The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
3answers
3k views

VPN packet capture on ASA5505

Following up from a previous question regarding how to capture packets on the ASA5505 I'm having some difficulty in distinguishing which traffic has come through the VPN and which was generated from ...
4
votes
4answers
3k views

Cisco PIX 515e dropping IPSEC tunnels to ASA 5505 over time

We have a Head-Office/Branch-Office WAN like this, Server LAN <-> Cisco PIX 515e <-VPN tunnel-> Cisco ASA 5505 <-> Client LAN 1 <-VPN tunnel-> ...
1
vote
1answer
126 views

ICS with Cisco AnyConnect - cisco-anyconnect-win-3.0.4235-pre-deploy-k9.msi

I've installed cisco anyconnect VPN (cisco-anyconnect-win-3.0.4235-pre-deploy-k9.msi) on a 64 bit Windows 8 machine. FYI, I do have internet access, while I'm connected to the VPN. I want to share ...
5
votes
0answers
4k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
4
votes
2answers
6k views

How to make iPhone Cisco VPN client work with ASA with certificate authentication

I have an ASA that's providing IPsec VPN services using certificate authentication (no xauth, just the certs). It works perfectly with the Cisco IPsec VPN Client. Now I'm trying to let iPhones ...
0
votes
1answer
573 views

Cisco ASA 5505: Clean delete of IPSec tunnel

What is the easiest way to delete a Site2Site IPSec tunnel? The ASDM seemingly does not offer that functionality. I have to go to various tabs to delete the different elements that were created by the ...
1
vote
3answers
367 views

cisco vpn client for mac

What Mac application should I use to allow me to connect to Cisco VPN?
4
votes
4answers
3k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
0
votes
1answer
180 views

Cisco VPN client software use licenses? [duplicate]

I am doing research into Cisco ASA appliances and SSL/Anyconnect. What is the actual cost to do a VPN with a Firewall by Cisco? I never realized they actually charged and do they charge per ...
1
vote
0answers
84 views

Adding a Cisco RV084 appliance for site-to-site services in a local area network that I can't change

I have a need to establish a site-to-site vpn connection to a remote office using a Cisco RV084 appliance. We currently are in a shared office environment where our property manager has provided us ...
4
votes
1answer
2k views

Nmap ping scan over a VPN tunnel return all hosts alive?

I'm curious as to why running an nmap -sP (ping scan) on a remote subnet linked via a Cisco site-to-site IPSec tunnel returns "host up" status for every IP in the range. [root@xt ~]# nmap -sP ...
4
votes
5answers
12k views

Unable to access local network when Cisco VPN client is connected

I'm a developer and don't have much networking expertise, so bear with me. I'm using the Cisco VPN Client 5.0.02.0090 to connect to my work's VPN that way I can RDP into my work computer. Once ...
3
votes
4answers
9k views

Cisco VPN client for WIndows 7 x64

Does anyone know what my options are for a Cisco compatible VPN client on Windows 7 x64? It doesnt look like the standard one is supported on x64 at all (let alone Windows 7) and the Cisco VPN ...
1
vote
1answer
4k views

network is not available even when cisco vpn client is connected. wrong route?

I'm using Vodafone 3G modem. I've disabled other network devices in the system (ethernet, wifi, wimax) turned off firewall and antivirus. cisco vpn client connects successfully but I still can not ...
0
votes
1answer
319 views

Cisco VPN Concepts - Connection Profiles and Group Policy

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they ...
0
votes
1answer
165 views

Cisco ASA 5505 in small office configuration

I have a small office network that currently consists of about 10 machines, a gigabit switch, and a router/firewall, in a fairly obvious configuration. I need to add a Cisco ASA 5505 to support a VPN ...
0
votes
2answers
859 views

Exposing the AnyConnect HTTPS service to outside network

We have a Cisco ASA 5505 with firmware ASA9.0(1) and ASDM 7.0(2). It is configured with a public ip address, and when trying to reach it from the outside by HTTPS for AnyConnect VPN, we get the ...
1
vote
2answers
574 views

Routing traffic to another internal network

OK, so here is the scenario. I have 4 Locations connected with an MPLS. I have installed an ASA at the primary location which is 10.20.1.0. Traffic is fine internally and to the world, however... I ...
0
votes
2answers
1k views

Cisco VPN client on Windows 7

I know you can no longer connect before login using Cisco VPN (version 5.0.07) on Win7 and Vista due to the change from GINA in XP to Credential Provider API. Does this also disable the ability of ...
0
votes
1answer
2k views

Cisco SSL VPN authenticating aginast AD via LDAP

I have an ASA 5520 and am trying to set up a remote access SSL VPN authenticating against AD using LDAP. Between these two guides: ...
1
vote
1answer
320 views

Connect ADSL modem SMC7904WBRA-N to CISCO RV082

I have a SMC7904WBRA-N ADSL modem/router that connects to the internet with a static IP given by the provider. I've received a RV082 to create a VPN connection which is having problems to connect to ...
1
vote
2answers
3k views

Random VPN Client unable to contact the security gateway

We are issuing new Win764bit Enterprise laptops with the Cisco VPN Client Version 5.0.0.07.0290 installed on it. We are importing a pcf file from a CD given to us by our security group into it before ...
0
votes
1answer
189 views

Cisco pix 515e vpn logs

How do i find list of users that logged into the cisco VPN during particular duration from the cli. i am looking for vpn logs for particular duration because my log server was crashed.
-1
votes
1answer
121 views

Cisco error 51 on OSX 10.7.4 [closed]

Cisco VPN client version 4.9.01.0290 does not work on OSX 10.7.4 but it works on 10.7.2. The issue is that x64 are not supported. I am not sure way it is working on another mac with OSX 10.7.2, which ...
1
vote
2answers
1k views

VPN Device behind router/firewall

ROUTER A: Peplink 310 serving as the gateway/router/firewall at one location. ROUTER B: Linksys RV082 serving as the gateway/router/firewall at another location. I want to VPN these two locations ...
3
votes
1answer
2k views

Cisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnet

I am connecting to a ASA5505 at from home to the head-office using L2TP VPN. Head-office then connects to a other-office via a site-to-site IPSEC tunnel. When in the head-office (192.168.100.0/24) I ...
1
vote
0answers
1k views

ASA 5505 unable to get Lan2Lan and L2TP VPN's working together

I am connecting a remote ASA to a central site with the following settings: Phase 1 IKE: Encryption: DES Authentication: MD5 DH: DH2 Phase 2: Encryption: DES Authentication: MD5 I was getting the ...
2
votes
2answers
719 views

View unknown IPsec pre-shared key

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it. IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not ...
2
votes
2answers
2k views

How can I prevent inside hosts from taking ISAKMP and IPSec NAT-T ports on 8.4 ASA5510?

I have configured a Remote Access VPN on my ASA5510 running 8.4 and enabled it on the outside interface. For some reason if an inside host uses a VPN client to connect through the firewall they end ...
1
vote
0answers
72 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
0answers
568 views

Connecting to a Cisco ASA 5510 with Win 7 VPN client

Is it possible to configure a Cisco ASA 5510 to accept a connection from Windows 7 with the built in VPN client software in Win7 ? I know this question has sorta-been asked before on SF but I'm ...
0
votes
2answers
4k views

Cisco ASA 5505 does not initiate site to site VPN?

I am using Cisco ASA 5505 to establish a site to site VPN tunnel. The problem is that, my ASA 5505 does not seem to initiate the negotiation but once the device on the other starts the negotiation ...
1
vote
0answers
640 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
0
votes
1answer
1k views

Problems directing traffic over our site-to-site VPN

We have two offices connected via Gateway-Gateway VPN DC1[192.168.0.101]---RV082(A)[192.168.0.1]---[VPN]---RV082(B)[192.168.3.1]---pfSense[192.168.3.100]---DC2[192.168.1.2] DC2 is able to connect ...
2
votes
3answers
3k views

Cisco VPN Client Behind ASA 5505

I'm trying to get connected to another ASA via Cisco VPN Client. I am behind an ASA 5505 myself and I am tryihng to VPN to a 5510. I get the message: Secure VPN Connection terminated locally by the ...
0
votes
1answer
348 views

share one vpn connection through windows rras with other clients

I'm having a Cisco VPN connection to access our branch office. Since several people using the VPN I'm planing to install the VPN client on one of our server and share it through RRAS to save the ...
0
votes
1answer
457 views

cisco vpn and on demand routing

We need to connect to a partner via a Cisco VPN from one of our internal servers. This server is already configured for demand dial routing to a different partner, using windows RRAS. The partner ...
0
votes
1answer
375 views

Problems with network routing

Could you help, please? I have two network interfaces: 1) Physical interface (12) 2) Virtual VPN interface (39) Without VPN connection I have access to my local network (for example: 192.168.160.35) ...
1
vote
1answer
114 views

Multi domain wildcard cert on IIS only works when I'm connected via VPN

I have an IIS 7.5 server which, in order to access via Remote Desktop, I have to connect to Cisco VPN It has several with several sites on it e.g. site1 bindings: www.domain1.com, domain1.com ...
0
votes
1answer
3k views

Cisco VPN Packet Tracer

I'm not that good with VPN and cisco, and I wanted to create some VPN on Packet Tracert 5.3 so I made some basic schema Computer1 (IP:192.168.0.11) ROUTER1 (IP:192.168.0.1) (IP:10.0.0.1) Router2 ...
1
vote
2answers
4k views

Cisco VPN Client dropping connection

Using Windows XP and Cisco VPN client version 5.0.4.xxx to connect to a remote customer site. We are able to establish the connection and start an RDP session, but within 1-2 minutes the connection ...
2
votes
1answer
10k views

How can I forward ALL traffic over a site-to-site VPN on Cisco ASA?

I currently have two Cisco ASA 5100 routers. They are at different physical sites and are configured with a site-to-site VPN which is active and working. I can communicate with the subnets on either ...
1
vote
1answer
2k views

How can I stop openconnect from changing /etc/resolv.conf?

When I run openconnect (with the default vpnc script) it changes /etc/resolv.conf and it really shouldn't do that. I am just using the VPN for a few specific host not for a full Internet connection.
1
vote
1answer
579 views

Replace a Cisco VPN IPSec concentrator with an Ubuntu-box

Is it possible to replace a Cisco VPN IPSec concentrator with Ubuntu and for instance Strongswan? 1) Do Strongswan implement the same protocolls that Cisco uses? 2) Can we retrieve keys from the ...
1
vote
2answers
620 views

Configuring ASA to direct traffic on certain ports to specific outside interface

I have two outside interfaces, A and B. Let's say I want all traffic going in or out on port 1000 and 2000 to be directed to A, while all other traffic should go to B. So client is accessing a web ...
0
votes
1answer
298 views

Cisco AnyConnect VPN Client drops

I have the Cisco AnyConnect VPN client on a Server2003 std edition. The client will periodically drop and I have to go in and manually reconnect it. Is there a way with to restart the client and ...
0
votes
2answers
242 views

ASA5505 vs server 2008 R2

We have an asa5505 and I am trying to create an IPsec VPN connection so that our users are able to connect to network when they are out of the office. They will be connecting with the vpn connection ...
8
votes
2answers
19k views

Cisco AnyConnect SSL VPN client allows local LAN access, but not on additional multi-homed server

We have a machine for connecting via Cisco SSL VPN (\\speeder). i can ping our our speeder on 10.0.0.3: The routing table on \\speeder shows the multiple IP addresses we have assigned to it: ...
1
vote
1answer
141 views

ASA5505 VPN connection

We have a few people that travel (sales reps) and when they are out of the office they need to be able to VPN in. We have an ASA5505 with Security+ and unlimited users. This restricts us to 25 VPN ...
1
vote
4answers
8k views

Phase 2 Mismatch when connecting Windows 7 to ASA5505 VPN

I'm trying to stand up a new ASA5505 on our network (previously we used IPCop), and I'm having a bit of an issue getting the VPN to work. I ran through the IPSec VPN wizard in ASDM (6.3) on the ASA ...