Tag Info

Hot answers tagged


You can login directly in enable mode if your privilege level allows it. I am running asa916-k8.bin on 5510 The command is aaa authorization exec LOCAL auto-enable Ravi L


I recently had this issue with only 1 of 2 SAs activating. I solved this by double checking sh run crypto map My ikev1 and ikev2 commands matched, but one side was misign crypto map WAN_map 1 set pfs After adding that command (substituting your actual crypto map name), and generating traffic from the initiator side, both SAs came up succesfully.


ASA 5506X not only by default masks SMTP banner, but also scrambles ehlo replies, like shown below, where XXXX are ASA inventions. They must have a fancy idea about security those who implemented this "feature". Anyway. I had no clue that the default filtering was on for ESMTP, as the graphical interfaces shows no rule and lowest security. ehlo ...

Only top voted, non community-wiki answers of a minimum length are eligible