Buy or Renew
Buy or Renew

VPN

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation

Cisco CyberSecurity
Labels

Forum Posts

Start a conversation

VTI tunnel problem

Hi all,We have VTI tunnels between Cisco (3825 and 878) and Juniper (SRX3600).Sometimes tunnel is going down and I should manualy shutdown and no shutdown tunnel interface to bring it up.This is logs from Cisco:%%crypto-4-recvd_pkt_inv_spi: decaps: r...

Resolved! VTI tunnel & OSPF

Hi all,I have configured VTI tunnel interfaces (tunnel mode ipsec ipv4) and OSPF on that interfaces.VTI is encrypting all data traffic. But what about OSPF traffic?Is OSPF traffic encrypted also or I need to configure OSPF authentication?Thanks

Packets dropped at encryption stage.

I am truly struggling with the changes after 8.21. I am trying to get a VPN up between two sites. This is the B end, I am sure there are a bunch of problems in the other end too. Eg. the tunnel NAT does not have the right priority 1.when I establish ...

Resolved! Routing Betwen IP on ASA for SSL VPN

I have a question let say internal network DHCP is 192.168.0.0   and if you configure SSL VPN on ASA to assign ip from 10.0.0.0 network where routing needs to be configured so the client can route between network ? 2. lets say im using 192.168.10.0/....

Resolved! Cisco Router Site 2 Site Tunnel

I have 2 Cisco routers , 1841 and 2811 , I need to setup site to site VPN , but i dont now some how it just does not seems to be working , Find attached the Configuration along with the        <----- 172.31.1.0/24----- DG:172.31.1.1>Cisco 2811<Dialer...

hasanreza by • Level 1
  • 758 Views
  • 2 replies
  • 0 Helpful votes

Hardening Interface used for VPN

Are there "must do's" on outside interfaces used for Site to Site VPNs? There is no NAT used on the interfaces. Looking for advice on what I should be applying to the interface in terms of ACL. At the moment,the only thing I have applied is to allow ...

GRANT3779 by • Spotlight
  • 325 Views
  • 1 replies
  • 0 Helpful votes

Resolved! ipsec proxy-id problem

I am trying to create a site-to-site l2l vpn and  phase 1 completes fine but when validating the proxy-id in phase 2, the id is not being set correctly.here is the config:access-list ssatunnel extended permit ip 10.1.10.0 255.255.255.0 x.x.x.32 255.2...

Client VPN with existing STATIC NAT for other VPN tunnel

Hi All,I have a situation where i need to NAT all the Server IP in LAN to another IP range due to NSOC monitoring. On top of that, i need to create a Client VPN setup at the same router. I managed to configure it, but not able to PING any of the inte...

derict by • Level 1
  • 1906 Views
  • 11 replies
  • 0 Helpful votes

Anyconnect drops connection

Hello All, I have 3 pc's behind D-link DIR-655 Router. Those 3 pc's can connect trough VPN using anyconnect client to an ASA but just only the first time when I reboot the D-Link router. After they disconnect from the VPN the next time (Second attemp...

Why DMVPN contains GRE ?

I  read that tunnel GRE,provides the possibility to use  dynamic routing protocol such as EIGRP or OSPF ,because IPsec doesn't support multicast and broadcast which are used by theses protocols,i read about the gre encapsulation,but i don't understan...

ASR901 support IPsec gdoi

Hi,I'm trying to setup a GDOI based IPsec connection between a cisco AS901 (advanced Metro lic - asr901-universalk9-mz.152-2.SNI ) and a 7606-S.What I see is that the ASR901 is capable of decrypting the IPsec packet but I cannot encrypt the ICMP pack...

View All