Hi , I found some document and website said If you are using encryption or authentication algorithms with a 128-bit key, use Diffie-Hellman groups 14,19, 20. If you are using encryption or authentication algorithms with a 256-bit key or higher. So pl...
Forum Posts
i try to createConfigure and Capture Embedded Packet on Software monitor capture to troubleshooting packet using wireshark with this linkhttps://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-embedded-packet-capture/116045-productconfig-ep...
Resolved! VPN traffic not routing out from Vlans
I am having an issue with my VPN traffic not routing back out of the network when trying to contact devices Vlan10 particularly. If you ping or RDP a device From VPN to inside network other than Vlan-1 you cannot reach it. But you can ping From a Ser...
I've been going round and round with this. I installed a wildcard certificate on an ASA. Then I exported the certificate to a pfx but I'm unable to import it on another ASA. I have an open TAC case and the tech tried all the same things I did. I am ...
Hi Folks, Background Info : We are running ASA image on Firepower.Internet connection is terminated on ASA's outside interface via a switch and Internet router.Subnet on outside interface is /24, for example : 193.111.140.174/24 Remote users connect ...
Hey all, i'am facing an issue connecte the end user to the remote access VPN, everything was fine, till some users began to claimed thar they can not access to the VPN, and error message appears, the errors is : Connection attempt has failed due to ...
I'm adding this in case anyone has to go through the same joy I have for the last day and a half and can't find an answer.I was setting up a new IKEv2 VPN with a Virtual Tunnel Interface on an ASA running 9.8.4.x. I was using aes-gcm-256 as encrypti...
Hello everyone.I'm trying to import certificate for my webvpn clients on my router c2921.Can you, please, help me to understand, what am I doing wrong? Certificates are base64.Step by step:1. Making new trustpoint for Root CAssl-proxy#config terminal...
In windows 10-11 after a while when connecting cisco anyconnect the network icon shows that there is no internet access, although everything is working fine.Has anyone encountered this same problem?
I posted a question a couple months ago about this problem, but I just can't get the DHCP server to assign and address. I've setup a capture on the interface, and no traffic ever goes to the DHCP server. When I try to log in, I get an instant disconn...
Hi,I have tried to solve a problem with AnyConnect for the last couple of days without success.My MacBook Pro M1 Pro, with MacOS Monterey installed with the latest version, began to fail on validating the FileVault around one week ago (See screenshot...
Hi Commulity 1/ Is it possible that the VPN-Client Use the DHCP option 252 From the Inside-DHCP Server? SRV_DHCP <------DHCP-----> (inside)ASA(outside)<---SSLVPN----> ClientPC the config as below , is not work , vpn-client cant get DHCP-op...
Dear ConcernI have used cisco anyconnect for VPN. I have connected my office server over VPN by RDP. RDP works fine when I have connect VPN from mobile network but when I have connected by my home Tenda router in VPN , VPN is connected fine but RDP d...
Hi I have posted my config below in hopes someone can help. End goal is to be able to have anyconnect clients be able to access my internal subnets on a separate router as well as the inside interface subnet on this ASA. I am able to ping the inside ...
Resolved! NAT based on Source IP
Hello Dears I need support for complex NAT scenarioswe have an IP tow external IPs(192.168.10.10 and 192.168.11.10) using S2S VPN want to access tow servers behind our Firepower(10.1.1.1 and 10.2.2.2) .What I need is share with external vendor only ...
