spissatus.com
Spissatus Blog: ISR G2 Evaluation Licensing
http://www.spissatus.com/2012/05/isr-g2-evaluation-licensing.html
Sunday, May 13, 2012. ISR G2 Evaluation Licensing. Recently I found myself with a client that was requesting me to configure a VPN, but they did not have the security license. The following command will allow you to envoke a 60 Day trial for whichever licenses you choose. You will need to agree to a EULA, and you will need to reboot. Furthermore, after 60 days is up the license will remain active. Should the router reboot, you'll revert to the original license level. Uck9 unified communications technology.
spissatus.com
Spissatus Blog: November 2011
http://www.spissatus.com/2011_11_01_archive.html
Wednesday, November 9, 2011. Decipger Crypto ISAKMP Debugs. Props to the guys at tunnelsup.com for this post. This is a very helpful article that give you some insight into. Debug cry isa 127. Thursday, November 3, 2011. SSL VPN on ASA 8.2. You should already have the AnyConnect software package located in flash. Note that the Split-Tunnel ACL is standard. The ASA only needs to tell the client which subnets to encrypt. A local user account is assumed. This is what authentication will default to. Group-po...
ccieghana.blogspot.com
CCIEINMAY2012: March 2012
http://ccieghana.blogspot.com/2012_03_01_archive.html
This blog's purpose is to help me collect my thoughts and streamline my strategy for my scheduled lab exams in May 2012. Saturday, March 31, 2012. RPF CHECKS AND STATIC MROUTES. By default, when you configure a static mroute, its admin distance is zero. For example, if you have a static default mroute. Ip mroute 0.0.0.0 0.0.0.0. Ip mroute 192.168.1.0 255.255.255.0 null 0 255 ip mroute 0.0.0.0 0.0.0.0 Tunnel 0. Preferred as compared to unicast table routes (but not ignored or black-holed! MBGP is only nee...
ccieghana.blogspot.com
CCIEINMAY2012: MPLS - Labs
http://ccieghana.blogspot.com/2013/12/mpls-labs.html
This blog's purpose is to help me collect my thoughts and streamline my strategy for my scheduled lab exams in May 2012. Saturday, December 21, 2013. Http:/ rizzitech.blogspot.com/search/label/MPLS%20VPN. Requires that loopbacks with /32 are used. Soo to prevent loops, provided:. Bgp bestpath cost-community ignore. Bestpath cost-community is on by default. If ignored, loops or suboptimal routing could occur. Route-map soowhat permit 10. Set extcommunity soo 1:1. Ip vrf sitemap soowhat. UPGRADE VSS - ISSU.
ccieghana.blogspot.com
CCIEINMAY2012: December 2013
http://ccieghana.blogspot.com/2013_12_01_archive.html
This blog's purpose is to help me collect my thoughts and streamline my strategy for my scheduled lab exams in May 2012. Saturday, December 21, 2013. Http:/ rizzitech.blogspot.com/search/label/MPLS%20VPN. Requires that loopbacks with /32 are used. Soo to prevent loops, provided:. Bgp bestpath cost-community ignore. Bestpath cost-community is on by default. If ignored, loops or suboptimal routing could occur. Route-map soowhat permit 10. Set extcommunity soo 1:1. Ip vrf sitemap soowhat. Cisco Doc CD Video.
spissatus.com
Spissatus Blog: The 2013 Post
http://www.spissatus.com/2013/12/the-2013-post.html
Tuesday, December 31, 2013. Yes, the 2013 post, as in singular. I managed to make it an entire year without making a single post. Given that there are three hours left in the year, now is as good a time as any to rectify that issue. It's certainly been a year. A lot happened and a lot didn't happen, pretty typical. I'll do my best to start to putting more content up. We'll see about that though. Subscribe to: Post Comments (Atom). Pittsburgh, Pa, United States. View my complete profile.
spissatus.com
Spissatus Blog: December 2013
http://www.spissatus.com/2013_12_01_archive.html
Tuesday, December 31, 2013. Yes, the 2013 post, as in singular. I managed to make it an entire year without making a single post. Given that there are three hours left in the year, now is as good a time as any to rectify that issue. It's certainly been a year. A lot happened and a lot didn't happen, pretty typical. I'll do my best to start to putting more content up. We'll see about that though. Subscribe to: Posts (Atom). Pittsburgh, Pa, United States. View my complete profile.
spissatus.com
Spissatus Blog: TFTP over VPN
http://www.spissatus.com/2012/01/tftp-over-vpn.html
Tuesday, January 24, 2012. So, while configuring the SSL VPN post, I thought it would be a good idea to move to a newer version of the AnyConnect client. I should say that I am fortunate enough to have an ASA at my home, and have a L2L VPN tunnel to the office. I was at the office when I downloaded the latest client, so I attempted to copy the file from my ASA at my house from my PC while I was in the office. ASA5505# copy tftp: flash:. Address or name of remote host []? WARNING: TFTP download incomplete!
spissatus.com
Spissatus Blog: Basic IPS Configuration
http://www.spissatus.com/2012/05/basic-ips-configuration.html
Sunday, May 13, 2012. This covers the configuration that is required on the ASA in order to get traffic to the sensor. The configuration of the IPS module is more more detailed, and will more than likely be covered in a future post. The first thing you will need to do is define what traffic you want to send to the sensor via an access-list. In this case, we're sending everything. ASA# sh run access-l IPS ACL. Access-list IPS ACL extended permit ip any any. Match access-list IPS ACL. ASA# sh run policy-map.
spissatus.com
Spissatus Blog: January 2012
http://www.spissatus.com/2012_01_01_archive.html
Tuesday, January 24, 2012. So, while configuring the SSL VPN post, I thought it would be a good idea to move to a newer version of the AnyConnect client. I should say that I am fortunate enough to have an ASA at my home, and have a L2L VPN tunnel to the office. I was at the office when I downloaded the latest client, so I attempted to copy the file from my ASA at my house from my PC while I was in the office. ASA5505# copy tftp: flash:. Address or name of remote host []? WARNING: TFTP download incomplete!