Cisco Firewall :: 5510 / How To Activate Smartnet
May 2, 2011We just bought smartnet for our cisco 5510. How should i activate this support and get the benefits.
View 2 RepliesWe just bought smartnet for our cisco 5510. How should i activate this support and get the benefits.
View 2 RepliesI am trying to find the part number for the Cisco SMARTnet Maintenance 8x5xNBD for the Cisco ASA5510-SEC-BUN-K9. I browse cisco website, tried dynamic config tool, forums etc but no luck.
1: How to know the part number for it.
2: Which tool can be used to find smartnet or other Maintenance details/partnumbers
3: Is there any specific tool other then Dynamic Config to generate BOM.
I have an ASA 5505 with status light solid amber color. It is under SmartNet.I'd like to know Cisco will replaced this device with new ASA5505 or upgrade one?
View 2 Replies View RelatedI got a problem with a cisco asa 5580 like two days ago and the device stop working (there was a mainteinance window and after that the device didn't work). Now we receive the RMA and we are trying to configure the failover so the new device get the configuration form the one that is working.
But this is the message that I gettin:
Failover message decryption failure. Please make sure both units have the same failover shared key and crypto license or system is not out of memory
We already changed the shared key and crypto license but the failover is still down, what are the features that the cisco need to activate to enable the failover?
i have a pix 525 running 8.0(4) and asdm 6.1(5)i have two ethernet interfaces, and two gb ethernet interfaces
i connected both gb ethernet interfaces to a switchport, configured as trunkcan't seem to activate subinterfaces on the gb interface on the pix 525.
I'm trying to activate the DMZ interface on a restricted license ASA 5505 but I get an error when I try to ADD the interface. The message says "With the current license device will only supports 2 fully functional interfaces. Third interface can be added,but the traffic from this interface to another interface need to be blocked. Please make appropriate selection in advanced tab." I gather that I have to define the limitation myself? The problem is that I can't access the advanced tab because of the error. Can I do something via CLI to get through? I'm using ASA 8.2 and ASDM 6.2.
View 4 Replies View RelatedI have an ASR1001 installed and I want to implement the firewall feature set.The current license level is IPbase and I have the firewall feature installed. The firewall feature shows acive, Not in use. I have tried to activate it without success. My question is: do I need to get a license for advipservices or adventerprise to activate the firewall feature set?
View 5 Replies View RelatedWe purchased an ASA 5505 (ASA5505-BUN-K9) and more recently purchased the license to upgrade it from 10 to 50 users (L-ASA5505-10-50). I would like to provide remote access to users via AnyConnect - specifically, AnyConnnect on Windows plus the iPhone/iPad and Android versions. My understanding is that I should purchase the Anyconnect Essentials (L-ASA-AC-E-5505) and Anyconnect Mobile (L-ASA-AC-M-5505) licenses. Is this correct? If I do this, how many simultaneous remote access VPN connections (via Anyconnect clients) will the ASA then support?
Further, we did not initially purchase Smartnet with this device, but I would like to do so to gain access to software updates. Is there a site or document where I can locate the SKU #'s for Smartnet contracts that would be appropriate with our device?
The output of "show version" is below:
Cisco Adaptive Security Appliance Software Version 8.3(1)
Device Manager Version 6.3(1)
Compiled on Thu 04-Mar-10 16:56 by builders
System image file is "disk0:/asa831-k8.bin"
Config file at boot was "startup-config"
[code]....
I have bought 2 new ASA5505 with SmartNet contract. I already have my 2 SmarNet contract number. Now I want to add these 2 contracts to my TAC account, so I can have support for my 2 new products. My TAC account already have 1 SmartNet contract for another device I have.What is the procedure to add my SmartNet contract to my account?
View 2 Replies View Relatedcan't find SmartNet coverage for AP2602I
View 3 Replies View RelatedI have some problem with the ASA 5510 ver 7.0(6). My manager wants to keep this as backup. tried lots of things but still users not able to access internet nor can i ping anywhere.For example when i ping 4.2.2.2 i dont get any reply.The runing config is below for ur ref :
HQ-ASA-01# show running-config
: Saved
:
[Code]......
I need to create a firewalled segment that not only separates hosts from general population, but also from each other. The solitary confinement of firewalled segments.I know that I could create a bunch of sub-interfaces, one for each host or group that needs to be isolated, but I'd really rather not have to do that if possible. 1) It could become a management nightmare between ACLs and sub-interfaces and 2) it's a waste of IP addresses.s there any way that I can create a bunch of separate VLANs behind the firewall and have them all terminate at the firewall, using a single firewall IP address for the gateway?
VLAN 1 - hosts 1.1.1.5 and 1.1.1.6VLAN 2 - hosts 1.1.1.7
Firewall DMZ Interface - 1.1.1.1VLAN 3 - hosts 1.1.1.8 and 1.1.1.9
This way, the hosts are isolated and can't talk to each other unless they're on the same VLAN.I'm working with an ASA 5510 running 8.2.4(4).
I have a ASA 5510 firewall with CSC module and Security Plus license for CSC module.Will you tell me how to configure my firewall to send emails to particular mail ID when someone login into the firewall or any virus attacks from outside.
View 6 Replies View RelatedWe were having a discussion of ios firewall vs. asa for smaller clients(less than 50). On using ios firewall(zbf or cbac)and an asa 5505/5510. One of the arguments brought up on using ios firewall on the router is that a router will do an ip sla failover. I have configured a number of isr's for this and i know it works good.
View 1 Replies View RelatedI would just like to to open UDP port 123 in the ASA 5510 Firewall so that our Primary Domain Controller could use this port to sync time with an external time source. We have already added an access rule for this port under the firewall configuration in ASDM 6.4 and this port was also allowed in the inbound and outbound rule of the PDC's Firewall but it seems that it was still blocked.
View 23 Replies View RelatedI am quite new to firewall, in my company one asa 5510 firewall is there.I configured inside, outside, dns, dhcp and nating.I need to config bandwidth limit (1Mbps) for inside port and I restruct like facebook, youtube and pornsites..And I heard that some subscription is required, really is it required?
View 1 Replies View RelatedI have an ASA 5510 in a live environment. Up til a short while ago I could access this via the ASDM and ssh. However I can no longer connect to it via eithier. When I access It via SSH I get a disclaimer saying the following
*** You have entered a restricted zone! Authorized access only!!! Disconnect immediately if you are not authorized user! ***
It then cuts me off.
When I try to access the ASDM I get the following
The firewall is running all its services without a problem and I can ping the device without any issues. Also none of the config (to my knpowledge has been changed). I set up a console session and http server enable is still there with
http 192.168.200.0 255.255.255.0 inside
I have just configured identity firewall on our ASA 5510.I have 3 nodes that authenticates against Active Directory, using the Windows Server 2008 R2 builtin Network Policy Server: A laptop, a stationary PC, and a Android Phone. All 3 nodes are authenticated using the same user/password.
Now, in ASDM -> Monitoring -> Properties -> Identity -> Users, I can see two of the nodes with my user name attached to it, namely the laptop and the stationary PC.But not the Android phone.
Then it dawned on me. To set up the ADAgent properly, you have to apply 2 group policy entries. Unfortunately, those 2 entries are applied to the Computer Configuraton part of the Group Policy.This means that your COMPUTER has to be a member of your domain for USER IDENTITY to work.So my Android phone and other nodes not a member of the AD Machine Store will never be detected by identity rules, and can roam the network free.
I'm trying to install an ASA 5510 transparent firewall using ASA version 8.4(3)9 but I don't understand how traffic will ever pass through my firewall if both interfaces are on the same sub net(V lan) as the host and it's default gateway? The reason I'm doing this is were installing UAG (or Direct Access) and the UAG appliance need to have public IP's but still be behind a firewall (see attached diagram).
Looking at the documentation (which all seems to be for 5505's running 8.2) it almost seems like i need to have the transparent firewall 'in-line' to the ISP router?, but this router services another IP address range on another v lan for other (routed) firewalls (not shown on diagram) so putting it 'in-line' is not possible. Surely this can't be the case can it? If not how is it supposed to be cabled up and configured so packets go through the firewall?
I currenty have 2 cisco 5510 firewalls one of the firewals is completly dead but contains a Cisco ASA SSM-10 can i remove this card and just place it into a working unit, will i have any problems doing so.
View 1 Replies View RelatedI am unable to see 4th interface on my firewall i.e fastether0/3 on my firewall ASA 5510.
Below is the output.
ciscoasa# sh int ip br Interface IP-Address OK? Method Status Protocol Ethernet0/0 x.x.x.x YES CONFIG up up Ethernet0/1 x.x.x.x YES CONFIG up up Ethernet0/2 unassigned YES unset administratively down down Internal-Control0/0 127.0.1.1 YES unset up up Internal-Data0/0 unassigned YES unset up up Management0/0 192.168.1.1 YES CONFIG up up
This is my first time to use the Cisco ASA 5500 family. I have a request from a user to create an access rule, to allow all LAN traffic to Destination IP address 165.241.29.17, 165.241.31.254 with Destination TCP port 5060,5061,5070 and UDP port 50000-52399.
View 9 Replies View RelatedWe have setup new ip camera system and as per our vendor to access the camera from outside we need to open,TCP ports and in firewall and forward to our camera server.
Let say our public ip address is 207.114.111.22 and our local ip address for the camera is 11.11.1.30. We have cisco asa 5510.
We've in our company a Cisco Asa 5510 v8.4(3), Asdm 6.4(7) and a SSM-CSC-10-K9. The firewall is in transparent mode. I get an exchange 2003 SP2 server behind. When users trying to send mailing lists with many recipients (above 300), the Exchange server didn't send these mails. I'm pretty sure that this problem come from the ASA Firewall, because when I plug my server directly on my Internet Connection, the mailing list is sent. I've search on the web, and disable "ESMTP Inspection", but it didn't work. [code]
View 4 Replies View Relatedi have loaded a temporary 4 weeks license on a Cisco 887 router running 15 software.The license appears under temporary licenses, but the enable license is grayed out, so the sslvpn configuration section is unavailable.
View 1 Replies View RelatedI purchased Product # FL-WEBVPN-10-K9=
What i got was a price of paper paying gratitude for purchasing a license and a CDROM with a video on Electrostatic discharge and copies of the user agreement in several languages. How do i actually activate and use this license? The router is already setup for the SSL vpn. It just doesn't connect. I am assuming it is because i have no license installed?
I have a new asr9010 that I want to upgrade from 4.2.0 to 4.2.1 sofware. When i try to run the "install activate isk0:asr9k-mini-p-4.2.1 sync" it fails and complains that the 2 files below or equivalent must be active.
iosxr-infra V4.2.0
iosxr-fwding-4.2.0
When do a show version i can see files are loaded and on the asr9010. Attached is a show tech
We bought a CISCO1941 K9 router. To enabled IPSec feature, I need the PAK to active IPSec on 1941. Where I can buy a valid PAK? Could it be done via on-line support?
View 5 Replies View RelatedI have CISCO 5510 firewall running with IOS ASA821-k8.bin.My company has purchased another ASA5510 with IOS ASA843-k8.bin.We need to run both firewalls in Active/Standby mode.
If I upgrade the IOS of old firewall to ASA843-k8.bin the the running configurations does not work properly.It does not pick the network objects and NAT rules as they are configured with OLD IOS and running.
Or if I restore the configurations of old firewall at New ASA the result is worst. Even firewall with new IOS does not show any Access Rule and NAT rule and does not supprt network objects.
Sometimes I need to administer the server, but always need to VPN. Can RDP be active while a separate VPN is active?
View 3 Replies View RelatedA while back my faithful old IBM ThinkPad became very slow under the weight of too many applications and updates so I replaced it. Now I have decided I would like to revive it mainly as a games machine for my young grandson, so I wiped everything off it and reinstalled Windows XP Home Editon (it previously had XP Pro). It used to access the net via a wireless LAN card (IEEE802.11b/g) and this worked fine. I am now having difficulty reinstalling this device. I thought XP would just pick it up but it doesn't. I tried downloading a driver onto a memory stick using my new laptop but that doesn't work either.
View 8 Replies View RelatedI have USB card and I'm trying to hook it up to my mini laptop it's a windows CE 6.0
View 1 Replies View RelatedI have WAP4410N and AP-1131AG for the school lab's Access point. First, WAP4410N doesn't make connection to wired network.
There's no DHCP server in our school and uses below :
192.168.x.x ip address
255.255.0.0 Subnet
192.168.1.254 Gateway
210.220.16.7 DNS address.
So I seted these settings on the configuration page, but when I connect to the WAP4410N wireless, I can't connect to the internet. Problem reporter in Windows 7says there's IP adress problem on the access point. ...but the ip address is correct. I did everything on the manual ....
Second, AP-1131AG. I entered with console cable and changed the ip address. And I enabled wireless radio(default:disabled) but I cannot find SSID with wlan. I added SSID on SECURITY-SSID manager. It says 'interface on' on 802.11a/g, but it is the same. I can't find SSID. other labtops can't, too.. tried using vlan. FAILED....