VPN

Acknowledging that split tunneling is a risky policy to enable on an enterprise network. However, what would be some key configurations to have in place to lower the risk of unauthorized access to their network should someone compromise the security...

Hi there,Is it possible to install keys and identity certificates on the VPN 3000 without using the VPN 3000 itself for the enrollment/generation? This would allow for backup of the private keys. In case of VPN3000 failure that would save (down) time...

i was trying to uprade my pix 515UR which is also having a pdm on it. The procedure says you have to upgrade it through the monitor mode.As it goes, everything was fine, i could ping the tftp server from the monitor prompt. i've reach the point askin...

Hello,I tried to enroll Digital Certificate for Cisco VPN Client 4.x by SCEP from Cisco IOS router configured as CA server, but unsuccesfully. CA server issued certificate, it is visible from output of "debug crypto pki server" command:Jul 29 09:45:5...

I am using the following:Cisco VPN Client 3.6.6IOS SOHO97-K90Y1-M Ver. 12.3(2)XCWindows XPI configured the router according to this URL:http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801c4246.shtmlThe rout...

Is there a way to add a phase 1 policy to a VPN Client. I am studying for the CCIE Security Lab and one of my practice tasks is to create an SA using the requirments below. I read the VPN client admin guide (table 8-3) and see the valid ike proposals...

Hello,I'm searching for some PNNI networking planning guides for Cisco 6260 system, but unfortunately with no luck. If anyone may advise, what is the maximum number PNNI nodes per peer group using 6260? Of course, the answer is not straight forward. ...

NAT-T lets IPSec peers establish a connection through a NAT device. It does this by encapsulating IPSec traffic in UDP datagrams, using port 4500, thereby providing NAT devices with port information. NAT-T only encapsulates IPSec traffic when necessa...

I have AS5400 & I have faced lot of disconnection & when I see the log it shown the disconnections cause is "Lost of Carrier" .I have change the modem cap entry from 1400ms to 6000ms "&FS10=60".But no effect users are disconnecting at frequent interv...

Somehow my message got lost ..so I try it againI'm trying to assign a static IP address per user on a Cisco 3015. The group and the users are configured internally. I have un-checked the use address pools option and I have configured an IP address fo...

I need to know is there a way to restrict VPN access based on a remote host's MAC address? I want my VPN Concentrator or my PIX to permit or deny VPN connectivity based on a device MAC address (e.g. employee Laptop used off-site).Thanks

I must implement DDNS wtih a PIX 501, It is possible? I don´t find any Informations about that problem on cisco.

Dear All,I am preparing for my CCIE LABS. I have a small question. I have two Cisco 2600 router with one have WIC 1 BU and seconde having WIC 1 S/T. Teltone 2000 ISDN simulator is having one side U AND S/T and other side same U AND S/T port.Now one s...

I'm replacing an as5200 with an as5300 device.Copying and correcting to the new interface naming the configuration from the old device to the new one the inbound connections works fine but the outbound dial on demand connections does NOT works even t...

I am trying to connect two pix 501 firewalls together. I followed the instructions from http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml exactly and I still can't get a VPN tunnel up. The pixe...