I have many to one tunnel setup , where left side I have multple networks ( sources end points mostly cisco routers and strongswan virtual appliances) and on right side I have a single ASAv ( cisco asav running on AWS Ec2). Now what I am seeing is tu...
Forum Posts
Hi There, I am setting up scalable IPSec solution where customer would have cisco routers on left side and tunnel will established as follows .."customer Cisco router --> AWS NLB--> NAT ( ec2 instance) --> CIsco ASAv " . I am able to setup this flow ...
Hi Cisco Community Team,I need help configuring a Dynamic Virtual Tunnel Interface (DVTI) setup in a hub-and-spoke topology where:The Cisco Secure Firewall Threat Defense (FTD, managed by FMC) is the hub (with a static public IP).The Cisco IOS XE rou...
Hi Cisco Community,I wanted to start a discussion about a common issue many of us face: IPSec site-to-site VPNs flapping or dropping during WAN failover or ISP changes.In my experience, there are many factors that can cause the tunnel to go down, suc...
Hi Cisco Community,One common issue I’ve faced is IPSec tunnels dropping or flapping during WAN failover. Sometimes Dead Peer Detection (DPD) timers kick in too late, or NAT-T creates problems. My questions to the community are:What parameters (timer...
Hi Everyone,Recently while configuring a site-to-site VPN between a FortiGate firewall and a Cisco ASA, I faced an interesting issue: IPSec tunnel Phase 1 was up, but Phase 2 wouldn’t establish. The root cause: mismatched encryption/authentication al...
Hi Community,I wanted to ask about common troubleshooting approaches for IPSec VPN tunnels when they fail or start flapping during WAN link failover.What are the first things you usually check (crypto, DPD timers, NAT-T, routing)?Any interesting case...
Running MacOS Sequoia and Cisco Secure Client v5.1.11.388One of our users reports on Chrome that the 9 square/Google Apps icon does not load when the VPN is connected. However, when the VPN is disconnected it loads just fine. One other user has had t...
Resolved! FPR-1010 running ASA password recovery.
How do you do password recovery on an FPR-1010 running ASA code?
Hi, after installing Any Connect (anyconnect-macos-4.9.00086-predeploy-k9.dmg) on Mac M1 / Ventura I got repeating alert windows - The VPN client agent was unable to create the client DNS plugin manager. I've installed only VPN in the wizard.I have ...
Resolved! Secure Client AnyConnect
Hi,I am trying to upload AnyConnect version 5.1.11.388 into Tanium for easy deployment and i do not see the xml files in the zip files. Are they supposed to be downloaded separately? In the zip files, there are Profiles and Setup folders that re empt...
Resolved! Cisco 3D Interactive catalog
Hi Team, Could someone please share the link to download and install the Cisco 3D interactive catalog.
Hi Team,I configured an IPSec site-to-site VPN on Meraki MX with a Fortinet firewall. The tunnel shows “green” on both sides, but no traffic is passing.Checked so far:Phase 1 and Phase 2 proposals matchVPN is “UP” on dashboardRoutes added on both sid...
Hello. I am using ASA 9.20(3.16) and ASDM 7.20(2) as FPR-3110. Site to Site vpn is in use of a total of five tunnels, and both phase 1 and phase 2 are composed of aes-256 and sha-256 . However, one tunnel looks like phase 2 hashing value sha-1 from a...
Remote radiologists experience intermittent slowness, as slow as 5% of purchased bandwidth. Using Global protect VPN and have also tried a PA440 for S2S VPN at the users house, and wired OEAP. I’m almost certain it is the throttling by the ISP, but I...
