Cisco VPN :: Check Right Time On VPN Client Session On ASA 5510?
Sep 11, 2011How can I check I have the right vpn time on a VPN client session on a asa 5510 , and how can I modify it to more time...
View 3 Replies
ADVERTISEMENT
Cisco :: User To One Session At A Time In ACS 5.1
Apr 10, 2012I have installed the ACS 5.1 and linked to my WLC, and when I enter my Logeo I agree Signature: User and password whenever you want from different devices, I want to do is only allow a user to one session at a time.
View 7 Replies View RelatedCisco VPN :: ASA5540 Any Command To Check Tunnel Up-time
Mar 17, 2011I am using cisco ASA 5540, Is there any command to check the tunnel uptime?
View 2 Replies View RelatedCisco VPN :: ASA5500 / Command To Check Tunnel Up-time?
Jun 27, 2011I am using ASA5500 series box which has a site to site tunnel terminated on it.Is there any command by which we can check the up time of the tunnel.
ASA# sh isakmp sa
Active SA: 1 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)Total IKE SA: 1
1 IKE Peer: x.x.x.x Type : L2L Role : responder Rekey : no State : MM_ACTIVE
Cisco Wireless :: Can WLC 7.0 Restrict Guest Session Time
Feb 5, 2013We have Cisco WLC 7.0 with private and public accesses. Is it possible to limit guest session time? For example, any visitors’ connection will be disconnected after 1 hour.
View 3 Replies View RelatedFind The Time To Check The Network Layout Attached In The PDF?
Nov 9, 2012Time to check the network layout attached in the PDF. This design is regarding a new redundant DC being built (hypothetically only) but I need to know if I've connected this in the right way/ if its possible with the equipment listed and how I've put them together. [CODE]
View 3 Replies View RelatedCisco Firewall :: Terminate Vpn Session On Asa 5510?
Apr 5, 2011How to terminate a vpn session on the asa 5510, when u issue the command sh vpn-sessiondb remote?
View 1 Replies View RelatedCisco VPN :: Single VPN Session On ASA 5510 Is Successful
Oct 7, 2012I am able to establish a single VPN session on an ASA 5510. The network is as follows:Cisco 2600 router----> ASA 5510---->non cisco UTM----> LAN.Once another session is connected (same profile different username) is connected the first one disconnected.
View 2 Replies View RelatedCisco Firewall :: ASA 5510 Citrix Session Reliability?
Sep 11, 2011My company has a cisco ASA 5510 and we have a Citrix remote desktop solution. In a nutshell I have users from outside our network accessing a virtual Citrix NetScaler inside our DMZ. There is a session reliability feature enabled on the Citrix solution. Session reliability uses tcp port 443. A user from outside the network connects to our network and is handed a virtual desktop to work with. When a remote user is working on their virtual desktop and there is a network connection issue the end user loses network connectivity for a brief period of time (in most cases just seconds) then the Citrix session reliability feature takes over and holds in a buffer all data destined for the end user . Once the connection is re-established then the buffer is emptied and the session goes on like before and the end user is able to use the virtual desktop. At least this is the way it should work.
In our case the connection never re-establishes between the end user outside the network and the NetScaler in our DMZ. We have been working with Citrix Support and they believe the issue is in our firewall. We have taken packets captures with Wire shark and we can see when the network failure occurs the NetScaler in the DMZ is holding information in a buffer and trying to communicate with the remote end user outside our network via packets and TCP port 443. We can also do the same packet captures from the end user computer and see where it is not receiving any packets from the NetScaler in our DMZ. The fire wall has an access list allowing any traffic in the outside port destined to the NetScaler Public IP on port 443. Then once in the firewall outside port we have a static rule pointing to the NetScaler IP in the DMZ.Everything is working quite well until we need to rely upon the session reliability. We have tried altering the TCP & Global Timeouts options in the firewall via the ASDM with no luck.
Cisco VPN :: 5510 - AnyConnect Backup Server When Session Limit Hit
Mar 21, 2012Is it possible for AnyConnect to utilise the backup server defined in the connection profile when the session limit is hit on an ASA? Essentially if I hit the 250 limit on my ASA 5510 in Region A, will it try the backup server ASA defined in the connection profile which is in Region B?
From what I have read, the backup server only kicks in when the AnyConnect client cannot connect, but in this scenario it will connect but get an error message.
Cisco VPN :: 5510 - VPN Tunnels Cannot Run Steadily At Same Time
Apr 1, 2012I have a trouble with 2 IPSec tunnels on Cisco ASA 5510.Both of them are Site-to-Site tunnels.Both of them are established against the same public IP address on my site.It looks like they cannot run steadily in the same time. It looks like when one of them is actived, the other one could not be up.Is it some kind of limit of Cisco ASA?
View 6 Replies View RelatedCisco VPN :: ASA 5510 - Maximum Connect Time Configuration?
Mar 21, 2011I have been working on my ASA 5510 version 8.2(1) trying to change the maximum connection time. Originally the custom "Group Policy" for IPSEC (Remote Access VPN) was set to inherit the settings from the default system Group Policy (DfltGrpPolicy). The custom group policy for the sake of this discussion is called "ABCD". I have modified the settings on the default (DfltGrpPolicy) as the custom policy (ABCD) was inheriting the configuration from default to disconnect after 1200 minutes. I changed the setting "maximum connection time" to 1200 minutes. I saved the configuration and what not then connected my VPN client, after two (2) hours I was disconnected. Something just doesn't add up.
I went ahead and deselected all inherited properties and manually configured them for the ABCD custom policy. No longer was the ABCD custom policy configured to use the inherited properties/settings. I saved the configuration again tested but instead of having a 1200 minute connection limit, I have 120 minute connection limit. Inside Monitoring --> VPN --> Sesssions : I can click on my session and see Session details". The Group Policy and Connection Profile properly list the "ABCD" custom profile. However, the "Conn Time Out" setting is: 120 minutes. I am completely stumped as to what is going on.
In the actual running config I see:
group-policy abcd attributes
banner none
wins-server value 123.123.123.123
dns-server value 123.123.123.123
dhcp-network-scope none
vpn-access-hours none
vpn-simultaneous-logins 3
vpn-idle-timeout 60
vpn-session-timeout 1200
What I need to do next to get this working short of a recycle of the ASA.
Cisco Firewall :: ASA 5510 Real Time Logs Showing Incorrect Ports
Oct 17, 2012I have an issue on an ASA 5510 that I have noticed today, when I am using the log viewer all of the information recorded only shows the high end source and destination ports. For example
Source IP 10.10.4.69
Source Port 59886
Destination IP 8.8.8.8
Destination Port 59866
So what seems to be happening is that I am seeing only half of the connection in the log viewer, I see the side with the high end ports and not the side with the ports the application uses, this example was done with a ping. All my services are working correctly and the client sending the ping gets the response expected, it just seems I have lost the logging display?
Cisco Firewall :: ASA 5510 - Time Range / Allow Single Port During Business Hours Only
Apr 1, 2012I'm new to an ASA 5510 running 8.4(3) and am trying to figure out something regarding time ranges in ASDM. I simply want to allow a single port during business hours only (I'm not concerned about open sessions needing to be closed). So as an example I add a rule something like:
(RULE1 on the internal interface) SRC=INTERNAL DEST=ANY SERVICE=RDP ACTION=PERMIT with a time range set for weekdays 8:00-16:59. I did a test after 5pm on a weekday and was still allowed to do RDP to a server (from INTERNAL), and after using the packet trace tool saw it was still passing through due to a rule a couple lines down (rule 4) that allowed a port range that happened to include port 3389. So my question is if I specify an "allowed" time range and someone attempts access outside that time range, why doesn't it drop it right there? I guess I'm assuming that anything outside the "allowed" time range would be dropped but that doesn't seem to be the case. I'm also assuming the rule base is processed top to bottom.
Cisco Firewall :: ASA 5510 Running 8.3(1) And ASDM 6.4(5) - Real Time Log Viewer Delay / Slow
Feb 15, 2012I have a new ASA 5510 running 8.3(1) and ASDM 6.4(5)
I am trying to use the real time log viewer to troubleshoot some access issues, but I am getting delays of up to 30 seconds or more between my client connecting to the ASA and the corresponding events showing in the RT Log viewer. I am using a simple filter for source IP as it's quite a busy device.
I've seen an article that says to turn off certain logging IDs (such as 304001 from memory) which I have done, but no different.
Cisco WAN :: 2621 / Time-Based Access Lists Using Time Ranges?
Jan 4, 2011I have one 2621 router i want to creat time base access list so that one of my subnet user(10.128.194.0 255.255.255.128) use only internet between 11am to 2pm.
View 15 Replies View RelatedCisco Wireless :: WAP321 Lost Time - Cannot Sync With Time Server
Jul 8, 2012I just bought a WAP321 Wireless AP. I wonder why it cannot sync with our time server automatically. Every time I reboot it, the system time become "Fri Dec 31 1999 12:00:00 UCT". I have to do the sync manually by clicking on the "Save" button under the menu Administration > Time Setting.
View 5 Replies View RelatedCisco WAN :: 1941 Router Frozen From Time To Time?
Jun 29, 2011Ciso 1941 router frozen once a day, sometimes after 2 to 7 days. When the router frozen, no internet connection and cannot login/ping ethernet ports. I can login to console port and copy the error messages below. Reload the router and it will return back to normal operation. Re-installed IOS but still the same.
IOS Version 15.1(2)T2,
Cisco CISCO1941/K9 (revision 1.0) with 487424K/36864K bytes of memory.
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash 0 (Read/Write)
[code]...
Linksys Wireless Router :: Wrt54g2 Wifi Stops Working From Time To Time
Oct 26, 2011I have WRT54G2 router. All settings are more-less default and the behavior is following.You start up the router. If you do not connect wireless device within 10 minutes, then you have to restart the router.You have assigned IP via wifi, and when you connect cable device to the router, the wifi PCs are disconnected.
View 3 Replies View RelatedLinksys Cable / DSL :: X2000 Current Time Will Not Stay Set To Time Zone
May 1, 2012I recently purchased a X2000 ADSL modem/router combination. For some reason the current time will not stay set to the time zone. Rebooting clears the discrepancy for a short time before it drops an hour exactly. I'm in the central time zone and the setting are correct on the basic setup.?
View 1 Replies View RelatedLinksys Cable / DSL :: Retrieving Up-time / DSL Connection Time Information From WAG320N
Jan 17, 2012Is the WAG320N iPv6 compatable ? ,or could it be with a firmware update ?.Is the X2000 in the same boat in iPv6 terms as th WAG320N ?.Is there a way of retrieving "UPTIME" / "DSL connection time" information from the WAG320N and also line attenuation stats etc.Wouldn't need the above but poor isp needs keeping an eye on.
View 3 Replies View RelatedD-Link DIR-825 :: Wireless Signal Drops From Time To Time?
Jan 10, 2012AI have a Dir-825 router. The 5GHz is turned off and the wirless is on G/N. I have shawcable for my isp and my firmware is 2.06 and its a Rev B Router. I also have Qos Engine on for allowing me to have 2 xboxes on Open NAT.problem is my wireless signal for some wired reason is VERY weak. A while ago it used to work really far way outside. It was around 150ft distance at 4 bars. Now for some reason I can't even go upstairs without getting a 1 or 2 bar signal.
View 3 Replies View RelatedD-Link DIR-655 :: Wireless Network Gets Slow Time To Time
Sep 1, 2011i have had my dir-655 one year now, have never had wireless problems with it until now.my notebook's internet gets very slow somedays, i just restart my router and then internet speed works normally.i have:
Hardware Version: A4 - Firmware Version: 1.32EU
Cisco ASA Or Check Point
Feb 28, 2011I have a question for all those here who have experience with both Cisco ASAs and CheckPoint.Which do you prefer Cisco ASA or CheckPoint?
View 9 Replies View RelatedCheck Your IP Address In Just About 3 Second?
Feb 28, 2012Simply one step away to check your IP address: type into your search box in your browser the following address
[url]....
Cisco VPN :: ASA5520 Any Way To Set Up Profile To Check PC
Mar 5, 2013I have a Cisco ASA5520 that we are going to use to allow users to connect to our network via the Anyconnect client, I have authentication set up to validate against AD via LDAP, but was wondering if there were any way to set up the profile to check the PC before they log in....we do not want users using their home PCs to attach to our corporate network, only PCs that were issued to them by the company. Nothing is jumping out at me in the config, we are running some fairly old sofware on the boxes (ASA - v8.2(2), Anyconnect - v2.5.3046) I plan on upgrading the Anyconnect to v3.1 but will probably need to keep running the 8.2(2) version on the ASA due to support issues.
View 2 Replies View RelatedCisco Firewall :: NAT RPF Check Failure PIX 8.2 OS
May 2, 2013i know in Cisco PIX til 8.2 OS, if i have Nat control disabled and ACL permitting connection from Low Secirity ( DMZ ) to High Secuurity (INSIDE) then connectino should be successful, and i dont need any STATIC identity nat of inside IP to be created.
But i have Cisco PIX 525 with Version 7.2(2) Which is not allowing connection from DMZ to INSIDE , although nat control is disabled. and giving RFP check failure, any thought?
PIT525PIXINET# sh running-config nat-control no nat-cont
packet-tracer input dmZ tcp 192.168.85.4 65000 10.34.21.25 3389
Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
[Code]...
Cisco WAN :: To Check Status Of VPN 1841
Dec 15, 2010i have a router 1841 series and LMS send me amessage telling me the VPN AIM is not working on thsi device and i want to check the status of this VPN card
View 1 Replies View RelatedCisco WAN :: Check Sum Error In 1841
Oct 7, 2012The router is always giving the below error:
Error : compressed image check sum is incorrect 0xDC5C5348
Expected a check sum of 0x066C5349
I have uploaded a new firmware but same issue after booting, I have check the MD5 check sum in the image and Cisco and they are matching and verified, what could be the reason for all of this ?
Check The Users That Logged Into PC?
Mar 27, 2011Some1 browse my PC via LogMeIn Hamachi, so i need 2 know who did that , how 2 see the log list?
View 1 Replies View RelatedCheck Others IP Address And Location?
Sep 4, 2011How do I check IP address of others, when in chatting or playing online game, I could only know that he is Mr. X from YZA country which appears on Screen, But I also know he is using with wrong name and wrong Country name.I would to check his IP as well as his Place?
View 1 Replies View RelatedHow To Check Transfer Speed
Jun 12, 2011I want to check the transfer speed between my PC and another IP.The IP belongs to a DVR here is the general schematic of the sistem:Digital Video Recorder - Dynacolor - DynaGuard H.264 DVR (nDG80 - nDG600 - DG200) & DynaHawk Speed Dome & IP CamerFirst when I've worked with this system everything worked well but now after three weeks I have to open 5 ore more internet explorer windows to see live image and I can't see the recordings.I need to know the speed transfer because I want to know if someone had decreased my transfer speed between my PC and the router or DVR.
View 3 Replies View RelatedHow To Check Which Users Are Using IP Printer
Mar 4, 2013How to check which users are using printer. so that i can see which user are using more printer.
View 2 Replies View Related