VPN

I am using ASA with firepower service (9.6 version), And I want to restrict users of particular LDAP group to login only to particular VPN group policy not to other policy. Right now I have configured tunnel-group with LDAP login , But contains all t...

Hello,   I am trying to figure out how to set up VPN tunnels with multiple customers who all use the same private IP range. I also have the added challenge of not being able to configure the tunnel on their end. Essentially, all the translation would...

Hi Everyone,   The show crypto session result shows Session Status : UP-NO-IKE  . However the VPN is up and operational and all the interesting traffic working fine . Earlier we were using physical interface as tunnel endpoint and it use to show UP-A...

Hi every Cisco experts;   I am facing a scenario need to find out the best practice to implement and doing the configuration on my ASA 51xx series firewall.  There are three interface on my ASA (Outside, DMZ, Inside). My ISP provide me a single publi...

I was told to open both ipsec phase 1 and phase 2 port, may I know the command to open the port? thanks

Hello everyone,   I have an urgent problem with a site-to-site VPN configuration. The channel is UP, phase 1 (IKEV1) and phase 2 (Ipsec) are OK, I can see the connection with Cisco ASDM in the Monitoring section but unfortunately, doing an IP packet ...

Hello everyone,   I have an urgent problem with a site-to-site VPN configuration. The channel is UP, phase 1 (IKEV1) and phase 2 (Ipsec) are OK, I can see the connection with Cisco ASDM in the Monitoring section but unfortunately, doing an IP packet ...

Hello,   I would like to know how can i clear the below SA:   ====================================== Interface: Tunnel1751Profile: SimulationSystems-106816-profile-AUptime: 19:08:04Session status: DOWN-NEGOTIATINGPeer: 52.x.x.x port 4500 fvrf: (none)...

Hello,   I have configured Cisco Catalyst 4500-X as a VSS. It is working fine. When i have connected this VSS to my switch in production via fiber cable, i am not able to ping each other. When i hit the command "Sh cdp neighbors", i can see the neigh...

How does Cisco implement IKEv2 nonce calculation (in 15.4)? RFC's and Cisco press book about IKEv2 state that the nonce lenght is output of PRF divided by 2. So prf-hmac-sha2-512 with 512 bit output should produce 32 byte (256 bit) nonce (plus 4 byte...

Hi All, just trying to find a way to fix this. my client seems to have some issues getting AC in parallel OVPN to work. AC meant for the internal users and OVPN for the contractors. however this doesn't seem to work. however this did work with Junipe...

Hello,I have an ASA 5520 with multiple site-to-site VPN's.  A remote customer has changed their Public IP address and now the VPN has gone down.  How can I easily change the peer IP of the remote site to the new one without have to put the pre-shared...

I have seen configuration examples for a single router VPN redundancy to a pair of routers, but what if you have a pair of routers at each end? I am hoping to achieve full VPN failover redundancy for any device failure. Is it as simple as adding the ...