvey · 08-02-2010

We have noticed in that icmp echo-replies and traceroutes that hit the real ip (rip) of the SVI on our 4506 supervisor have unusually high response times, but traces and pings through the switch respond with normal/expected latency values.It is my un...

swharvey · 07-29-2009

Is it possible to terminate sslvpn anyconnect clients on a cisco router w/security ios that also has ipsec gre tunnels via the same external interface, and have the sslvpn anyconnect clients traffic traverse the ipsec tunnels to other destinations? W...

swharvey · 08-14-2008

Thank you for your help.I found the problem, which was close to your suggestion. The solution was that I needed a nonat acl containing the remote subnets, but also I needed an outside nat 0 command.Example:access-list nonat-remote any 192.168.240.0 ...

swharvey · 08-14-2008

the remote soho subnets are /29 subsets of the 192.168.250.0/24, and the dhcp pool for the Anyconnect contains usable ip's within the 192.168.260.0/24 subnet. The nonat permit acl is 192.168.0.0/16.This nonat range should cover both the sslvpn dhcp ...

swharvey · 05-07-2008

Thanks for the suggestion. Below are the current port configuration for an auto qos port with pc/phone, as well as the commands I tried on a set of selective interfaces (G3/1 -2). I get an error regarding the asic. Since we have phone ports requir...

swharvey · 05-05-2008

Yeah below is the current port configuration that the storm-control broadcast xx command was applied to. FYI I also tried the command on the port after I removed the voice vlan command (so that the port was truly only an access port), and still rece...

swharvey · 05-02-2008

Hi Jon,We are running FWSM 3.25, and ASA 7.24, so we should have the ability. I don't see where in the url you sent me the commands to change individual port conn timeout values. Is it a policy-map configuration?Thanks

Member Since	‎04-16-2002 06:04 PM
Date Last Visited	‎06-12-2018 05:59 PM
Posts	204
Total Helpful Votes Received	53

User Statistics

User Activity

Is there a method to determine the Anyconnect client types and quanties that connect to the ASA sslvpn?

ASA Site to Site Redundant VPN's for HA running IKEV2

Enabling EHWIC card in 3925 router

Traceroute latency values for traffic hitting 4506 SupIV SVI's

Hairpinning SSL VPN Clients on IOS router w/IPSEC GRE Tunnels

Re: ASA 8.0x Hairpinning between IPSEC VPN's SOHO's and Anyconne

Re: ASA 8.0x Hairpinning between IPSEC VPN's SOHO's and Anyconne

Re: Auto QOS on 6500 with Sup32-10G gives warning errors

Re: Is Storm-Control Broadcast on 6500's w/sup32 possible?

Re: Can connection timeouts be defined on a per port basis on FW