Hi All,
I have a case with self-signed certificate of ASA.
Based on tutorial in this forum, I applied this config :
1. Prepare your ASA:
hostname vpn
domain-name mydomain.com
2. Get to creating the certificate:
crypto key generate rsa label s...
Hi All,
I am wanting to setup the following environment:
1. User connects to ASA with Anyconnect
2. User enters Windows Domain username/password AND SecurID username/password
3. AnyConnect checks for the correct certificate (machine)
4. The ASA puts ...
Hello,is it possible to configure my ASA 5512 and AnyConnect Client to have a SSO with SBL, so i only have to login to the AnyConnect and Windows gets the credentials by AnyConnect?AnyConnect Version: 4.0.00061ASA Firmware: 9.4(1)
Dear all,
I've been struggling to understand some debug output from my ASA which has a VPN configured with a remote checkpoint.
In short; the problem is within the P1 & P2 rekey timers. I've defined both timers as 28800 (8 hours). We've matched up ...
I ignore if I am posting it at the correct place, so apologies in advance. The issue is, I had the old cisco vpn client working ok with an external vpn server. Before updating to windows 10 I have installed cisco anyconnect, configured accordingly an...
Hi,
I have the following setup. Cisco ASA 5520, Cisco ISE 1.2 and Active directory.
The goal here is to hand out the static IP address defined in dial-in tab in AD to users connecting via Cisco IPSec VPN client to ASA.
Cisco ISE is connected to ASA a...
I am working on transitioning from static IPSEC connections to GRE with IPSEC connections
we are also working to replace a 2821 router At our to be implemented DMVPN HUB site with an ASR1000 type router. The ASR does not support ted transform-set wh...
Hi,
I have some queries:
1. I wanna understand when Pre-shared key is really exchanged in IPsec phase-1? Please explain it in the Main Mode and Aggressive Mode messages flow, be specific to the messages while explaining.
2. Which particular paramete...
This is my conf. I can't surf on internet when i'm connected to vpn. Please help me, what's wrong?
uilding configuration...
Current configuration : 5154 bytes
!
! Last configuration change at 13:16:47 UTC Thu Dec 17 2015 by xxxx
version 15.3
no ser...
HI,
I configure the 10 Ipsec site to site tunnel's, when i configure the 11th tunnel phase 1 not establishing, I want debug the 11th isakmp packet, how debug the only for that particular tunnel isakmp packets
Hi,We're trying to establish vpn with azure's nvgre gateway but vpn is not established. Here is the log files any comments?Regards.Firewall# IKEv2-PROTO-1: (4):IKEv2-PROTO-1: Invalid responder's spiIKEv2-PROTO-1: (4): Detected an invalid value in the...
When user log into VPN, ASA is looking at CAC common Name instead of LDAP sAMAccountName for authentication. Causing errors within log in script. User cannot log into the VPN because of the issue. This is a two part problem; having a certificatio...
Hi,
I have few VPN's configured on my ASA and i want to edit one VPN crypto policy(encryption) can anyone tell me how can i can identify specific VPN among VPN's which i have.
