I've been trying to setup a VPN tunnel between a FTD and Azure, but I am having some issues where one BGP neighbor is stuck in Idle/Connecting.I don't have any access to the Azure side. That part of the configuration is done by my custumer. Here is t...
Hello, I have a strange issue with a new RA VPN setup on a FTD 1010 running version 7.7. When trying to connect, we dont get any response at all and the connection times out after a while. I set up a packet capture with trace on the outside interface...
Hi All,I am in the middle of setting up Secure Client VPN with our FTDs using Microsoft Azure SAML authentication. This is all working ok. I am now looking to configure our ACP to filter traffic based on RAVPN SAML user identity. I have set this up b...
In a policy-based IPsec redundant configuration, if Router 1 fails, an IPsec SA inconsistency occurs between Router 2 and the remote VPN device, preventing communication from resuming. Therefore, we have automated the execution of the clear command v...
For our IPsec connection, our site uses policy-based IPsec, while the remote site uses route-based IPsec.When I changed our site from policy-based to route-based, the router’s tunnel interface went up and the connection was encrypted, but the count o...
Trying to VPN for work. It was working fine before yesterday. Continue to get the following error message: AnyConnect Secure Mobility Client can't be installed on this disk. New version 3.1.07021 of the Cisco AnyConnect Secure Mobility Client is alre...
For an IPsec SA established via route-based IPsec, if traffic ceases on the standby router, does the SA get deleted when its lifetime (86,400 seconds) expires?Please let me know if there are any other conditions or timer values that trigger deletion....
Hi there, I use Cisco AnyConnect Secure Mobility Client V4.9.00086 on Windows 10. My Connection to the company vpn is somehow unstable and AnyConnect has to initiate a reconnect multiple times a day. Normally it is no problem to reconnect automatical...
I have configured RAVPN and I am trying to access the outside of the firewall to download the VPN client. I put in the url setup to access to outside interface of the firewall but can't get any reply. I am pretty sure I have everthing configured as r...
Good afternoon,We are experiencing massive and persistent anti-replay errors:%IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 11, src_addr 192.168.46.5, dest_addr 192.168.46.3, SPI 0x96ddd296 QFP:0.0 Thread:002 TS:000236450936231...
I had to rekey my SSL cert for Secure Client in FMC. I've had to update the SSL cert for Secure Client for years now but this time when I did it and tried to VPN on a iPhone, it doesnt recognize the CA certificate. It says its from an not trusted sou...
Hello all, I'm trying to set up my ISR4321 running IOS XE 17.03.05 as a FlexVPN-server for Remote Access (RA) with various clients (Windows 10, Apple's iOS, Android, no AnyConnect), based on ikev2, without using client-side certificates. My current p...
When establishing multiple VPN peers with a single router, is it okay to configure the IKEv2 and IPsec profiles together?Or is it better to configure them separately for each peer?The peer addresses are different, but the PSK is the same. crypto ikev...
We have configured route-based IPsec as follows.The tunnel address for the routers in the redundant configuration is set to the HSRP VIP on the LAN side.Under normal conditions, the tunnel interface between Router-1 and Router-3 is up, while the tunn...
Although the IPsec connection itself has been established using route-based IPsec, when I check `show crypto ipsec sa`, I see that only encrypted packets are being counted, as shown below, and the number of decrypted packets is 0. In contrast, the VP...
