About Aref Alsouqi

Aref Alsouqi · 10-06-2026

Actually thinking about it more, that command won't apply here because the DHCP traffic won't be sent to the subnet broadcast address. You might have an ACL on the router interface that is blocking that traffic or you might be missing the IP helper o...

Aref Alsouqi · 10-06-2026

I think the command that you would need to look at on the router interface would be "no ip directed-broadcast" which denies the broadcast traffic on the receving interface. This has nothting to do with the ACL in itself. https://www.cisco.com/c/en/us...

Aref Alsouqi · 10-05-2026

Thanks for sharing and glad to hear it's now working as expected.

Aref Alsouqi · 10-05-2026

You can still the same public IP assigned to the FTD outside interface, you'll have to create a NAT rule to pass the management traffic from the outside interface on port 8305/tcp to the dedicated management interface.

Aref Alsouqi · 09-30-2026

If you can't do users certificate authentication alongside machine certificate right away and you really have no option other than using MSCHAPv2 then I think you just need to start talking to the business about moving away from the legacy authentica...

Member Since	‎09-22-2012 04:40 AM
Date Last Visited	‎10-05-2026 01:16 AM
Posts	2,683
Total Helpful Votes Received	1853

User Statistics

User Activity

Re: Inbound ACL Difference: Router vs Switch

Re: Inbound ACL Difference: Router vs Switch

Re: FMC Deployment Failed: "Failed to create snapshot: n.a."

Re: Data interface for manager access with Cisco FTDs in HA

Re: ISE - EAP-FAST certificate for machine and MSCHAP for user authent