Hello,I would like to set up a site to site VPN between 2 Cisco 881 :version 15.5 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname RemoteLab ! boot-start-marker boot-...
Forum Posts
Hi ExpertsWe're authenticating remote user by machine certificate only on ASA firepower 2110 ver 9.13 in appliance mode. We'd like to authorize user by performing LDAP querry to AD to check if machine is member of a specific group via DAP. The cn fro...
I'm not familiar with the AnyConnect VPN software, but I'm familiar with other VPN software that can hide/spoof your IP and make it look like you are in another state or even another country. I assume this is because wherever you connect checks your ...
Resolved! Measure Latency of home Anyconnect user
Hey super straightforward question, is it possible to measure the latency to a home user over AnyConnect from our headend VPN ASA 5525 firewall?Most of our home users have no troubles, but some have call quality issues with Jabber Softphones, or RDP ...
Because of a bug, we have decided to split our HA pairs of FP4115's running ASA into separate devices. The problem I'm seeing now is, when a user is connected to vpn1, and then vpn1 goes down, anyconnect tries to reconnect but only to the ip of vpn1....
So we had clientless web VPN with DUO 2FA working until one of our domain controllers went down. I logged on to the ASDM Cisco 5505 and pointed everything with the downed DC's IP to another DC that is up and working but the logins are failing. ERROR...
Hi,I am having issue while setting up one VPN tunnel. All the configuration are same but there is no encapsulation in phase 2.Here is the debug log.Jul 24 21:18:12.399: ISAKMP:(13331):DPD/R_U_THERE received from peer 172.16.10.15, sequence 0x13B00F.J...
Resolved! Asa 5505 Anyconnect
I'm using an old asa5505 for anyconnect purposes, is it still possible to get fixes/firmware for the NCSC-2020-0595 problem?Or is there a workaround i can use?regards
I have a router at Main Office of model: Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.2(4)M5, RELEASE SOFTWARE (fc2) which i am trying to create a VPN to a remote site with the following verison" Cisco IOS XE Software, Versio...
Hi,I have to establish a tunnel from the local FW to a remote FW in L2LIn case of failure of the remote FW, a tunnel has to be opened with the backup remote FW.I have proposed to use IKEv2But with following config i get the message: %ASA-4-752009: IK...
Hello,as described in the Titel a want to connect with AnyConnect Secure Mobility Client 3.0.2052 to ASA 5540 Version 8.4 and SSL Premium License.The clients using Maschine Certificate to authenticate to ASA. This works fine.Now I want to setup a DAP...
Resolved! Static route over IPSec Tunnel
Hi, I need to reach a secondary router internal subnet which is at the end of an ASA ipsec tunnel (see attached)For clients on Router A (172.16.2.1/24) to reach clients on Router B (172.16.1.1/24), would it just be a case of entering a static route e...
Good morning, I am looking to create a VPN from an FTDv inside our transit VPC to another VPC using the VGW, but im running into some configuration issues:1. the IP address scheme provided by AWS after I create the VPN uses the 169.254.x.x address ra...
Hello: I have the above mentioned router and am attempting to configure it to bring up an L2TP/IPSec connection with a windows client.It completes phase 1 fine but fails the phase 2 negotiation stating the transforms don't match but it seems that the...
I have VPN Remote Access setup and working on our Firepower 4110, version 6.2.3.3 but I am now trying to install an SSL certificate for this Remote Access setup so that my users do not get SSL errors when trying to connect and use the AnyConnect clie...
