About johnlloyd_13

johnlloyd_13 · 10-04-2024

hi,i'm running IPSec VPN betwen HQ and a branch.i need to add the BGP HA graceful restart in the branch dual internet edge router.there's an iBGP between the branch's dual internet edge router and fortigate HA FW (which runs IPSec).my question, is it...

johnlloyd_13 · 10-01-2024

hi,i'm looking for an IOS upgrade for a 2900 ISR G2 to support TLS 1.2 ciphers.the last IOS release was 15.7.3M8.can someone advise if 15.7.3M8 would support TLS 1.2?the current HTTP cipher are the weak 3DES, DES and RC4.2900#show ip http server allH...

johnlloyd_13 · 09-30-2024

hi,i'll be applying storm control in one of our facility switch fabric.is it a good idea or "best practice" to apply storm control in the core switch port-channel (po101) interface facing the ASA FW which is also using port-channel interface (po1)? r...

johnlloyd_13 · 09-25-2024

hi,just confirming if the ASA5555-X PSU is hot swappable?i don't see it indicates OIR/hot swap in cisco doc/linkhttps://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5500xguide/5500xhw/asa_overview.html#198262.If you are replacing a power...

johnlloyd_13 · 08-23-2024

hi,i got a cisco NCS540 and would need to import/export or do a "route leaking" between two VRFs.this is the config in an IOS-XE router:ip vrf SDWAN rd 65000:210 route-target export 65000:210 route-target import 65000:210 route-target import 65000:20...

johnlloyd_13 · 12-12-2024

hi,yes, you can setup this on the terminal emulator program, i.e. secure crt.refer to the link below:https://wannabelab.blogspot.com/2021/02/ctrbreak-in-hp-laptop-and-securecrt.html

johnlloyd_13 · 12-12-2024

hi,can you use/install other app, i.e. securecrt (paid) or teraterm (free)?are you using a native rj45 to usb console? or using serial console with USB adapter?can you also use another console cable?

johnlloyd_13 · 10-11-2024

hi,in addition from other comments, you'll need to decide what OS to run.do you keep the ASA OS or go for FTD?a hardware refresh is also a good opportunity to do a config cleanup/standardize.

johnlloyd_13 · 10-07-2024

hi,are you doing SSH from a jump server? the ASA SSH key exchange protocol (DH) might've changed during upgradeverify in the ASA with a 'show run ssh' and configure a 'weak' DH group as an interim. refer to helpful link below.you should upgrade your ...

johnlloyd_13 · 10-07-2024

hi,there's no point giving me cisco ASA link if i'm not using it.

Member Since	‎12-02-2007 03:31 AM
Date Last Visited	‎12-19-2024 06:05 PM
Posts	3,771
Total Helpful Votes Received	1502

User Statistics

User Activity

Enable BGP HA Graceful Restart

Cisco 2900 IOS with Stronger Cipher Suite

Apply Storm Control Core Switch to ASA Firewall

Cisco ASA5555-X PSU Hot Swap

Cisco NCS VRF Route Leaking

Re: Is there a way to send a software break signal to Cisco switches?

Re: Cant connect using console port to ASA 5525

Re: Replacing - Cisco 5525-x to FPR 1120 - NGFW

Re: Could not ssh to ASA after upgrading OS from 9.14.3.18 to version

Re: Enable BGP HA Graceful Restart