Hello I have problem with flaping trunel between Router and tow ASA firewall Here is my configuration with Router hostname Router!boot-start-markerboot-end-marker!vrf definition Mgmt-intf!address-family ipv4exit-address-family!address-family ipv6e...
Forum Posts
Resolved! DMVPN per VRF Lite
Hi, I am running my DMVPN LAB in GNS3. R1 is DMVPN HUB, R3 and R4 are DMVPN Spoke with VRF isp1 enabled in WAN interface (Gi0/0).The syntax seems correct I can ping the tunnel IP address and enable OSPF in the DMVPN tunnel.But I still confuse with fe...
Resolved! IPSec SA not initializing (L2L Tunnel)
Hello guys.I'm practicing IKEv1 tunnels and trying to set up an IPSec Tunnel to pass LAN traffic thru the tunnel between the 2 sites, and i also want the LAN network on each side to be able to reach "the internet", (i'm using nat overload for this).T...
Dear CommunityWe are currently using Azure Cloud MFA (without NPS) to authenticate clients for SSL VPN. Its working great, and much better than paying for & maintaining RSA SecurID (token, oda, RSA-AA). Would highly recommend it for any current O365 ...
I know the 1st thing you might say is check Split tunnel settings. This issue is so sporadic that I could not relate it to VPN server (#ASA 5520) split tunnel configuration. Also, for two different users vpn-ed in from two different ISPs , will have...
I am using a version of AnyConnect 4.2 that doesn't seem to work with either of my versions ofAV Defender 6.6.10.148AV Defender Installer 6.4.2.79Is there a way to either use the latest verison of AnyConnect with the other profiles?Or can I have to ...
Resolved! PKI with GETVPN
Hello, I just took over GETVPN topology: We use KS as CA server. The GM5 is the CE in the HQ and established BGP peering with every branch through VPLS network.I have a few concepts need to clarify: 1.If KS have an issue with a certificate from CA. A...
Dear all,We have a RA SSL anyconnect solution for our office with Tunnel all policy because we want the employees when doing home office that the internet traffic goes via company proxy servers.Everything is running smoothly except for users connecti...
Resolved! Firmware update and certificate
hi ,I would like ask about iOS upgrade.I would like to upgrade my iOS of router .Let me know after flashed the firmware my config and old certificate will be gone?Do I need to create new public and need to install new certificate again.I am using thi...
helloi dont know what might has happen, vpn users can ping the outside and inside interface of the Cisco ASA but cannot connect to servers or ping the servers inside the LAN.please kindly heck config and let me know what might has happen.hostname hor...
Dear Members,My scenario as follows.++ I am trying to establish Anyconnect VPN for Domain joined computers and Workgroup computers (Non-Domain) via DAP.++ We have certs installed on Domain PC's and it doesn't ask for Security Warning when trying to c...
Resolved! VPN Clients Internet Via Proxy
Hi All,Infrastructure : Internet FW <--> IPS <--> Core SWRA vpn users terminate on FW and currently split-tunneling is in place.Adding a Bluecoat proxy in Transparant mode -main purpose is for intercepting 'https' requests from internal client for DL...
Resolved! VPN Filter ACL
HiI am configuring a IPSEC VPN and want to apply a VPN filter so users from network LOCAL-SITE can access services on REMOTE-SITE on ports group SITE-PORTSSo local, remote and port values are part of object groups. Which would be the correct way to d...
hi,for now, i am able to access the company LAN from home via AnyConnect, but my internet connection still through my home broadband.I wanna to access route all the traffic via AnyConnect, that means I will use company broadband to access youtube, g...
I have two ASAs running a site-to-site vpn. I can see the tunnel is up at both locations. On one side, I can see encaps and decaps packets but on the other it only has decap packets. I have a continuous ping running on both sides but now it seems lik...
