VPN

Hi I have a question about the logic an ASA takes regarding default routes, and tunnled default routes. But first some background information.There is an ASA terminating site to site VPN's. The remote sites have various addresses in the 10.0.0.0/8 sp...

Hi All;We are planning to configure hierarchical CAs, one root, two subordinate CAs for our DMVPN deployment.However i have concerns about the redundancy of CAs.I wonder which CA does my routers prefer when i configure two trustpoints. Do they select...

I have a site to site IPSec tunnel setup and operational but periodically the remote site goes down, because of a somewhat reliable internet connection. The only way to get the tunnel to re-establish is to go to the remote site and simply issue a pin...

I have SSL VPN setup to use Local Authentication as well as RADIUS and when I get to the SSL VPN Login page, login fails at local authentication.  I assumed that with both Local Auth and RADIUS in the AnyConnect connection profiles that if local auth...

Hi folks,I have an issue where I have a DMVPN set up with EIGRP. I have a secondary tunnel configured with one of the spokes in the primary tunnel is the hub of the secondary tunnel. Here are the configurations I have:Router AROUTER_A#sh run int t0Bu...

I have setup a ASA and everything but ipsec seems to be working. I was able to use the clientless ssl but I need ipsec working. I'm at a loss. here are logs thanks for any help. config is a little sloppy and i will be cleaning it up but would like to...

I have an ASA running 8.2.x code with AnyConnect 2.4.x.I have both Radius and LDAP (AD) AAA available.If a user connects from a company owned laptop, I want to push down AnyConnect client ProfileA (with scripts to map drives etc...) and network ACL's...

In new features listed in ASA release 8.4.2 at http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html,I see "Split Tunnel DNS policy for AnyConnect" which might be of interest to us.  In the description field , it says " It ins...

hello guys , i have started managing a asa 5510 firewall which is already having 10 ipsec tunnels , the problem i am facing is they are configured as "ipsec vpn map" i have attached sample config . , i am finding it difficult to understand the parame...

Hi Experts,We have a ASA 5505 in our enviroment. We already configures two site 2 site VPN to our branch offices. Now we are planning to configure remote access VPN. So what should be consider when configuring the remote access VPN in ASA which alrea...

I've setup a site to site vpn on an ASA 5510 using ASDM (as I have many times before) and the tunnel appears to be up but I am not able to pass traffic.  When I run the packet tracer from my inside network to the remote destination network, it shows ...