Skip to main content
Share Your Experience: Take the 2024 Developer Survey
3 votes
Accepted

Does Cisco ASA support encrypted logging

This YouTube tutorial by October Leaf describes how to secure syslog traffic using certificates between a Cisco asa and syslog server. Link: https://www.youtube.com/watch?v=8QTg8kslk20&t=1216s ...
user3223819's user avatar
2 votes
Accepted

ASA5555-X vlans through port channel not working

I got this to work. All I had to do was restart the ASA after which it got the ip from isp dhcp... Then I had to fix the port channel config on the untagged lan part after figuring out that I need to ...
The amateur programmer's user avatar
2 votes

Cisco ASA L2TP/IPsec split-tunnel not working for public Internet

Perhaps the client does not properly support split tunnel by default? You should start by checking the routes on the client after the VPN is connected to determine whether it was given a route ...
FrameHowitzer's user avatar
2 votes
Accepted

DH groups support for isakmp policy

You should pick the highest group number that both devices have in common. The strength of the key doesn't matter if both ends of the tunnel can't use it.
Ron Trunk's user avatar
  • 67.7k
1 vote

ASA - Redundancy ISP in Multiple contexts

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/ha-contexts.html Just don't use multiple context mode. The limitations are too great unless all you ...
FrameHowitzer's user avatar
1 vote

arp permit-nonconnected Not Working

pinging from 192.168.0.1 to 10.0.0.1 does not work. Why? RouterA has no route for 10.0.0.1. It can only drop the packet. There is no apparent problem with ARP. RouterA requires a route for 10.0.0.0/...
Zac67's user avatar
  • 84.9k
1 vote

Unable to configure Site to Site VPN between Cisco Router & Cisco ASA and permit SSH

On the ASA you need to add configuration to implement NAT 'bypass' (really it is doing NAT but without changing the IP addresses) such as: nat (inside,any) source static LOCAL-NET LOCAL-NET ...
FrameHowitzer's user avatar
1 vote
Accepted

ASA 5555 loses internet connectivity every few days, problem resolves by re-enabling DHCP on wan interface

A dhcp client will start renewal after half the lease time has expired, and it will repeat renewal attempts at decreasing intervals. If renewal eventually fails (for whatever reason), the DHCP client ...
Marc 'netztier' Luethi's user avatar
1 vote
Accepted

ASA cannot get traffic to pass port forward

The problem was with the acl:s not being configured properly. Also the nat statement was really bloated. I got the following configuration to work with passing traffic through from two different ports ...
The amateur programmer's user avatar
1 vote

Testing for 10G throughput

I'm only achieving 1G due to port channel configurations. (since the throughput of a port channel is typically limited to the bandwidth of the individual links in the bundle.) The throughput for ...
Zac67's user avatar
  • 84.9k
1 vote

Changing Cisco Anyconnect client GUI Text and messages

Its working now. I have gone through below steps.  I have exported the AnyConnect template file from "Configuration>Remote Access VPN>Language Localization" Modified the file using ...
Rokaiya Siddika Orni's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible