VPN

I got two servers sitting on different location, the servers model/hardware are same. They may need to connect the VPN to external client with Anyconnect. I installed the Anyconnect and configured the VPN gateway's IP address. One server is able to c...

Hi,debug output of ikev2 protocol  a site to stie vpn   (9666): Decrypted packet:(9666): Data: 416 bytesIKEv2-PROTO-5: (9666): SM Trace-> SA: I_SPI=806D92D10C38B4AC R_SPI=E1C56F198E51D73E (R) MsgID = 00000355 CurState: READY Event: EV_RECV_CREATE_CHI...

I'm trying to setup a brand new ASA 1010 with the ASA image. Routing and ACLs work just like they used to but the Smart Licensing is tripping me up. I'll admit I'm new to Smart Licensing but I got the device registered and applied the Standard licens...

Hi, I have dual Cisco ASA5516 in failover mode terminating AnyConnect clients now. We are using DUO for the 2 factor and it's working well. However Cisco EOL AC-PLS-5YR-25-S that we had before and can't renew anymore. How do I get a replacement produ...

Hi, I am posting for a friend. They had purchased AC-PLS-5YR-25-S about 5 years ago. It was up for renewal and they learned that the product is EOL. However the EOL page doesn't provide information on what's the replacement product? They are using An...

Hi,Trying to generate a csr on a FTD for a S2S VPN for auth, I am following various guides but am faced with the below when trying to generate the key. admin@xxxxxxx:/$ openssl genrsa -out FTD-1.key 2048FTD-1.key: Permission denied140025671539456:err...

Hi all, I have below command in my router log: clear crypto sa peer xxx.xxx.xxx.xxx  The full log statement is below: ISAKMP_MANUAL_DELETE: IKE SA manually deleted. Do 'clear crypto sa peer xxx.xxx.xxx.xxx' to manually clear IPSec SA's covered by thi...

Hi,the VPN was running, reachability was there between both sites. local subnets  in the acl 192.168.1.0/24           192.168.3.0/24remote subnets  in the acl 192.168.2.0/24           192.168.4.0/24Suddenly from the remote site cannot reach local (no...

Hi, I'm having an issue where client laptops are not terminating the session when the CAC is removed.A few notable things are that the laptops do not need a CAC to start a VPN as the laptops do that through certificate automatically. Windows however ...

Hello, Post upgrade ASA is throwing Untrsuted certificate error for SSL webvpn.It was working before the upgrade, no other changes have been performed.Error - Certificate chain failed validation. No suitable trustpoint was found to validate chain ASA...

Am logging into a customer's VPN using anyconnect version 4.9.05042The VPN is configured to authenticate / authorize using Office 365 / Azure AD.Anyconnect keeps picking up some saved / cached Office 365 credentials from my machine but they are the w...

Hi, The  VPN always  show  responder, what could be the reason  it does not show as initiator ,There are a lot of subnets both remote and local but only the above are listed show cr isakmp sa .why others are not showing  I have other remote local sub...

Hello! My company wants to try out the Cisco AnyConnect and I received the trial activation key from Cisco that would allow us to test AnyConnect for 13 weeks. However, when I enter the command below on ASA activation-key xxxxxxxx xxxxxxxx xxxxxxxx x...