Hi AllWhat are the recommended settings for MTU when using Anyconnect VPN?We currently have the default of 1406.We have users complaining of slow performance when using file shares, I know SMB is notoriously slow over WAN links etc, any recommendatio...
Forum Posts
Resolved! cisco vpn not
Hi allits been a while since have done any VPN work and I need help with this issue.I have a ASA-5525 and 4 x5506s that I need to bring up tunnels.I am not seeing any Phase one or phase 2 activity on any of the firewalls. degugging has been swi...
Is it possible to set up more than one public Address for Cisco Anyconnect VPN client on the same firewall ? Like if one internet link goes down users would have the option to connect to the secundary internet link. Would that be possible?
Can anyone help me understand what is happening here? I see a cert validation on the client and on the ASA I see No matching fingerprint in chain against the trustpoint in question. KI[14]: pki_ossl_get_cert_summary, pki_ossl.c:118 PKI[8]: -----...
Resolved! Packet Tracer VPN Problem
Hi, I have started to configure a VPN, i already have GRE Tunnel, NAT, BGP, SR/DSR and all of them works just fine.after i have configured the VPN, when i try to communicate between 2 Pcs, it says the host ip unreachable, when it gets to the first bg...
Hi i cannnot add the command crypto ssl authorization policy SSLAUTHZPOL I have a security license installed Why ?? Cisco IOS XE Software, Version 16.12.08Cisco IOS Software [Gibraltar], ISR Software (ARMV8EL_LINUX_IOSD-UNIVERSALK9_IAS-M), Version...
Hi Community,I have 1 hub and 5 spokes. I want to change the tunnel protection from IKev1 to IKEv2 on the tunnel interfaces. I have a single DMVPN cloud itself, management to the routers runs via those tunnel interfaces itself.What is my best way to ...
Resolved! IPSec ESP encryption
I have one question,I am learning IPSec and I have the following question: the ESP Trailer is encrypted separately or together with the payload ?Regards.
Hi, Upgraded ASA from 9.14(2) to 9.18(3). After upgrade Anyconnect can't connect. "Wasn't able to establish connection with specified secure gw. Try again"From ASA log.Authentication radius - passedAuthorisation ldap failed.In logs i see, that certif...
Tried the following to resolve... - Uninstall and reinstall of all Cisco modules (5.1.3.62).- Tried an an older version of Cisco (v4.6)- deleted all network adaptors in Device Manager- ran chkdsk/r, SFC/ScanNow, DISM.exe- All Cisco Services in serv...
We are currently working on enabling users to change their first time login password over CISCO SBL. But heard SAML authentication is not possible in CISCO SBL sometimes before. Is there any progress to allow the users using SAML authentication to ch...
Hello Fellows, I need an urgent support. I've configured FlexVPN on my 8500L router, everything seems to be correct according to Cisco documentation but once it's connected, the virtual access interface goes down. I tried all the solutions on the com...
i All , Need your expert opinion We are in process to configure SSO with MS Entra.We configre RAVPN in FTD with stndard configuration .SSO authentication is set to default browser ,which is MS EDGE .When VPN user is loggoing in VPN ,It automaticaly o...
Hi!I want to Configure VPN Client to Site IPSec IKEv1 PSK XAuth on Firepower 1010 NGFW and I have some question:1. Do I need RADIUS server for authentication?2. Do I need AnyConnect License for VPN Client to Site IPSec IKEv1 PSK XAuth? I have only a ...
HiStrongswant shows the below when setup VPN with 8500CL. I know that there is a Cisco bug : https://bst.cisco.com/quickview/bug/CSCuw01249. Do I need to upgrade the latest version for my server ?Thank you[IKE] received issuer cert "C=CA, O=Spacebrid...
