I'd like to better understand the Cisco VPN configuration and troubleshooting issues as needed. Are there any books anyone could recommend that will help me 1.) understand how VPN works, such as the different phases, etc, 2.) what to look for in trou...
Forum Posts
Resolved! Ping df size 1400-failed
Hi,I tried to ping with mtu size 1400 via VPN tunnel but failed.Kim#ping 192.168.2.1 df size 1400Sending 5, 1400-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:Packet sent with the DF bit setM.M.MSuccess rate is 0 percent (0/5)May I know why is...
Hello community, I have a case where I have to configure 3 Site-to-Site VPNs between HQ FTD (managed by FMC) and Branch FTD (managed by FDM). But, the case is that in the HQ FTD I only have 1 public ip address, and a router before the HQ FTD which ha...
I've been testing IKEv2 on a Cisco C891F router in an attempt to replace a L2TP/IPSec remote access VPN service with an IKEv2 service using the Native VPN client in Windows 10. Currently the L2TP/IPSec service works perfectly and Windows 10 clients u...
Hello, I have a whole bunch of tunnels configured via ASA5510. I can see all the active tunnels/count of active tunnels using: show vpn-sessiondb summary.My question is.. how do I find out if any of the tunnels are still being used or when they were ...
I am using AnyConnect 4.6.01103 on Windows for the first time, but I receive that message, so I am unable to connect to the VPN. What should I do to fix it? Thanks
I have Windows 10 21H1 with an Intel AX200 WiFi adapter, and also AnyConnect version 4.9.06037 I noticed WiFi is very slow, download is about 26 Mbps and upload 48 Mbps. It should be several hundreds. My phone on the same network gets 435/95 (the int...
We currently have a PKI based IPSec Remote Access VPN running on an ASA. We need to switch the entire Trust Chain. During the migration window, we need to be able to support AnyConnect VPNs with either Trust Chains. I don't have a lab to test.My curr...
Hello, I need to use external windows DHCP server for address assignement for AnyConnect clients I found several guides how to make configuration. For instance : https://www.petenetlive.com/KB/Article/0001050https://integratingit.wordpress.com/2022/0...
Good Morning,Equipment: Firepower FTD1120 - V. 7.2.0-82I have a local network in 192.168.1.0/24 and a site-to-site between a network 10.100.29.0/24 and 10.100.30.0/24.I set up an Anyconnect VPN with a split tunneling of the network 192.168.1.0/24 so ...
Hi,for a while now the Anyconnect client on my MacBook pro refuses to run, I first noticed this issue when I upgraded to OSx Monterey. I have uninstalled and reinstalled it several times but this hasn't helped. I have attached a DART file. Any ass...
Resolved! DMVPN tunnel stuck at NHRP state
HI Experts and friends, We use DMVPN and Eigrp as routing protocols to Connect between sites. I am facing a peculiar issue. The dmvpn Hub router shows tunnel up for the spoke IP router but the spoke router is stuck in the NHRP state. Hub: WAN-RT-01#...
Given: An ASA5525 HA pair hosts an Anyconnect VPN. Anyconnect join time is normally two seconds.A failover event occurs unrelated to Anyconnect or its ports. All users maintain connectivity, but now freshly joining users join time is approximately on...
Hi Guys, I have been having some issues with site to site VPN .. Ok my topology goes like this Topology I have ospf running both internal Lan and point 2 point routers which has site 2 site VPN connect established successfully now for fail ov...
Hi. ASA 5525 Anyconnect user login period is now about 1 minute. Usually it takes a couple seconds.Last night a new device was installed that connects to the ASA5525 on one end, and a vendor tunnel on the other end. I cannot log into the new device.M...
