Hi All,A novice when it comes to split tunneling, so I believe this may be a pretty basic question but can't find any info online to validate my thought process.It's quite a complex solution... but basically after a new computer device is provisioned...
Issue- Cannot click inside the AnyConnect drop down box and type in a VPN addressI have found a discussion topic with this issue and saw that it was recommending that you need to check your PC profiles. The recommended location/syntax for the profil...
Hello.TASK: implement technology so that when l2l VPN to vendor fails, EIGRP routing will redirect traffic to distant backup VPN.Options: BGP config, SLA config, DPD config, (other)Which option would you implement & why?Thank you.
Hi CSC,When configuring Certificate Matching attributes within a client profile is there a way to prefer certain criteria over another to make the choice of certificate deterministic in the event of there being multiple certs?Currently I have the fol...
Am currently trying to test two ASA with route base vpn but am getting these errors. would anyone know what is my issue here?
Dear team,I hope you are all doing fine. I am really hoping on your experience and maybe the chance that somebody has faced a similar case.We have an infrastructure with dmvpn implemented, practically one hub and some spokes. The configuration is pre...
Local ASA lan = 192.168.7.XAnyconnect IP-Pool = 192.168.8.100 - 192.168.8.110/255.255.255.0Exempt VPN traffic selected. select inside interface and local network any4This processes fine, creates all the settings, but when the anyconnect client conn...
Dears sir kindly ,we have issue strange in dmvpn with ISR4321/K9 describes as below software version spoke (ISR4321/K9)-----------------------Cisco IOS XE Software, Version 16.09.02Cisco IOS Software [Fuji], ISR Software (X86_64_LINUX_IOSD-UNIVERSAL...
I have over 130 devices where Anyconnect is permitting any domain user to login. We have an ldap string configured but logins aren't being restricted to the AD security group in the ldap string. My devices include FP2110 (ASA not FTD), ASA 5508 and 5...
Hello ASA Gurus, Running into a crazy issue here, we have a VPN concentrator (ASA5516), used a concentrator for more than 100 remote sites (3rf party companies that want access to a specific app) recently we noticed an issue, to explain correctly bel...
I'm tasked with upgrading an ASA-5525 L2L VPN from IKEv1 to IKEv2.Book "Cisco ASA, 3rd edition" states on page 806 simply to use this command "#migrate l2l", and that's it.1. is that all that is needed for this task?2. Does the other tunnel endpoint...
Hello there,I am seeing odd behavior in the dmvpn tunnels. I have a HUB and Spoke topology running EIGRP protocol. The network was stable for a long time but recently I started seeing that spoke side tunnels go down on their own and to bring it up,...
Hello.I am tasked with rebuilding a L2L VPN with better security. My boss suggested, for assurance reasons, I first erect a new VPN, test its success, then delete old VPN. QUESTION: Can I do this-- achieve both tunnels up and active, using all same I...
HiI set up this account specifically to ask this question, so apologies if it's in the wrong board. For some reason my laptop has added my Office 365 account to the list when it asks me to log in. I use CiscoAnyconnect through my university to use th...
I have a router using 15.1(4)M12a, currenrtly using VTI with a pre-shared key peer address of 0.0.0.0I want to add a remote access IPSec VPN connection to this, with a different pre-shared key but again with 0.0.0.0 as peer address.I found this post,...
