Having existing B2B VPN tunnels that use a specific range for NAT'ing private IPs. Have run out of IPs in that subnet so requested an additional subnet from the ISP. Here's the conundrum - using both subnets in a tunnel does not work. Either subne...
Forum Posts
Hello, I'm looking for a way to have Anyconnect (NAM) detects classical hotspot captive portals from a corporate endpoint that has Proxy settings pushed by GPO. So basically users go remote, and sometimes they are located in airports or in hotels, wh...
We're doing a site to site vpn. The tunnel has worked before but after some maintenance on the ASA_Receiving location(no config changes to asa made, this asa is directly attached to the internet) the tunnel won't come back up. The devices can ping ea...
Hi,what is the difference between these to commands lines: crypto ikev2 limit max-in-negotiation-sa 6 outgoing crypto ikev2 limit max-in-negotiation-sa 6 Thank you!
Hi,After I config below settings, seems the tunnel no data between two devices. Can anyone help to check the problem?Cisco:crypto isakmp policy 10encr aesauthentication pre-sharegroup 14lifetime 28800crypto isakmp key foritgate address 111.111.111.11...
Hello Team ,we have a IPSEC tunnel created over Internet connection.Internet connection flapped from 10 mins and after that IPSEC tunnels took around 3 hours to be stable.Port Down logs : bsr02-e-irq-r-dvs-01#show log | i GigabitEthernet0/1/0Apr 15 0...
Hello.I'm upgrading an L2L tunnel from IKEv2 to IKEv2. I am unsure of how to adjust the crypto map.QUESTION: Out of the numbered options below, may you please select the correct config? If not found, may you please write the correct config?Thank you....
Hi everyone,Wondering if the following is enough to accomplish the following. TRAFFIC from Site 2 will travel over the S2S VPN Tunnel to Site 1 to get Internet access BUT instead of doing hairpinning, I want that traffic to traverse the FW (packet in...
Hi everyone. I'm trying to setup a VPN L2L using IKEv2. The tunnel is not up and I'm receiving this logs: Sep 30 2019 16:02:11: %ASA-5-752003: Tunnel Manager dispatching a KEY_ACQUIRE message to IKEv2. Map Tag = VPN. Map Sequence Number = 11.Sep 30 2...
Hello, I have a customer that need to replace their obsolete Microsoft Direct Access RAVPN and are looking for a solution that is transparent for the users and also as secure as possible. They have the following requirements for the new RAVPN solutio...
Hello, Is there any way to do a Windows registry check before AnyConnect SBL? I know ISE posture can do this, but I think the user are required to log in before the posture agent will work, so I dont think it will work with SBL. Thanks /Chess
Hello Design Gurus, Looking for guidance here, I have the below-simplified architecture, I want remote devices behind the ASA5508 to be part of HQ network, is there a way extend L2 from HQ to branch ? I know you will tell be do GRE over IPSEC, but so...
Hello Folks, running into a crazy situation, I've got an ASA behind modem w/ IPSEC config done (UDP4500 + 500 forwarded and CLI of nat-translated in ASA executed) the other peer a have a meraki concetrator facing internet directly, i've got phase 1 u...
Hello.Despite the L2L tunnel remote vendor stating that his side is not blocking anything, I am unable to telnet from an ASA adjacent device (I cannot telnet from an ASA), to tunnelled server endpoint 153.0.0.1:1234 .---I created the below ACL entry ...
This is the NetworkLinksys E2500 ---> Cisco ASA 5505 ---> ServerI beleive I need to forward some ports to the asa to use the IPsec VPN I just setup. I had the SSL VPN working but only needed to forward 443 for that....I assume that IPsec tunnel is a ...
