Hi, I am currently encountering issue on route-based ipsec vpn. I cannot ping my remote IP also the remote tunnel. I have verified that there is no decap showing on packets. I already configured static route between each site and still unsucessful of...
Forum Posts
Hello, Is it possible on Cisco FTD managed by Cisco FMC define multiple DH Group in Phase2 ? From what i see it is just possible one. I tried put , but it doesnt accept. Also looking maybe for option to add thorugh flex config but didnt find any rel...
Hi All. I would like to get your thoughts on the following issue i have been facing since implementing Dual ISP and failover for site-to-site vpn tunnels.Hub Site:ASA5515 using 9.6(4)42Spoke sites:Cisco ISRs using 15.1(4)M8, using voip services over ...
Hi, I have one issue with IPSec tunnel Lan-to-Lan between ASA 5525x (v9.8) and ASA FPR 2110 (v9.16). My Tunnel is up but ping between each client was not successful. Both peer status sh cry isakmp sa in "MM_ACTIVE".I ran packet-tracer icmp between pe...
Hello,I have an IKEv2 Site-to-Site IPSec tunnel (VTI with static routing) between ASA firewall and 2 stateless HA routers configured with HSRP (IPSec end point is HSRP VIP hosted on the HSRP active router).Despite the fact it is not stateful (not sup...
Hello, as part of my preparation for CCNA Security I've been making up my own topologies and configuring them, however, I need a little help with this one. In the topology (included .pka), I configured VLANs, Port Security, OSPF, OSPF Authentication ...
Resolved! Tracking VPN Brute Force
Hello everyone,Can you provide me with the eventid of the VPN failed logon on Cisco's devices?I couldn't find any examples and i wan't to create a brute force rule for it in my SIEM solutions.
Hello Guys,We have a IKEv2 VPN between Palo Alto FW and Cisco 1121 IOS XE router and below is the Cisco side config. When I initiate traffic towards Cisco end's LAN gateway 172.22.120.1, the tunnel doesnt come up (Phase 1), while it works in the reve...
Due to Covid-19 we are working from home by connecting to office VPN. Since yesterday entire office was asked to WFH and since then we got some intermittent disconnection issues. Issue - from home connecting to Cisco VPN is ok, but once connected ...
Requirement : I want to create 2 ipsec VPN for fail-over / redundancy purpose on Router-A and Router-B. If the path through ISP-1 fail then traffic should automatically forward through ISP-2.problem: I have successfully created ipsec VPN through ISP-...
Resolved! ASA 5545-X Diffie-Hellman Group
Which Diffie-Hellman Groups can be choosen for IKE policies?I found that are some dependencies on the the software version as well.Have I right understood that for crypto ikev2 policy the following Diffie-Hellman group(s) for this policy index as 14,...
Resolved! IPSec KEY Generation
Dear ExpertsIn some documents I saw three keys will be generated in packets 3-4 in IKEv1 phase 1, can anyone please explain in detail which three keys are generated? And which key is for phase1 packets 5-6, which one is for phase two? Thanks- Teck Si...
Hi everyone, I want to install ipsec encryption on router C8200_1N-4T. According to the information on the datasheet, the device supports 3DES but currently there is no 3DES option when configuring. (192-aes 256-aes and aes options only) The software...
Hello, I create Ikev2 site to site tunnel between two cisco FPR 1140. I have same subnet on both location and i used source and destionation NAT in one site. My user try access over web some aplication and it is work, but when other site try to acc...
