VPN

Resolved! RA / S2S VPN - Two IP Addresses

On Site A, I have two ISPs, and both of them are unstable, one ISP works sometimes, sometimes the other. 1) How can I create a S2S VPN to Site B using both these IP addresses such that, if one goes down, the others takes over. 2) I want to create Rem...

Site to Site VPN with DDNS on remote FW

I have two sites right now: local site has an ASA 5505 and remote site has a Dray-Tek vigor 2133 series router with a ddns from dnsalias configured on it. My question is: Is it possible to configure our ASA to build a S2S tunnel using the Draytek's D...

Route based IPSEC VPN between ASA to Juniper SRX1500 - traffic selector mismatch

I have a route based VPN between my Cisco ASA 5555-X and a Juniper SRX1500. I am seeing some errors coming in. The following log entries were from either end of the VPN at the exact same time: Juniper log entries:Nov 11 15:36:09 firewall02 kmd[40699]...

Resolved! Route based IKEv2 VPN between ASA and IOS router help

Afternoon All, I am hoping for a bit of help setting up a route based IKEv2 VPN between an ASA & IOS router. I have setup route based IKEv1 VPN's between ASA's & IOS routers with no problem but am really struggling doing the same with IKEv2. The ASA...

Can not receive VPN login email for Multi-Domain Sandbox SDWAN Lab.

Today, I reserve the "Multi-Domain Sandbox SDWAN Lab" from https://devnetsandbox.cisco.com.I can reserve the lab, but the lab setup was experiencing following error and I can not receive the VPN login email.

Resolved! AnyConnect - DART - duid is not unique per device

Hi, I'm looking for accurate documentation on how the AnyConnect duid is generated.If I look at DART cli options, there is two ways to print the uid of a device :-u, -udidDisplay global unique device identifier information.-ul, -udid_legacyDisplay un...

Resolved! AnyConnect VPN client version 2.5.0217- not able to establish connection to gateway

I am getting an error when trying to establish a connection to the secure gateway: AnyConnect was not able to establish a connection to the specified secure gateway. Please try connecting again.I have tried connecting again many times. I have also...

SSL VPN Cipher upgrade question

A recent third party security review recommended that we update the ciphers used for our SSL VPN. Our clients connect using the AnyConnect client which I know needs to be upgraded for some users. I am trying to find a guide or steps explaining the ...

Site-2-Site IKEv2 VPN between Cisco IOS router and PaloAlto firewall

Has anyone here successfully get Site-2-Site VPN between a Cisco IOS router and PaloAlto working with IKEv2? I am at a loss here. Cisco TAC support is not very helpful. The TAC guy who help me is not very good with VPN. After going back and forth...

Resolved! internet speed

Hello All, Our users vpn to our network and are not enabled for split tunnel. The internet link at office is 100Mbps.Some of the users have complained that they only get less speeds even though they are going through our corporate 100Mbps internet.Is...

Does SFTP need additional VPN to be secure ?

Hi,keeping in mind that the goal is to create a higly-secure connection from multiple locations to an internal server and that the purpose is ONLY to transfer files, is a SFTP (SSH File Transfer Protocol) server a sufficient secure transfer channel t...

Resolved! AnyConnect Split Tunneling issue with STUN traffic

Hi guys, I'm experiencing a curious behaviour with AnyConnect split-tunneling.In my setup, split-tunneling (split-exclude) is working perfectly fine for all FQDNs and subnets defined in the split ACL except for 2 subnets linked to Google Hangouts/Mee...

Pat over vpn tunnel

Hi, i have a vpn site to site established.site A with 192.168.0.0/24site B with 192.168.1.0/24How can i pat site A ip 192.168.0.100 through site B asa on its outside interface?

Resolved! FTD IKEv2 to Windows 10 Native client with dynamic Group Policies

Dear all, lately I have managed to make FTD to support IKEv2 tunnel from Windows 10 Native client, using only certificate authentication.However the configuration is working only with one locally created address-pool. For SSL we have 3 different Grou...

VPN pool cannot ping inside interface and hosts in inside network

Hello Guys, It's been a while since I installed a Cisco ASA 5545 in HA.I have several Address Pools, VPN Profiles and everything works perfectly.I can reach all the VPN Pools from the internal network.I can reach all the internal networks from the VP...

Forum Posts

Resolved! RA / S2S VPN - Two IP Addresses

Site to Site VPN with DDNS on remote FW

Route based IPSEC VPN between ASA to Juniper SRX1500 - traffic selector mismatch

Resolved! Route based IKEv2 VPN between ASA and IOS router help

Can not receive VPN login email for Multi-Domain Sandbox SDWAN Lab.

Resolved! AnyConnect - DART - duid is not unique per device

Resolved! AnyConnect VPN client version 2.5.0217- not able to establish connection to gateway

SSL VPN Cipher upgrade question

Site-2-Site IKEv2 VPN between Cisco IOS router and PaloAlto firewall

Resolved! internet speed

Does SFTP need additional VPN to be secure ?

Resolved! AnyConnect Split Tunneling issue with STUN traffic

Pat over vpn tunnel

Resolved! FTD IKEv2 to Windows 10 Native client with dynamic Group Policies

VPN pool cannot ping inside interface and hosts in inside network

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

Cisco Secure Client 5.1.3 webdeploy (pkg) issue

急求解决！！Anyconnect无法与网关建立安全连接

System scan on anyconnect - What kicks it off

Cisco Secure Client Apple M3 compatibility?

After installed Anyconnect, PC cannot connect the WiF

Error Connecting to AnyConnect

Create IPSEC Point2Point using VTI on FTD (FTD code)?

ASA can't SNMP over VPN (VTI, not crypto map)

IKEv2-ERROR:: Auth exchange failed

VPN IKEv2 Flapping between 2 IP Addresses