Tag Info

Hot answers tagged

2

You can login directly in enable mode if your privilege level allows it. I am running asa916-k8.bin on 5510 The command is aaa authorization exec LOCAL auto-enable Ravi L


1

I recently had this issue with only 1 of 2 SAs activating. I solved this by double checking sh run crypto map My ikev1 and ikev2 commands matched, but one side was misign crypto map WAN_map 1 set pfs After adding that command (substituting your actual crypto map name), and generating traffic from the initiator side, both SAs came up succesfully.


1

ASA 5506X not only by default masks SMTP banner, but also scrambles ehlo replies, like shown below, where XXXX are ASA inventions. They must have a fancy idea about security those who implemented this "feature". Anyway. I had no clue that the default filtering was on for ESMTP, as the graphical interfaces shows no rule and lowest security. ehlo ...



Only top voted, non community-wiki answers of a minimum length are eligible