Hello All, We have three Cisco 5545 ASA firewall configure for SSL VPN & this three firewall are in VPN load balancer. for inside & Outside we have separate switch . also we have one vrf interconnect to VPN firewall(different switch for vrf).recently...
Forum Posts
Hello, I need to establish a statefull failover link between 2 ASA in two seperate rooms. but I have to go through a firewall for this link.I know that the easiest way to do so is to have a layer 2 link. but this is a very particular situation where ...
Hi,We're getting a Security Warning when we try to login with our AnyConnect clients to vpn.domain.com.The warning shows the IP address of vpn.domain.com instead of the domain-name? We have a valid DigiCert wildcard certificate for *.domain.com insta...
I have an issue with an IKEv2 route-based tunnel from an ASA Version 9.8(4)20 to Azure. On the Azure end, we have two address spaces defined for our local network. On the ASA end, we send all traffic destined for our one network in Azure through the ...
Hello, I have a question for everyone. I have configured trusted network detection in a non-production environment, and basically it is working as advertised. I have found though, that when I move from an 'untrusted' network to a 'trusted' network th...
I just read over the release notes for the new 9.7.1 release and stumbled upon this: Virtual Tunnel Interface (VTI) support for ASA VPN module The ASA VPN module is enhanced with a new logical interface called Virtual Tunnel Interface (VTI), used ...
Resolved! ASA VPN Pool DHCP
Good afternoon people.I am configuring a VPN remote access in ASAv, in the DHCP pool configuration I am trying to place a pool / 16 however it presents the error that it does not support. What would be the best practice for configuring DHCP pool in ...
Hi, AWS require 2 peers to be setup for redundancy, is this not possible to achieve with ikev2? Should Phase 1 and Phase 2 encryption/hashing/DF Group match? Seeing no return pkts decaps=0 so wonder if this has to do with Phase 1 picker lower securit...
Hi, I installed anyconnect 4.8 on a windows 2016 server, but the vpn does not work. the configuration of the VPN client is OK and the stream opens too.I also saw in the doc CISCO Anyconnect that windows server 2016 is not part of the list of support...
Hi, I am using a Cisco ISR 1111-8P running 16.8.1 and am trying to build an elliptic curve self-signed cert to use for an IPSec tunnel. The commands I usually use to do this with RSA and which work on this box are: dev(config)#crypto key generate rsa...
Resolved! cisco ASA VPN IP local pool issue
Hello All, we are using ip local pool to assign ip address to Cisco VPN client. but we faced issue with starting ip & end as it show always free because of that users not got ip address from other pool.ip show in use but still 6.ip showing free. belo...
PC1 - ASA1 ---- ASA2 - PC2 PC1 IP : 100.100.100.100ASA2 inside interface IP : 200.200.200.1 It is composed as above.source Ping 100.100.100.100 destination 200.200.200.1 in PC1ping failed why fail??
Hello All, We are configuring the SSL Anyconnect VPN for a Cisco FTD (managed by FMC) , plan is to integrate the authentication with LDAP Server. LDAP is also configured for test is not getting succesfull. getting error message : Management Center -...
We had internet connectivity problem. After it was resolved, we wasn't able to connect to VPN with anyconnect client with error "Failed to get AAA hendle" We updated ios from asa917-k8.bin to asa917-6-k8.bin. No luck. It allows to conect only once af...
Hi all, I am struggling with this trouble for a week but couldn't find any solution.- Our company is using our own email server(http://gw.----.com) that can be only loaded from our work place. We are using VPN(Cisco Anyconnect) to use email server wh...
