Networking • Automation • Occasional Podcasting

Category: Cisco ASA

  • , , ,

    Secondary IP On Cisco ASA

    While decommissioning some old routers, I need to transfer an IP address to an ASA on a subnet. Unfortunately the ASA’s don’t allow you to do this. The standard “ip address X.X.X.X Y.Y.Y.Y secondary” doesn’t work. I did a quick google and this beautiful bastard had the solution, static ARP with proxy-arp. Figure out what…

  • , , ,

    Cisco ASA SSH, Don’t Forget To Generate A Key

    If you are just now enabling SSH and you get the following error message: SSH session from XXX.XXX.XXX.XXX on interface Outside for user "" disconnected by SSH server, reason "Internal error" (0x00) It looks like you need to generate an RSA key for SSH: crypto key generate rsa modulus 1024

  • ,

    Show ASA Config PreHash

    My boy Yeager posted this up ages ago. It basically allows you to show the running config and read the group-policy shared keys. I found with the newest versions you need to run the command like so: more system:running

  • Upgrade Your ASA To 8.3X – Memory Requirement
    ,

    Upgrade Your ASA To 8.3X – Memory Requirement

    It seems that as of version 8.3 of the ASA code, you have to have 2GB of RAM in your 5520 and 5540, a meager 1GB is necessary for your 5510. The funny thing is that prior to February, all of these devices shipped with only 512MB of memory…that’s a pretty significant jump, wouldn’t you…

  • , , , ,

    Cisco – VPN Issues From A 6509

    I’m doing IPSec tunnels from a 6509 at a remote facility to an ASA. The tunnel would establish, traffic would send from the 6500 to the remote client, the remote client would answer, but it would never go back through the 6500…strange. I noticed that the ASA said that the connection was using NAT traversal,…

  • Class Video – Mikrotik VPN
    , , , , , , ,

    Class Video – Mikrotik VPN

    This class covers: PPTP Client connections IPSec – Mikrotik to Mikrotik IPSec – Mikrotik to Mikrotik – Multiple Subnets IPSec – Mikrotik to Mikrotik – Private IP on WAN Interface IPSec – Mikrotik to Cisco Router IPSec – Mikrotik to Cisco ASA IPSec – Mikrotik to Cisco Router Multiple Subnets IPIP Tunnel w/IPSec – Mikrotik…

  • Cisco ASA IP SLA – Failover Routing
    , ,

    Cisco ASA IP SLA – Failover Routing

    It seems like everytime I want to do something funky with an ASA, Cisco says “ASAs are not routers, use them what they are designed for.” This really doesn’t help me…heh. ASAs can’t do PBR(Policy Based Routing – aka route maps)…which would have been useful more than a few times. Back on topic, failover routing.…