Hello everybody, we have the task to change all VPN L2L tunnels on our Firepower 2130running ASA (185.247.62.19 running image 9.14(3)18. There are hundrets of VPN L2L tunnels running on this firewall and usuallythis change is running well. But at thi...
Forum Posts
%DMVPN-3-DMVPN_NHRP_ERROR: Tunnel0: NHRP Encap Error for Resolution Request , Reason: protocol generic error (7)I had pre-allocated tunnel ip's to remote spokes , some of them were implemented and put into production. Some of them got the config...
It's been a long time. It's just not done. Does anyone know?
Hi, I'm Ivan, I have an issue with VPN Remote Access Split Tunnel + DUO + ISE Posture.My issue is in the posture. The result in the any connect says: Policy Server no detected ISE: PSN1/PSN2Posture Profile Configuration: Call Home - PSN1/PSN2 Discove...
Hi all,I have a question regarding NHRP state on a DMVPN spoke router:Interface: Tunnel1, IPv4 NHRP Details Type:Spoke, NHRP Peers:10, # Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb----- --------------- --------------- ----- -------- ----...
Hi Currently have a 1941 setup as a gateway device with a number of s2s VPN and with VPN client configured Is it possible to have this configured as anyconnect instead?I am having trouble finding if possible and if so how to get it done correctly Any...
I have a simple network of a few Cisco routers. Once in a while I'm seeing a "%CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi" error, even though my VPN connection works well. What can cause these messages?
Can anyone direct me to the details about how to limit the certificates that show up when using AnyConnect VPN client to start a connection? I have about 4 certificates that pop up each time, 3 of which are system certs for things like InTune or O36...
Hello.My vendor complains that, because he doesnt send traffic before the (24 hour) tunnel timeout expires, the tunnel keeps closing, and when his software tries to then send a query over the tunnel, it fails.Security dictates that we cannot keep the...
I have a home router that is incapable of running a VPN so I've been experimenting with different software solutions to get around this for my home network. Basically, I want to utilize this router for transport, but have another router (virtual) con...
dears,we have 125 sites with dmvpn. and now we need just to turn off one of tunnel from hub side. is it possible ?hub - isr 4431
Since upgrading from 4.10.02086 to 4.10.07062 our users are experiencing AnyConnect not showing the WiFi Adapters
Hello, Am stuck with a problem with Cisco Any-connect. My organisation has a domain (for example, domain.com) and the local NIC is configured with the DNS Server IP to resolve host-names. Without connecting Cisco Any-Connect the resolution on LAN h...
Hardware: HP EliteBook 840 G6 (works) and EliteBook 840 G8 (doesn't work) OS: Windows 10 22H2ASA: ASA 5505 9.2(4) 33 as well as 2130 Firepower with ASA 9.18.3VPN: SSL VPN (not IPSec) with split tunneling for Azure, but still happens with tunneling a...
Community, Has anyone been able to successfully get syslog messages from an FTD device for successful or failed authentication attempts via SSH? I have my FTD appliances (FirePOWER 2130 and FTD Cisco ISA 3000s) sending logs to a remote syslog server....
