Dear all, I'm actually deploying new routers to my GDOI Infrastructure. The actual infrastructure is using 3DES as Phase 1 encryption algorithm. I would like to use AES encryption algorithm for the new routers as it's more secure. The Key Server...
Dear all, I actually have an GDOI/GETVPN infrastructure with all KS and GM running on Cisco IOS 15.5(3)M5. I'm planning to replace some GMs with new routers running on Cisco IOS-XE 16.6.4. I can't find any answer regarding the interoperability, do yo...
Hi All, I'm no Cisco regular but a client asked me to establish a VPN connection between their sites so I thought, this shouldn't be hard...Cisco 2900 series at the main site with a public IP address and 172.16.x.x/24 internal net.SonicWall at the re...
Hi! I have the following problem. I would like to use AnyConnect access with LDAP / AD connection on the ASA 5515 (9.9 (1) 2). I also have everything running. Say, LDAP attribute maps etc.For example you dial in via "vpn.blablabla.com/access1" with U...
I am seeing a ton of these entries one of my spoke routers.. the hub router IP is 10.1.2.1 and all the dst IP's are not in use so I can't figure out why the spoke router is sending packets to 10.1.2.3, 10.1.2.44, 10.1.2.47 and so-o and those IP's are...
Our partner bought from us the license L-AC-APX-LIC= for ISE, but when they want to integrate the license with ISE, the system asks for the serial number of the ASA, could you please h
Is it possible to specify a backup peer IP address on a Cisco ASA v8.4 when connection to a SonicWall firewall via a site-to-site VPN? The "crypto map set connection-type" seems to be specific to VPNs between Cisco devices.Does anyone have peer fail...
Hello - I have run into issues attempting to get Anycconect running on an C921 IOS router. The config has taken fin and I have installed the Anyconnect PKG etc. The issue I am finding is when i enter "ip http secure-server" it doesn't create the c...
I am trying to use radius rather than LDAP for authentication.With LDAP I can define an attribute map that matches a returned LDAP attribute to user-vpn-groupThen select the webVPN policy group based on that.This means I can have multiple group poli...
I have an ASA in my headquarters, lets call it HQASA. HQASA has a Site-to-Site VPN to an ASA located in my data center, lets call this on DCASA . Users in my headquarter, HQASA can reach the IPs in the data center through the Site-to-Site VPN Now f...
Good morning, I've been struggling with this issue for about a month or so. Also have a TAC request in and after capturing tonnes of logs and debugs, the engineers have yet to find an answer. We have our 3rd troubleshooting call scheduled in a few...
Hi there,I have a requirement to build a VPN tunnel to a network on a Windows XP box. There is no option to use a newer Windows because the app only works on the Windows PC. I can't find any VPN client that would still support the XP so I researched ...
We currently have "Always On" enabled in the AnyConnect client profile. We are trying to set up Windows Hello and there is a need to it to use a PIN to log in the client. This needs to be done before the VPN connections is established. We have det...
Hello, I have a very simple query regarding gre over ipsec. I know GRE tunnel stays up up if it has a IP address configured and has a route to destination tunnel. I want to know that if I am running IPsec for encryption on that gre tunnel and in prov...
Hi,I have a Cisco 5520 cluster and Cisco Anyconnect Secure Mobility Client 3.0.5080. I eventually want to connact by means of a Smard Card and I was able to connect a view weeks ago. Now I am hastled by the error Logon denied, unauthorized connection...
