Hi everyone, the VPN works, is Active-Up I can ping from the Branch to the HQ, but I can't do it from the HQ to the Branch.Please find attached the sh run of both Routers.
Hello i am confused in vpns protocols and i need little clarification if possible, is it safe to say that layer 3 ( network ) vpn protocols : IPsec,MPLSlayer 2 ( data ) vpn protocols : PPTP,L2TP,L2Flayer 4 ( transport ) vpn protocols : SSL/TLSlayer 7...
Hello All, We have one of our partners who upgraded their ASA firewall from the old ASA 5510 (8.2) to newer 5508 (9.1(7)23). Since then the Shrew Soft VPN client they use (ver 2.2.2) on Windows 10, does not allow people to connect and gives "negotiat...
Do the ASA support GRE tunnels specifically for DMVPN tunnels?
I read somewhere that maybe the newest ASA firmware, 9.9x-something, might support it....
do you know if Cisco has finally added this on the ASA if so, can you provide a link?
thank...
Hi Cisco Security Guru, I am trying to allow remote anyconnect VPN users to access ASA via SSH/ASDM, however it fails, denied by implicit rule: VPN IP Pool: 192.168.200.0/24, Internal interface: Vlan4015: 172.16.0.1/29 <necessary config>management-...
Before I get too deep into this, I want to specify that this is not the profile (.xml) file that I am referring to, but the actual configuration found in the CLI or ASDM. I understand that the following are not replicated between an active and standb...
Hello,I have Cisco ISR ISR4431: 03.16.01a.S, Changed it to: ISR4451-X/K9 16.06.05. Migrated all 8 IPSec tunnels with same configuration, but two of them are flapping every two minutes. : Debug shows this: May 13 14:04:43.761: %CRYPTO-4-IKMP_NO_SA: IK...
I initially set up an AnyConnect VPN to go to a single internal subnet, and that is working. However, we are adding several more subnets, and I cannot access any of them across the AnyConnect VPN. All of the subnets terminate directly on the ASA t...
Hi all,Weird issue which is being experienced by a a large portion of our users basically.. IssueUsers connect to their WiFi at home, authenticate successfully and are sent back to the Cisco AnyConnect Client with a 'Ready' status as if they haven't ...
Hello, I have configured remote access vpn on asa with ldap authentication. But I can't limit vpn access with specific ldap group.Here is my config: ldap attribute-map VPN_GP_MAPmap-name memberOf Group-Policymap-value memberOf "CN=Alternate VPN HR Us...
Hello guys! I have the following situation:I have 02 sites (A and B), Both sites have communication with each other using MPLS circuitsSite A I have a Meraki MX64 with internet connected.Site B already has an internet connection, but for some users, ...
we have a lan to lan IPSec VPN, and it will disconnect 1 or 2 times everyday randomly, and it will auto re-connect after 5 ~10 minutes.we want to check the log to get the cause. I wondering if something can tell me how to get the log?the command #...
Hi,We have a pair of ASA 5508-X, configured to failover, providing VPN services.We have a number of site-to-site IPSEC VPNs terminating on the ASA, using a mixture of 800 series routers, and ISR4331's. Each VPN carries a number of subnetsThis all wor...
WE have been using AnyConnect for 3rd party access to our network for some time, using local auth on the ASA, and IP addressing coming from local pools, and split tunnel ACL to control access, so when 3rd party connect they get the drop down box to s...
