Forum Posts
I have a problem with the ipsec tunnel with Huawei equipment.The tunnel goes up, works for a while, but then it collapses.In the logs, I see a policy error, however, on the ASA side, I have other tunnels established, all working, but I can't understa...
HejI am trying to setup a IPSEC IKEv2 tunnel between an ASA1150 and an Opengear OM1208 device.I am wondering what am I missing. I use a similar config between ASAv-ASAv and it works ok.Host-1----172.16.68.0/24------ASA----------Opengear----172.16.69....
Hello everybody,our customer has a FirePower 2130 running ASA-OS 9.14(2)18 with hundretsof S2S-tunnels.A tunnel (peer 87.129.194.226) is frequently hanging so that only the remotefirewall admin can reset the tunnel to make it transfering fraffic agai...
Resolved! ASAv VTI with fortinet
im trying to do a route based vpn between cisco ASAv and FortigateVM(before production) but on the asa im getting this: #pkts not compressed: 21, #pkts comp failed: 0, #pkts decomp failed: 0 and trasffic only flows from Fortigate to the ASA. commands...
Resolved! Need information about IPsec
In my collage project i choose provide security to campus network an i want to build IPsec vpn in this project so i need all information about IPsec, I have basic information about IPsec. and if there are any other suggestion regarding this project t...
Dear all,I have an issue related to AnyConnect VPN, & looking forward to the troubleshoot steps.>Some users experience the following error, and this happens frequently >I looked at the user log, this happened because our VPN server (ASA) terminated t...
Resolved! IPSEC CONFIGS MIGRATION BETWEEN FTDs
Hello Team,Is it possible to migrate IPsec configurations from one FTD to another being managed by same FMC but sit on different DCs?If yes, what tool can I use?Thanks in advance.
Hi all,For IKEv1, I use 1.3.6.1.4.1.9.9.171.1.2.3.1.35, however, it does not include IKEv2 tunnel of course.I only found one tread here mention "1.3.6.1.4.1.9.9.392", it seems working for ASA.But it does not work on Cisco CSR, I run "snmpwalk", got ...
Hi all, I want to ask the community if my understanding is correct. Waht we have: 1. Centrale ASA with static Public-IP.IP-Address in LAN - 10.0.10.0/24 2. Remote FW-1 with dynamic Public-IP.IP-Address in LAN - 10.0.20.0/24ISAKMP-ID : fw-id-1PSK: xxx...
Hi al,I rebuilt a asa5506 on 9.14 but I can't seem to access the internal network over secure connect.Split tunnel and nat is configure, I see the hit counts and it is getting dropped by acl. Any thoughts?hs1rt1# sho vpn-sessiondb anyconnectSession T...
Hello About the vulnerability CVE-2024-20337, where cisco recommends upgrading to 5.1.2.42 to fix the vulnerability, but does this also apply to "Sucure Client UI"? Where I'm only have 5.1.0.1047 version- if so, where can I find the latest version fo...
I've been battling this thing for 6 hours now and I can't come up with a solution - probably because there isn't one. But I thought I'd ask here before I give up. The issue with captive portals has been plagueing us for a while now because all our us...
Hello,Is there a limit in a VPN Ipsec throughput? Somebody told me that there is a limit in 1.3 gbps in a VPN IPsec. Is that true?I found this link in which it is implicit that limit 1.3 gbpshttps://aws.amazon.com/ko/blogs/networking-and-content-deli...
Resolved! DMVPN Phase 3 issue
Hello All,I have a DMVPN phase 3 setup between a hub router and two spoke routers in a lab enviornment. below is my configrationHUB SPOKE1 SPOKE 2 tunnels come up on the hub just fine via the above configs as seen belowat this point that's when thing...
