3
votes
Cisco ASA5505/6 - public key authentication does not work with OpenSSH client
The ASA5505/6 units I tested, versions 9.2(4) and 9.8(2), require "ssh-rsa" be among the available signature algorithms for public key exchange regardless of the SSH client software you use.
...
- 171
2
votes
Cisco ASA5505/6 - public key authentication does not work with OpenSSH client
Basically follow this guide and it should work.
https://ip-life.net/cisco-asa-ssh-public-key-authentication/
Make sure your terminal client software is set to use SSH key as the primary/only method of ...
- 2,050
2
votes
Accepted
ansible addition operation of content from stdout of each hosts
You say you:
have 5 hosts, e.g.
firewalls: [hostA, hostB, hostC, hostD, hostE]
have 5 separate files, e.g.
shell> find . -name '*_file'
./hostA_file
./hostD_file
./hostB_file
./hostC_file
./...
- 136
2
votes
Accepted
ASA5555-X vlans through port channel not working
I got this to work. All I had to do was restart the ASA after which it got the ip from isp dhcp... Then I had to fix the port channel config on the untagged lan part after figuring out that I need to ...
2
votes
Accepted
DH groups support for isakmp policy
You should pick the highest group number that both devices have in common. The strength of the key doesn't matter if both ends of the tunnel can't use it.
- 67.1k
1
vote
Unable to configure Site to Site VPN between Cisco Router & Cisco ASA and permit SSH
On the ASA you need to add configuration to implement NAT 'bypass' (really it is doing NAT but without changing the IP addresses) such as:
nat (inside,any) source static LOCAL-NET LOCAL-NET ...
- 2,050
1
vote
Accepted
ASA 5555 loses internet connectivity every few days, problem resolves by re-enabling DHCP on wan interface
A dhcp client will start renewal after half the lease time has expired, and it will repeat renewal attempts at decreasing intervals. If renewal eventually fails (for whatever reason), the DHCP client ...
- 8,826
1
vote
If asa Cli gets too long, it automatically gets omitted as "$". Is there no way to stop this?
I'm not sure how it will affect your log output, it probably depends on how you are collecting the logs but you can try the terminal width 0 command at various locations (config terminal or exec ...
- 2,050
1
vote
Accepted
ASA cannot get traffic to pass port forward
The problem was with the acl:s not being configured properly. Also the nat statement was really bloated. I got the following configuration to work with passing traffic through from two different ports ...
1
vote
Testing for 10G throughput
I'm only achieving 1G due to port channel configurations. (since the throughput of a port channel is typically limited to the bandwidth of the individual links in the bundle.)
The throughput for ...
- 82.6k
1
vote
Changing Cisco Anyconnect client GUI Text and messages
Its working now. I have gone through below steps.
I have exported the AnyConnect template file from "Configuration>Remote Access VPN>Language Localization"
Modified the file using ...
1
vote
configure logging of access successful & failures locally on ASA
Cisco ASA can store logs locally but you will have much better results sending logs to an external syslog server.
It can also use external authentication like radius or tacacs+ but it can store events ...
- 2,050
Only top scored, non community-wiki answers of a minimum length are eligible