I have a pair of ASA 5515's in HA (active/standby) running 9.14. Over the last few days, some Anyconnect users are finding themselves connected to the standby device which, of course, breaks their actual access to internal resources. There have bee...
Forum Posts
Hello,I Hava a FTD and managing it through FMC. I want to setup IPsec tunnel using FTD. In my use case I don't want to use the WAN/Outside interface IP as client IP for remote connectivity. In my WAN/outside interface I have free ip in that pool. I w...
Resolved! AnyConnect new feature - DTLSv1.2
With the release of v9.10.1, has anyone been able to get DTLSv1.2 working with AnyConnect sessions? (Our clients are v4.6.02074) -If I don't specify dtlsv1.2, it will always establish the DTLS tunnel using dtlsv1.0. -If I do specify dtlsv1.2 with the...
In our network is in packet tracer, PAT and VPN are configured to provide secure connectivity between the four branches. While the inside networks can communicate seamlessly between the branches, the border routers are unable to ping each other. The ...
I installed Norton 360 Deluxe on my personal laptop few months ago. On the same computer, which runs windows 11, I had a Cisco VPN installed from the IT service at work.Both programs worked smoothly together until November 21, when I tried to remotel...
Hello Cisco Community,I am facing an issue with my Cisco ISR4331 router when attempting to establish an IKEv2/IPsec VPN connection (windows client anyconnect). After entering the login credentials, the session abruptly drops with the error:IKEv2:(SES...
hey everyone, i am trying to test Remote access using IKEv2 EAP with local AAA but im facing an error at the IKE_AUTH phase.i've Been banging my head against the wall with this, and thought I would see if anyone has gotten this working.in my lab im u...
I have configured multiple Tunnels and all my tunnels are very very slow.My configuration is HUB: crypto isakmp policy 100encr aesauthentication pre-sharegroup 2crypto isakmp key Flatt01 address 0.0.0.0 0.0.0.0crypto isakmp keepalive 60!!crypto ipsec...
Hi everyone, I have been working on my technical writing skills recently, and saw an opportunity to write while troubleshooting an AnyConnect idle timeout issue. While the official documentation states everything I have below, for my understanding it...
We need to upgrade all our AnyConnect clients to 5.x through the image update in our FTDs. I have been asked to provide some screenshots for our documentation on what the client will see when they try to connect and the automatic update starts. I kno...
Resolved! IPsec VPN
Helloconfigured vpn and all good, sometimes i see this log what it this? and also googled log and found this config crypto isakmp invalid-spi-recovery%CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=x.x.x.x, prot=5...
Good day all,A functional ikev2 tunnel suddenly stopped working and is now unable to get fase 1 working.We manage 1 side, we've compared notes with the other sides maintainer and they guarantee that no settings have been changed on their side. We've ...
EDIT: SOLUTIONI was missing this: crypto ikev2 policy ISLINK-POLICYmatch fvrf VPNcrypto ikev2 profile ISLINK-PROFILEmatch fvrf VPNMany Thanks to everyone for the assistance! I am trying to establish a VPN tunnel in Cisco between two routers. One of ...
Hi,I currently testing configure IKEv2 encryption with aes-gcm-256 on router c1121 but not working. and on GUI no option aes-gcm-256 to select.anyone have experience please help?
I tied to install Cisco Anyconnect Secure Mobility Client on my MacBook Air. After I tried to setup, it said 'installation failed'. Then I simply deleted the application, emptied the trash, and restarted. However, there is a Cisco pop-up now which ke...
