VPN

Hello experts!I'm working to implement a DMVPN scenario where the links use dynamic IP addressing.Now I`m trying to bring up a CA on the routers of the company head quarters, and facing an issue where the devices are not able to establish the redunda...

I have configured a .xml profile for automatic VPN policy with values in Trusted DNS domains and Trusted DNS servers. Trusted Network policy is configured to Disconnect, and Untrusted Network Policy is configured to Connect.  Profile is configured in...

Hi everyone, The subject says it all -- Is ASA-to-ASA Dynamic-to-Dynamic IKEv1/IPsec Configuration possible at all? Just to be sure this question is NOT related to the common scenario where one site has static public IP. This scenario is where ALL si...

Hello, is it possible to tunnel the Traffic of a specific Interface?Lets assume i have Ethernet interface and USB-WLAN Adapter. I want to Tunnel just that Traffic of the Ethernet interface. Thanks for Help  

In what is right now a test environment I have  dual hub DMVPN routers setup with 4 spokes. One particular spoke was working for a few weeks with dual tunnels to each hub. Now for an unknown reason this spoke is connected to both hubs, but only passe...

Dear Community, This is my first post after many years of just reading along here and using all the valuable discussions as guidance.  Our company recently moved offices, in doing so i had to reconfigure our site-to-site link to a new internet line. ...

Hi All, I had a number of IPSEC VTI VPN tunnels up and working prior to an IOS router upgrade.The device is a c3945 and was previous running:c3900e-universalk9-mz.SPA.154-3.M3.binand upgrade to:c3900e-universalk9-mz.SPA.157-3.M4b.bin All except one I...

HiI have an ASA5510 in failover, after a reload, a message "Untrusted VPN Server Blocked" appears after the first attempt to connect to the VPN, if we uncheck the "Block connections to untrusted servers" in preference settings the profile is updated ...

Hi ,I would like to ask about DMVPN setup.I tested DMVPN with GNS3.I am using ios c7200-adventerprisek9-mz.152-4.S7.image.I run EIGRP is overlay protocol to carry route.I also run static route redistribution.I didn't get eigrp route and static on my ...

I am trying to implement ipsec vpn in my network but when i type in the command show crypto isakmp sa, nothing is displayed. But when i do show run it shows the ipsec configurations on the interface as it should be. I have attached a text file contai...

Hello, In order to help speed up setup of a secondary ASA 5508, I verified that they were on the same firmware version, and backed up both the configurations from the working 5508. From there, I edited the running config/startup-config to match the d...

Good day Security experts! I have two sites my phones on site B have to register on Site A (HQ) using DHCP option 150 which specifies the TFTP server.Site B  has voice VLAN with 192.168.3.X and phones are getting IP address except option 150 strange....

 Dear All,I´m trying to configure an IKEV2 VPN anyconnect on my ASA 5505 and when I try to connect in the anyconnect client, I receive the msg: "Login Denied , unauthorized connection mechanism , contact your administrator". Can you help please Kind ...

Users who connect to my company's anyconnect, delete the entire profile / configuration of the client anyconnect,Is there no way they don't overlap and both profiles can coexist (both my company's and my client's anyconnect)? Kind regards.

I am working on a configuration for LDAP authentication for AnyConnect on a Cisco ASA.  The LDAP command line test works using the CLI on the the loacl device by authentication fails when using the AnyConnect client. #test aaa-server authentication c...