Hello! 1. I have an AWS VPN setup and working just fine from my "Inside" interface on my Cisco ASA. (192.168.10.0/24). 2. I have another DMZ interface (192.168.5.0/24)3. I want both of these to access the AWS subnet (172.30.0.0/16). I've set ANY as t...
Hi, In a home lab, I created following very basic DMVPN Hub & Spoke Topology, and unable to make my tunnel up, appreicate any support, not sure is there anything missing? scenrio: Hub and Spoke connected to an ISP router, on Hub & Spoke are under VR...
Hi All, I configured anyconnect vpn. I can connect to it but cant ping internal network. Not sure what am missing here, any help is much appreciated. * Configured no-nat rule (bi-directional) between the inside (192.168.40.0/24) and outside (10.10.50...
Hi! Can you help me with troubleshoot, I don't know where I am wrong?I don't see on BUH2, route from BUH1 (81.1.210.0/24).I attached config from BUH1, BUH02, ClinicaA01, ClinicaB02, P0.
Hello everyone, I'm currently troubleshooting AnyConnect SAML SSO via Azure. Below are some details about the environment and current troubleshooting steps that have been taken so far. The goal is to have users authenticate with their Entra credentia...
Hello,I have a question about migrating a IPSec tunnel from between a Cisco C981F-k9 and a Cisco ASA firewall to a tunnel from the same Cisco C981F-k9 router to a Fortigate firewall. What is the 'best' way to migrate this tunnel?Currently I have conf...
We've been using AnyConnect SBL for a long time. All new PCs are being onboarded with Windows 11. The first new PC in the hands of a remote worker went into service this week. The onboarding procedures, including loading AnyConnect and specifying the...
Hi team, just want to ask question, what causing the S2S VPN (HO-ASA, Branch-MX Meraki) can only one way (for some subnet/ip segment)) From Client MX-Branch (10.8.14.x /24) : able to reach/ping to HO-ASA client 10.0.210.x/24 & 192.168.27.x /24 ==>...
I'm work on 3900 router and ES3 etherswitch service module. I mistakenly load wrong ios on switch and deleted old ios. Because I didn't have ios on I was trying upload right on using xmodem. I saw in a blog that I should set baud rate to 57600. A...
Hello all:We're looking to implement VPN load balancing across 2 Cisco ASA 5555X in our environment. These 2 ASAs are currently acting as individual gateways and we have an alias configured in the AnyConnect profile for them.<ServerList><HostEntry><H...
Hello I'm using internal PKI with Active Directory user certificates deployed using GPO. I want to use them as client certificate only authentication in my FTD managed by FMC.For my Access interface I have public CA signed certificate, so my non doma...
I'm trying to work out how to achieve different Group Policies for different users. I know how to send Attribute 25 Class to select the group policy, however would this override the group policy that was previously selected by using a specific URL? ...
Hi guys,so I have another problem. We implemented 2FA for Anyconnect VPN with Azure AD. All is working fine but there is one big problem. Users are not receiving custome settings by AD group. Like we had previously with RADIUS, we have many AD groups...
Hi. I am trying to deploy the latest Cisco Secure Client as a LOB app via Intune. When configuring this and trying to deploy to a test collection, the install fails. After investigating the error code I found out that the .PKG you upload for the LOB ...
We're considering going to a Certificate + AAA method of authenticating our VPN AnyConnect clients. This is in response to hackers attempting to brute force their way into our network. It's a nuisance because they guess some of the account names corr...
