i contact Cisco support. They told me that VPN between a Blackberry and ASA5000 is not supported. Today 14 fév 2013 they don't have any date on when Anyconnect for Blackberry will be available. So we cannot use a Z10 because exchange server is beind the ASA. Protected with the ASA. Apple and Android work well with the AnyConnect and certificat.URL
View 2 RepliesI have created a new DMZ and a LAN on my ASA5510.My Ethernet DMZ port is connected directly to a server (192.168.220.10) This server is able to get to the internet properly.Gateway ASA router: 192.168.220.222..My Ethernet LAN port is connected to a L3 switch, This L3 switch is connected to a server (192.168.210.11). This server is able to get to the internet properly.My issues is that I cannot communicate from my 192.168.210.11 server to my DMZ server 192.168.220.10. From my 192.168.210.11 server I can ping my gateway 192.168.210.1 and 192.168.210.222. But I cannot ping 192.168.220.222. [code]
View 7 Replies View RelatedI have recently upgraded a customer ASA5510 to version 8.3.
After upgrade web access etc is working fine however VPN is down. The config looks very different after the upgrade plus what looks to be duplicate entries.
I suspect its an access list issue but I'm not sure.
hostname ciscoasa
domain-name default.domain.invalid
enable password NvZgxFP5WhDo0hQl encrypted
[Code].....
I have open my 25, 110, 80 port on my Server from local i can telnet all those via my private ip but from public ip its not responding.
2nd thing I can ping both ips of My server through private ip and through public ip.
I am trying to get an ASA5510 working in transparent mode, multi-context. I am on revision 8.2.5, so there are no bridge groups (those are enabled in 8.4). I first set it to transparent mode, then set it to multi-context mode. I am doing trunking through the Ethernet0/0 to Ethernet0/1, and have two vlans on subinterfaces of each interface. These interfaces are in the 2nd and 3rd contexts, and all trunking between vlans is working correctly in transparent mode.
But I can't telnet or ssh to the ASA itself.
I have an IP address on the inside vlan interface in each context, and can ping tthe IP in context 2 and context 3. There is an IP also in the admin context, but I am unable to ping this. I have tried putting it in the same vlan as the 2nd context, and putting it on the management interface, but since there is a global IP only in transparent mode, I don't think the management interface is used (even though it is in the admin contexts included interfaces).
Since I can't connect to the ASA, I can't easily get the running config to post it here, even though that would likely
To summarize:
- transparent mode
- multi-context
- trunking (dot1q) through Eth0/0 and Eth0/1, so each interface has four sub-interfaces, each in its own vlan
- these VLANs are in each of the contexts except the admin context
- the IP of each conext is able to be pinged, but can't telnet or ssh to it
- telnet and ssh are setup for allowing a /16 subnet range access, in each context
- access-list is setup for permit ip any any and permit icmp any any on the inside and outside interface of each context
- all thru-traffic is passing correctly, but can't manage the ASA other than sitting at the console of it
What I'm going to try now is putting the admin context into one of the vlans in the trunk and see if I can use it that way.
I have an ASA5510 which was running version 8.31. SSH was working fine on version 8.31 but since i upgraded it to version 8.41 the SSH stopped working.
View 7 Replies View RelatedI not familiar with the ASA 5510 product. I having trouble since last 24 hours and still cant find out the root cause yet. Here is my scenario, my network should be
WAN --- ASA5510 (FW) --- SERVER (192.168.1.0/24)
Now I face the problem, all the NAT static 1-to-1 is working OK. All my public IP can be ping from outside internet. But the problem happen when I try to telnet to port 80 on each server. I had try telnet from my PC to public IP 124.xxx.179 80, it's work fine, but failed on 124.xxx.180 80, then on 124.xxx.181 80, its work fine.
Then I do try on my colleague PC, in same network as mine, I face another case where the public IP 124.xxx.179 80 cannot be telnet, but it's ok for 124.xxx.180, then failed on 124.xxx.181 80.
FYI.. all our PC can ping to the Public IP and no packet lose.
The scenario is very weird, I cant find any other solution as had review my configuration few times.
check does my configuration is working perfectly or not.
ASA Version 8.2(5)
!
hostname fw-asa
enable password xxx encrypted
[Code].....
An ASA5510 (with 1 webserver behind it, just starting to build the cluster) was functioning OK with version 8.2: I was able to log in using RDP to the server bhind it from some trusted IP's.
I updated ASDM to the latest version 6.4.7, and then the ASA-software to 8.3.2. After reloading, I could not access the server anymore. I saw that changes were made to the config. Then I updated to version 8.4.3, same results of course, and this is the config. [code]
I configured my cisco client with the info from the vpn wizard and get the following error :
error in the cisco vpn client when enabling the log : Invalid SPI size (log) + reason 412 the remote peer is no longer responding (application) message I see via the ASDM-IDM : Built inbound UDP connection for interface WAN
I'll explain briefly what I'm trying to do here :
* Remote vpn with windows users having cisco clients
* Group authentication and in the asa5510 LOCAL authentication
My WAN interface contains a public ip/29 I also defined a LAN interface with security level 100 in 10.0.60.0 255.255.252.0 range the vpn dhcp range I want to attribute to vpn users : 10.0.69.0/24
Basically I want users to initiate the vpn tunnel to the public IP and be able only to access the LAN range with the 10.0.60.0/22 range
ASA Version 8.2(5)
!
hostname xxxx
domain-name xxxx
[Code].....
I have a problem with an ASA5510 (8.0.4) firewall in South Africa (I'm in the UK).It's a replacement firewall that I am trying to configure remotely through a serial device with an internet facing connection, but the enable password is not working.I can connect to the device OK, type 'en' and when propted for the password whatever I use (blank, cisco, Cisco etc.) I get an 'invalid password' message.
View 2 Replies View RelatedCannot access to cisco asa5510 asdm nor ssh thru anyconnect vpn, attached is the current configuration. user authetnicaties aaa locally and has admin service-type. When vpn session is established, it lets me go thru the certificate warning and when trying to install the asdm laucher its failing. ssh access is enabled but not working. i can access both asdm and ssh from the inside network, and from a pc on that network.
View 9 Replies View RelatedI set up Anyconnect on ASA5510 and enabled secure connect in CUCM. I did everything as written in jabber for android administration guide and end user guide. But when secure connect configured on my mobile, secure connect entry never created even though I entered all correct parameters such as gateway address, authentication group, username and password. Provided that jabber is working fine internally
ASA log says:
SVC message: 16/NOTICE: The user has requested to disconnect the connection.
SVC closing connection: User Requested.
WebVPN session terminated: User Requested.
I succeeded in connecting via Anyconnect app on iPhone. So I believe Anyconnect Vpn connection has no problem. License checked.
Anybody succeeded in implementing secure connect using AAA authentication?
My mail server is not in my network, it's over internet elsewhere.After installing the ASA 5510, i can not get my mails any more.
View 7 Replies View RelatedI have an ASA5510 that was working in a HA config that is now constantly rebooting itself. Here is a copy of the dump of traceback messages:
Booting system, please wait...
CISCO SYSTEMSEmbedded BIOS Version 1.0(11)5 08/28/08 15:11:51.82
Low Memory: 631 KBHigh Memory: 256 MBPCI Device Table.Bus Dev Func VendID DevID Class Irq 00 00 00 8086 2578 Host Bridge 00 01 00 8086 2579 PCI-to-PCI Bridge 00 03 00 8086 257B PCI-to-PCI Bridge 00 1C 00 8086 25AE PCI-to-PCI Bridge
[Code] .........
We have several pairs of ASA5510s in failover A/P mode, some running 8.3(2) and others running 8.4(1).
e0/0 = outside
e0/1 = inside
m0/0 = management
The problem we're having is we can't get anything to route out of the management interface unless we put in a static route at least to the subnet level. For example, we want syslog traffic to exit out m0/0 to our syslog server 10.71.211.79. Our 'gateway of last resort' points to the next hop out e0/0, and a second static route with a higher metric and a more distinct network space is for m0/0 as in:
route outside 0.0.0.0 0.0.0.0 192.168.49.129 1route management 10.72.0.0 255.255.0.0 10.72.232.94 10
This doesn't work, and ASDM loggin gives this error: ".....Routing failed to locate next hop for udp from NP Identity Ifc:10.72.232.89/514 to management:10.72.211.79/514"
If I put in a more granular subnet route, or a host route of the syslog server it works, such as:
route management 10.72.211.0 255.255.255.0 10.72.232.94 10 <------------- this works
route management 10.72.211.79 255.255.255.255 10.72.232.94 10 <------------- this works too
Why won't a static route for 10.71.0.0 255.255.0.0 work in this case?
We are going to have numerous hosts access and be sent messages though the management interface of these ASAs, and it would be very burdonsome to have to add a host, or even a subnet, route for every one. I've removed all static routes and tried to rely on EIGRP, but that doesn't work. I also had to put 'passive-interface management' under the EIGRP for this to work.
Here is the pertinant ASA config concerning syslog, routing, and interfaces:
interface Ethernet0/0 nameif outside security-level 0 ip address 192.168.49.140 255.255.255.128 standby 192.168.49.141 !interface Ethernet0/1 nameif inside security-level 100 ip address xxx.xxx.xxx.xxx 255.255.255.128 standby
[Code].....
how do I link up my blackberry torch And my ps3 with the wifi.I'm not get connected
View 1 Replies View RelatedI am trying to connect to VPN using Blackberry Playbook. how to configure this VPN using ASA 5520.
View 1 Replies View RelatedI am trying to understand how WiFi works - I have shaw wireless in my home - does that mean I can connect my blackberry torch using WiFi
View 1 Replies View Relatediphone and android app but no blackberry.
View 3 Replies View Relatedfirmware v.2.21 working well with laptop for 5 years. unable to connect b/b rim playbook last week. tried a couple of sessions with dlink tech support. turned off all other 2.4 ghz devices. would firmware upgrade 3.13 fix this issue?
View 3 Replies View RelatedI'm working on setting up my Blackberry Playbook to access the network over our IPsec VPN however so far I have had no luck. I'm also posting this on the Blackberry playbook support forum.
Settings on BlackBerry Playbook
Server Address: My IP Address
Authentication type: XAuth-PSK
Group Username: remote.com
[Code].....
I have an issue when I´m trying to authenticate my iphone&blackberry device with ASA 5520 using certificates. It seems that certificates are working fine, pass the ike phase 1 but never complete the phase 2. When i use pres hared keys everything works fine with both devices.
If you consider necessary, i can provide my current configuration in asa.
i bought the Dir 615 a few months ago so that my tenants (i have a triplex) can use the net. it's been great. I recently got a new blackberry bold 9700 and I can't connect it. It finds the router and saves it, but I can't connect. Even when I put in the WEP Key.
View 10 Replies View RelatedMy friend was able to access my internet connection via my guest account WITHOUT having to enter the guest password. He was able to connect using a samsung galaxy phone with the android OS. However, when I connected to my guest account using my blackberry, I WAS asked for the guest account password.
View 3 Replies View RelatedHow to do tethering using Blackberry 9790 n Samsung notebook NP500
View 2 Replies View RelatedI thought I had the configuration to allow bi-directional traffic for my Blackberry server. I have a second fw with the same config and it worked on that one. But right now, my blackberry server is down, and all the users are upset.
ASA Version 8.2(2)
!
hostname asa5505
[Code]......
why my Blackberry wifi doesnt find my pc wireless. I have Blackberry curve 9300 3G. OS 6
View 1 Replies View RelatedI have netgear router WNR 1000 v2. I'm not able to connect to Apple ipod. The password is not been accepted.
View 2 Replies View RelatedRegion : United Kingdom
Model : TD-W8960N
Hardware Version : V1
Firmware Version :
ISP : Unforced 9
I am struggling to get my blackberry Z10 to connect to the router.
I connect to my RVS4000 VPN router using QuickVPN. Very useful.
Sometimes I am not near my laptop and need to check data.
Is there a QuickVPN or compatible client for a BlackBerry Torch 9850, even if it's only functional when connected to WiFi?
in my company we have 40 cisco aironet 1100 without controller, the signal is good with laptops but is too weak with the iphone's ipads and blackberry.
View 12 Replies View RelatedI have installed the Phone Remote software [URL] on the torch and playbook but am not able to pair them together.The FAQ's and directions have been followed painstakingly but have not any success. My router is knowledge is basic but read through the manual and have been searching the net for answers. I have uPNP enabled and no firewall.
View 2 Replies View RelatedASA 5510 have two model Bun-K9 and Sec-Bun-K9 from the datasheet find out difference Port related and Redundancy. My questions is : Have any major difference for Security service between two model ?
View 3 Replies View Related