Hi all,I have an ASA5516 that is hosting several Anyconnect VPNs using a Radius Server for authentication. The Split tunnel list is configured on the ASA. The "SPLIT TUNNEL LIST" injects static routes onto the clients PC for the resources specified.H...
I am having troubles with authenticating both peers with CA certificates.The error message I get is:%CRYPTO-3-IKMP_QUERY_KEY: Querying key pair failedThe "Cisco IOS 12.3 T CRYPTO Messages" guide says the following:Explanation A public key or private ...
Hi, I'm trying to create a site-to-site tunnel from Site A (Asa 5506-X) to Site B (Meraki MX64). The Meraki reports the tunnel as up (green button) and I believe the Asa does the same: <EDITTED OUT FOR SECURITY PURPOSES> Here's a diagram of what I'...
I have been trying to figure out on how to configure 2 FA on cisco FTD connected to FMC. Unlike Cisco, ASA FMC doesn't have an option of secondary authentication server where we can use one primary authentication VIA RSA and Secondary authentication...
Good day, Please advise if it is possible to use a Corporate Proxy Server(Via PAC or Device Config) on an Android Device(Phone, Tablet, Other) when connected to Cisco AnyConnect Vpn. This feature is available on Apple iOS but not on Android OS, Is t...
Hi All, We have an existing Anyconnect VPN connection which works absolutely fine to the specified subnet it was originally intended for. For logging purposes its 192.168.10.1.0/24 I am trying to grant additional access into separate VLAN 192.168.210...
Even if I log in as a local administrator my internet access is blocked.I'am able to ping sites but browsing does not work.Only when I connect to the corporate network I've got the access.I belive this is a global configuration based on being a membe...
I see on some docs such as at https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/6500-bgp-pix.html that you must configure NAT in addition to allowing port 179 to allow BGP through a FW. Basically I am just trying to confirm wh...
Hi Guys I am trying to setup a new IPSEC VPN connection between a Cisco ASA 5520 (verion 8.4(4)) and Checkpoint Firewall. I have successfully established IKE and IPSEC phases and I can see tunnel is UP. But I can't see any traffic going through the ...
Greetings all After reading posts similar to this one: https://community.cisco.com/t5/vpn-and-anyconnect/asa-5505-free-inbuilt-anyconnect-licensing/td-p/3316063, I'm left in the same boat but still having questions. Our 5508-X has a value of 4 for An...
Hi Folks, I am trying to establish routing between two Site to Site vpn tunnels, both of which are terminating on the same outside interface of my Cisco ASA. Please find attached Network Diagram for the same. All Firewalls used are Cisco AS...
Hi all I have a problem with a basic hub and spoke FlexVPN configuration I have created. The config was based on a known working config from a virtual lab with Cisco CSR1000v but it doesn't appear to work on physical hardware (Cisco 892FSP) The tunn...
Hi, I recently downloaded Cisco AnyConnect Secure Mobility Client and I am unable to connect and receive messages to check my internet connectivity. I ran DART and I have that information. Can anyone please assist in troubleshooting this connection i...
I have a Cisco 1921 router that I use at our head office to connect to remote offices across the country. The head office uses 172.16.3.0/24 local IP range. All of the remote locations have identical configuration with IP range 192.168.xxx.0/24. A ne...
Hi All,Can i request to give me a favor to solve my NTP testing.I trying to test ntp configuration and setup in lab.I want to configure R1 as NPT Master of R2 and R2 as NPT client of R1 and R2 is NTP master of R3. I also want to authenicate with MD5 ...
