Cisco Security :: 2911 Routers - Does ASA 5510 Support BGP
Jan 25, 2012I have a new BGP configuration that consists of two asa 5510 and two routers 2911 at the back. My question is : Does asa 5510 support BGP?
View 1 Replies
ADVERTISEMENT
Cisco Firewall :: 5510 Security Plus To Terminate Client VPN Access For External Support Team
Aug 7, 2012I have a customer that wants to purchase an ASA 5510 security plus to terminate client VPN access for an external support team. The customer claims to want URL content filtering/proxy which leads me to suggest a CSC SSM 20 plus module. But upon further conversation, he mentioned wanting IPS. In this case, the customer does not seem to know the difference between the URL content filter/proxy and the IPS and uses both terms interchangably.
1. What would you suggest in your expert opinion would be the best module to get for this customer? IPS or CSC
2. If I go with the CSC module, where can I find good documentation on how to configure it and get it up to date?
3. does the CSC module provide any web proxy functionality?
Cisco VPN :: Does 2911 Support The VRRP
Jan 30, 2013Does Cisco 2911 support VRRP?I can’t find in datasheet anything about it.
View 2 Replies View RelatedCisco WAN :: 2911 Does Not Support NM-E3/T3 Serial Card?
Jun 14, 2011From all of the documentation I am seeing, the 2911 does not support the NM-E3/T3 serial card.
View 16 Replies View RelatedCisco Switching/Routing :: 2911 Can Support Ip Service Image
Feb 29, 2012i want to check if cisco2911-sec/k9 can support IP service image? what PAK(license) can be bought to activate the IP service feature set?
View 1 Replies View RelatedCisco Switching/Routing :: 2911 Out Of Box - No IP SLA Support And No VLan / Trunk
Jan 27, 2013We bough an Cisco 2911 router, and as i see the "ip sla monitor" command is not supported. Which license/IOS upgrade should i buy the fullfill this. And i cant add a trunkport to the iunterface even cant add a vlan to interface. How do i a trunkport on the cisco 2911 router. ANd how can i do a vlan on a interface on the router.
View 2 Replies View RelatedCisco WAN :: 2911 - Support Interface ADSL Module Like Backup Link?
Apr 27, 2011i will going to buy a router 2911 but i want know if support a interface ADSL modulo like backup in case that my primary link WAN Ethernet down and up the adsl link with a module HWIC ADSL pots.
View 1 Replies View RelatedCisco Security :: PGM Configuration On 2911?
Aug 29, 2011I try to configure PGM in my 2911 plattform but it was impossible. I tried with many 15.1 version that support this protocol.
Someone configured PGM over 2911 Routers? What does correct IOS for work?
Cisco VPN :: 2911 - VPN License / Security Pack
Sep 25, 2012We are designing a solution for our customer, they plan to connect 5 site to their main office, on the main office, they use CISCO2911, branch use CISCO1921, so my question is:
1, If I want to use IPSec VPN connect branch and main office, apart from the router, I only need to buy the Security pack, like SL-19-SEC-K9/SL-29-SEC-K9, no need to buy SL-19-DATA-K9/SL-29-DATA-K9, am I right?
2, If I want to use SSL VPN connect branch and main office, apart from the router and SL-19-SEC-K9/SL-29-SEC-K9, I only need to buy L-FL-SSLVPN10-K9 for CISCO2911 in main office, no need to buy L-FL-SSLVPN10-K9 for branch as each CISCO1921 has two default SSL license?
Cisco Security :: How Many Default Context In ASA 5510 Security Plus Edition
Aug 8, 2006ASA 5510 security plus edition will it support active/active failover. and does it support context with securiyt plsu edition. and how many default context do we get with asa 5510 security plus edition.
View 3 Replies View RelatedCisco WAN :: Install Security Licenses On 2911 Router?
May 27, 2013i'm trying to install the security licenses on a 2911 router and is giving the error shown in the attached file
View 4 Replies View RelatedCisco Switching/Routing :: 2911 Router With Base And Security
Feb 12, 2013We have purchased a number of 2911 routers.We got Base & security license as we wanted to enable encryption. However we probably wont use the security.We are replacing 2811 routers.Unfortunately the 2811 routers have FXS ports with 2 - 4 POTS handsets - I completely forgot about these ports when I was ordering.Now I have VIC3-FXS cards which are ok in the 2911 but unfortunately I cant get them to work.I am missing PVDMs (well adapters anyway), and even if I got them the router wont take any commands relating to voice due to the license.Is is possible to 'rehost' the security and turn it into a UC ?I am new to these 2911 and Licensing.
View 1 Replies View RelatedCisco Firewall :: Block Gtalk On New 2911 Security Enabled Router?
May 8, 2010I want to block gtalk on my new cisco 2911 security enabled router.
View 3 Replies View RelatedCisco Switching/Routing :: 2960S / 2911 / ASA 5510 - VLAN Can't Get To Internet
Sep 24, 2012Have multiple Catalyst 2960S switches, Cisco 2911 router and ASA 5510 firewall.
On the router have subinterfaces created for the VLAN's Int FA0.0/41 for wirless VLAN setup with IP 10.10.41.100 Int FA0.0/60 for new Voice VLAN setup with IP 10.10.60.100 Internal network is 10.10.10.0/24 and LAN IP of router is 10.10.10.100 Have default route setup to push traffic from the router to the firewall ip route 0.0.0.0 0.0.0.0 10.10.10.251
On the firewall have added the new VLAN 10 (10.10.60.0) to the network object-group Have configured route inside command route 10.10.60.0 255.255.255.0 10.10.10.100 1 Have also added the NAT command nat (inside) 1 10.10.60.0 255.255.255.0
On the 2960 I have my laptop connected to port 45 and I have it configured as follows switchport mode access switchport access vlan 10
I assign my computer a static IP address of 10.10.60.84/255.255.255.0/10.10.60.100 with 10.10.10.11 as DNS server. When I do this, I can ping anything on the 10.10.60.0 network, I can ping anythign on the LAN 10.10.10.0 network. I am able to connect MSN messenger, I am able to do NSLOOKUP and get outside IP addresses to resolve. I am unable to browse the Internet though. I am not sure where the problem is at though. It doesn't make sense to me, as it is setup the same way as VLAN 41 which is the wireless network, and when users connect to that, they get out to the Internet with no issues.
Cisco Security :: Does ASA5540-bun-k9 Support CSC-20 Module
Dec 13, 2011One of my client want to upgrade its already installed ASA5540-bun-k9 by adding CSC-20 Module. As per below link CSC-20 is supported with ASA5540. but for any reason the ASA5540 bundle option with CSC Module is not available that create confusion.Will CSC-20 Module work with ASA5540-bun-k9 [URL]
View 2 Replies View RelatedCisco Security :: Will ACS Express Ever Support 2008 R2
Apr 19, 2011My company has started the migration from Windows 2003 to 2008 R2. Will my ACS Express boxes (currently running 5.0.1) ever have an upgrade option to work with 2008 R2? Do I need to trash the ACS Express appliances for some other solution?
View 3 Replies View RelatedCisco VPN :: How Many VLans ASA 5505 Security Plus Support
Nov 18, 2011i have asa 5505 adaptive security plus. and i have only 3 vlans . outside , inside , DMZ restricted.so it's working fine but i want to connect to my inside another private network, or do i need to buy License.and how i can activate the license key.
View 4 Replies View RelatedCisco WAN :: 2911 - HA Between Routers
Mar 26, 2013I have to build HA environment, at the moment we have only one R1 and WAN1 but company wants to buy R2 + WAN2 and have HA between the routers, in case R1 or WAN1 goes down the other router will take over.
What would be standard methodology nowadays to do that - does HSRP will do what I need or it is better do some other way?
Cisco Security :: Which IOS Version Of 3560-X Switch Support NAC-L2-IP
Apr 20, 2011Which IOS version of 3560-X switch support NAC-L2-IP ?
View 1 Replies View RelatedCisco AAA/Identity/Nac :: Does Nac 4.7 Support Kaspersky Endpoint Security
May 17, 2012we have installed nac for our customer and it works fine ,but the customer want the change the version of kaspersky antivirus from 6 to 8 end point security ,when we have try this the nac agent does not find the antivrus on the the workstation . i want to know if this version of kasoersky (end point security ) is supported by nac ,if no is ther a solution to make it works with the NAC .
View 3 Replies View RelatedCisco Firewall :: ASA 5510 Support Active HA?
Nov 30, 2011If the 5510's support active/active ha. There is conflicting info. on the datasheet stating otherwise.
[URL]. As business needs grow, customers can install a Security Plus license, upgrading two of the Cisco ASA 5510 Adaptive Security Appliance interfaces to Gigabit Ethernet and enabling integration into switched network environments through VLAN support. This upgrade license maximizes business continuity by enabling Active/Active and Active/Standby high-availability services.
Cisco Security :: AnyConnect V3.0 Support On Window Server 2008 NPS?
Apr 26, 2011Just want to check out, does the non-Microsoft based OS client OS (Example: MacOS, Ubuntu, Android) support anyconnect v3.0 And also if my RADIUS server is host using window server 2008 Network Policy Server (NPS) component, can this doing the 802.1X authenticating?
View 1 Replies View RelatedCisco Security :: Catalyst 3750 Support Private Vlan?
Feb 12, 2004i want to know if the new Catalyst 3750 Support Private Vlan ?
or any other small Switches
3100 - No Support Of Radius Security On Wireless Adapter
Jan 6, 2013I recently got a refurbished external (USB) wireless adapter by Netgear. It's the WNA3100 but who knows what they did to it while refurbishing it.
I tried using it to connect to the wireless network at my university, and I got the above-displayed error. So what's the deal? This RADIUS thing is not a new technology, right? So any modern wireless adapter should be able to handle it. Why would this thing not support it?
Secondly, if it doesn't work, that's alright. I need a second wireless adapter anyway, so I could use this one at home where the RADIUS thing is not an issue. But how do I make sure this does not happen again with another one that I buy? I can't seem to find anywhere in the specs anything about this compatibility. For instance, I believe I want to get this one next:URL
Cisco VPN :: Multiple L2L Setup On 2911 / 871 Routers?
Dec 6, 2011I have two cisco routers (Cisco 2911 and 871) that I'm trying to establish a L2L VPN with. Each have a VPN configured to our cooperate office that is up and working. I'm now trying to establish a site to site VPN from both remote offices. I have my crypto maps, NoNats, and interesting traffic set up however, I do not even see phase one come up.
I've attached each config. Most of my site to site experience is on PIX's and ASA so I'm curious if there is something else I need to do on my outside interface to allow multiple VPN's?
Cisco Security :: SSH V2 Support Diffie-hellman-exchange-group-sha1?
Nov 22, 2006one of my router are scanned by Foundstone and get an alert :
""The SSH2 protocol specification requires that a SSH2 server support the diffie-hellman-group1-sha1 key exchange algorithm. This key exchange algorithm is considered strong, but faces a potential weakness in that the same prime number is used for all key exchanges."
SO wanna check if cisco SSH2 can support the diffie-hellman-exchange-group-sha1? If yes, which IOS version required?
Cisco WAN :: 2901 / 2911 Routers Service Module?
Dec 5, 2011I have some confusion about some hardware components. I watched the video datasheet of cisco routers and switches. In cisco 2901 and 2911 models of routers there is service module . What is meant by service module. what does it do ? If we buy a new 6500 switch, what are the components we get bydefault. Is there any special configuraton to be done for 6500 . like Sup engine config etc. What is the difference between ASIC and Sup engine ? In which slots, we need to insert Supervisor Engine ? does it vary with the model . (6503, 6505, 6509, 6513 etc).
View 6 Replies View RelatedCisco Firewall :: Does ASA 5510 Support No Auto-summary And CIDR
Sep 19, 2011if I can do the following deployment using a Cisco ASA5510 security plus.
At this moment I have two interfaces in use one (outside) with the IP: 172.16.21.254/24 and the other (inside) with the IP: 192.168.4.1/24. Now the customer needs to connect another network that works with the IP segment: 192.168.0.0/22.
The IP segment 192.168.0.0/22 goes from 192.168.0.1 to 192.168.3.254 that means that there is no a overlap with the network segment 192.168.4.0/24. My question is: If I configure another interface in the ASA that works in the segment 192.168.0.0/22 the routing table will auto-summary the network and merge it with the network 192.168.4.0 or will it leave the networks apart??
I don't user dynamic routing protocols but I cannot do the changes if I have doubts because the network 192.168.0.0/22 is a the Network for the Factory Automation Systems.
Routers / Switches :: How To Change WPA Security To WEP Security
Aug 22, 2011my router has a WPA security system and I want it to be a WEP security system, what must i do?
View 7 Replies View RelatedCisco Switching/Routing :: 2901 / 2911 Routers And Etherchannel
Jun 10, 2013Does the 2901 have etherchannel capabilities? If so, how to configure it? I mean, I can type "show etherchannel 1" in it, so I would assume if I can show it, I better be able to configure it, right?What about the 2911?
View 1 Replies View RelatedCisco Switching/Routing :: Possible To1941 Security Bundle Router Support Minimum Of 2k Of VLAN ID
Dec 17, 2012Is it possible to cisco 1941 security bundle router Support minimum of 2k of VLANs ID and shall support upto 60 vlans?
View 4 Replies View RelatedCisco Security :: 2x ASA 5510 With AIP-SSM And CSC-SSM On Each One
Mar 23, 2012I want to ask for the possibility of configuration below? 2x Cisco ASA 5510 running Multi-Context mode and Active/Active Failover1 Cisco ASA 5510 (ASA 1) has AIP-SSM1 Cisco ASA 5510 (ASA 2) has CSC-SSMThere are 2 contexts, context A and context BASA 1 is the primary firewall for context A, and secondary firewall for context BASA 2 is the primary firewall for context B, and secondary firewall for context A
Can AIP-SSM on ASA 1 inspects traffic of context B which primarily runs on ASA 2?Can CSC-SSM on ASA 2 inspects traffic of context A which primarily runs on ASA 1?
Cisco Security :: ASA 5510 - Upgrade From 7.0(6) To 8.2(5)
Aug 18, 2011I want to upgrade my ASA 5510 from version 7.0(6) to 8.2(5). Reading the release notes for 8.2(5) it says the DRAM requirement is 256MB unless you have high CPU usage. Also it says I need to upgrade through the major releases, from 7.0(x) to 7.1(x) and 7.1(x) to 7.2(x) and then from 7.2(x) to 8.2(x). The questions are:
- My ASA has 256MB of RAM and 68% of free memory, would you think it will run the 8.2(5) version with no problem?
- When making the upgrades to the major releases, is there any consideration regarding the configuration file? Or the versions to use for the 7.1 and 7.2 versions?
- Would you recommend making all the upgrades in one maintenance window? How much time could it take?