We purchase a SSL VPN license from Cisco. However, we have two firewall right now, one is testing firewall, one is production. Can we load license into testing firewall and later migrate license to production? Can this be done?
I asked a question earlier on the licensing need for enabling vpn capability ISR 1941 W and also got a call from cisco support team. Thanks for that. My understanding after the call was that I do not need a license for basic vpn. While I am sure I mi...
Hi,I'm experiencing strange problem.I can't establish SSL VPN connection from 1 IP address, but I don't have problem establishing SSL VPN from any other IP address.Remote IP address: 10.0.0.1ASA's public IP address: 192.168.1.1Output of packet-tracer...
Hello (and Happy Thanksgiving to those in the USA),We recently swapped our ASA and re-applied the saved config to the new device. There is a site-to-site VPN that works and a remote client VPN that does not. We use some Cisco VPN clients and some Shr...
HiActually I´m using Annyconnect in ASA with SSL RC4 Cipher Suites Supported, by vulnerability it is recommended to use encryption without RC4.The question is the next, there is a document that show the best practice or recommendations to do that?, I...
Hi All!I'm trying to attached an ipsec tunnel on my 2811.I have p1 up173.X.0.X 24.X.237.X QM_IDLE 6237 ACTIVEbut p2 failes with the following when i do debug crypto ipsecNov 25 15:46:29.597: map_db_find_best did not find matching mapNov ...
Hello, I have a problem with my VPN. I configured everything correctly, thanks to your help, but I can not access the resources of my office. The connection is established correctly, and I recive the correct ip on "pool vpn" but I can not reach...
Hello,One of my customers has requested a L2L IPSec tunnel between a 3rd party ASA5505 and their central office 5510.The tunnel works fine but they have asked to enable Identity Firewall against the incoming connections in relation to the IPSec tunne...
Just configured site to site VPN for ASA 5515x and 5505. The tunnel is up, but couldn't ping to the other site from 5505 and vice versa. Below are the tunnel status and ASA configs. Any help or comment is appreciated. Thanks!ASA5515X# sh crypto ipsec...
Hi. I have question regarding anyconnect solution. Is it possible to make diffrent access levels. I mean if I use local users or active directory. For example username:syadmin should full access on all VLANS. username:consultant should only have acce...
Hello,I'm new to the world of VPNs and Tunnel interfaces so please bear with me. I have a couple of questions:1. So the tunnel source is the source ip address of the tunnel packet and the destination the destination, right? So what do you need an IP ...
I have one computer where AnyConnect all of a sudden has stopped working. It connects through an ASA 5510. I can use a different machine over the same connection with the same AnyConnect Client and connect fine. On the machine that does not work a...
Hi,VPN client gets connected fine, I have a inter VLAN routing happening on the switch in the LAN so all the LAN hosts have gateway IP on the switch, I have the defult route pointing to ASA inside interface on the switch, the switch I can reach after...
Hello expertsI am using ASA 8.2 to provide IPsec remote VPN for our staff. And in the group policy I set default domain name which is needed for our DNS server to resolve internal URLs. But the problem is now we have two domain names on our DNS ser...
Hi,I am building a AnyConnect IPSec solution, and have a question about backup servers. I understand that if I input the details of my backup link, then in the event of a failure at the primary this will be used. My question is more about capacity....
