Hello,We have a customer who wants to have 2 connection profiles. One is a full tunnel, where users authenticate via RADIUS. This is already in place and works fine. The next connection profile is for a select group of users in a specific LDAP AD Sec...
Forum Posts
GIVEN:LOCAL server subnet = 172.16.1.0/24LOCAL_ROUTER inside interface = 172.16.2.1/24LOCAL_ROUTER site-to-site tunnel outside interface = 1.1.1.1/30VENDOR_ROUTER site-to-site tunnel outside interface= 2.2.2.2/30VENDOR_ROUTER inside interface= 172...
How does a packet know the return route through a L2L VPN?Thank you.
Good day, Running FTD code 6.7.0.2-24 on two FTD 1120s in HA (active/standby). Potential design is to have a primary IPsec tunnel connect from the FTDs to multiple sites. The secondary link is there as a backup connection in the event of failure of...
I am trying to send the user group information to Cisco ASA from Okta. Verified through SAML tracer, attributes are being sent. However, I cannot see any info related to custom attributes using "debug webvpn saml 255"How to extract this info?
On ASA it was possible to do 'debug crypto isakmp sa 127' etc to see any problems with VPN tunnel. How is this done on a remote FTD managed by FMC.
Hello:I have a Cisco ASA 5525 (9.12) that has IPsec VPN tunnels to 2 other sites, Site-a and Site-b. VTI and BGP is used for the tunnel to Site-a, ACL policy based VPN is used for the other tunnel to Site-b. Site-a has subnet 10.10.0.0/16, Site-b has...
HiFor learning purposes I'm trying to establish a VPN connection from my remote PC to a C819 router. I'm using config from a popular cisco tutorial website. I've managed to establish a connection, but I can't ping any host in LAN or remote PC from th...
Hello,I noticed last week this IP Address attempting to VPN into our system. I noticed in our ISE LiveLogs this IP Address attempting to connect 100s of times a minute.In an attempt to stop this address from even attempting the VPN, I looked on our A...
We currently have a cisco anyconnect client for Windows 10(4.10.06079)uploaded on our headend. Can we also upload another anyconnect client that supports Windows 11 Arm64 system without having any issues? Can the headend device support 2 windows clie...
Ciao, with AnyConnect with ASA using SAML I usually configure: AuthC with SAMLAuthZ with ISE Because I want to be sure that the AuthZ process goes successfully in order to connect I use the command authorization-required: tunnel-group MFA general-att...
HI everyone,Hope you are all doing well! I would like to get your opinion and see if this is feasible.We are deploying laptops for mobile users. The laptops will be joined the domain and Cisco AnyConnect will be used to connect to the corp network. I...
Hello, I have an issue which I am nit sure how to best solve. We are moving some services from site A to site B. They need to remain in the same network in site B, meaning 10.20.1.x First, we thought we will just create a new network on site A, c...
Hello,For my customer, I am changing the authentication method for Cisco AnyConnect. This is a change of MFA method from a call to SMS, but whole authentication still works using RADIUS.I am not sure whether that requires update in the profiles that ...
Hi everyone,Pretty much what the title says.I wan to limit concurrent logins.Currently, one username can be used by many to login, but I dont want it that way. Is it possible to set that once the username is used and currently connected. It cannot be...
