3 votes

Cisco ASA5505/6 - public key authentication does not work with OpenSSH client

The ASA5505/6 units I tested, versions 9.2(4) and 9.8(2), require "ssh-rsa" be among the available signature algorithms for public key exchange regardless of the SSH client software you use. ...
Frobozz's user avatar
  • 171
2 votes

Cisco ASA5505/6 - public key authentication does not work with OpenSSH client

Basically follow this guide and it should work. https://ip-life.net/cisco-asa-ssh-public-key-authentication/ Make sure your terminal client software is set to use SSH key as the primary/only method of ...
FrameHowitzer's user avatar
2 votes
Accepted

ansible addition operation of content from stdout of each hosts

You say you: have 5 hosts, e.g. firewalls: [hostA, hostB, hostC, hostD, hostE] have 5 separate files, e.g. shell> find . -name '*_file' ./hostA_file ./hostD_file ./hostB_file ./hostC_file ./...
Vladimir Botka's user avatar
2 votes
Accepted

ASA5555-X vlans through port channel not working

I got this to work. All I had to do was restart the ASA after which it got the ip from isp dhcp... Then I had to fix the port channel config on the untagged lan part after figuring out that I need to ...
The amateur programmer's user avatar
2 votes
Accepted

DH groups support for isakmp policy

You should pick the highest group number that both devices have in common. The strength of the key doesn't matter if both ends of the tunnel can't use it.
Ron Trunk's user avatar
  • 67.1k
1 vote

Unable to configure Site to Site VPN between Cisco Router & Cisco ASA and permit SSH

On the ASA you need to add configuration to implement NAT 'bypass' (really it is doing NAT but without changing the IP addresses) such as: nat (inside,any) source static LOCAL-NET LOCAL-NET ...
FrameHowitzer's user avatar
1 vote
Accepted

ASA 5555 loses internet connectivity every few days, problem resolves by re-enabling DHCP on wan interface

A dhcp client will start renewal after half the lease time has expired, and it will repeat renewal attempts at decreasing intervals. If renewal eventually fails (for whatever reason), the DHCP client ...
Marc 'netztier' Luethi's user avatar
1 vote

If asa Cli gets too long, it automatically gets omitted as "$". Is there no way to stop this?

I'm not sure how it will affect your log output, it probably depends on how you are collecting the logs but you can try the terminal width 0 command at various locations (config terminal or exec ...
FrameHowitzer's user avatar
1 vote
Accepted

ASA cannot get traffic to pass port forward

The problem was with the acl:s not being configured properly. Also the nat statement was really bloated. I got the following configuration to work with passing traffic through from two different ports ...
The amateur programmer's user avatar
1 vote

Testing for 10G throughput

I'm only achieving 1G due to port channel configurations. (since the throughput of a port channel is typically limited to the bandwidth of the individual links in the bundle.) The throughput for ...
Zac67's user avatar
  • 82.6k
1 vote

Changing Cisco Anyconnect client GUI Text and messages

Its working now. I have gone through below steps.  I have exported the AnyConnect template file from "Configuration>Remote Access VPN>Language Localization" Modified the file using ...
Rokaiya Siddika Orni's user avatar
1 vote

configure logging of access successful & failures locally on ASA

Cisco ASA can store logs locally but you will have much better results sending logs to an external syslog server. It can also use external authentication like radius or tacacs+ but it can store events ...
FrameHowitzer's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible