Hot answers tagged

4

openssh refuses the key length less than 1024 bits starting 7.6. https://www.openssh.com/txt/release-7.6 If you use ubuntu, you can install openssh-client-ssh1, then use ssh1 command instead of ssh. sudo apt install openssh-client-ssh1


2

Only 2 "customer devices" are required, can be Cisco, Juniper, Arista, and any others which support both BGP and LACP, and support one of the supported fiber options documented at Outpost Network Requirements. Ask your account SA to file a "SpecReq" for an Outpost Specialist SA to answer your Outpost Networking questions, or you can ask ...


2

Is Inspect means this policy inspect as well ? my doubt? Inspect: When the action is set to Inspect, the Enterprise Firewall with Application Aware policy tracks the state of the flows and creates sessions. Since it maintains the state of the flows, the return traffic is allowed and there is no need to configure a separate policy for return traffic. • Pass: ...


2

ASA5550 was End Of Life in 2018, and End of Sale in 2013. DO NOT USE IT. IT IS NOT SECURE. Seriously. Get some solution that is actually still supported, such as PFSense with OpenVPN or Wireguard.


2

High Availability (most likely) Cisco ASAs are commonly recommended in pairs for HA (High Availability) in Active/Standby. This is due to their typically critical nature in the network. The decision for a single firewall is often the result of financial, design and risk considerations. I concur with @BrandonXavier, this adds an additional layer of ...


1

Q: "Populate a variable with the name of the interface when the description contains a certain word." A: For example - set_fact: result: "{{ ansible_facts.ansible_network_resources.interfaces| selectattr('description', 'search', pattern)| map(attribute='name')| list }}" ...


1

Like written at the end of the initial post, the problem was resolved by configuring the IP interface via SSH instead of via Web GUI The settings were exactly the same and simple (IP / GW / Hostname / Ports / Interface) I had assumed I did not have to do anything, since the Cisco support took several hours over many days to examine it.


1

Difference is the maximal value can be set between 2^32 and 2^64. With 32 bits, you can up to 4 294 967 295 octets (approximately 4.2 Go). With 64 bits, you can up to 18 446 744 073 709 552 000 octets (approximately 18,4 To). Example for speed (show 4.2 Go instead real value - like TenGigabitEthernet or more) or total traffic (restart from 0 when 4.2 Go as ...


1

Example of message is follow: 2021-10-13T14:41:10.866435-07:00 X 156613: X-Switch: .Oct 13 13:40:44 PST: %LINEPROTO-SW1-5-UPDOWN: Line protocol on Interface GigabitEthernet195/1/0/11, changed state to down Seems that PROGRAMNAME points to the number which is incremented by one with every message, in this specific case 156613: $template TmplAuth, "/var/...


1

I see nothing wrong with your configurations. You can use simulation mode when ping to determine what happened with ICMP packets.


1

(1) you need 1x "/64-IPv6-Network" per Ethernet-LAN-Interface => as Ron stated => otherwise, the "IPv6-ARP" called Neighbor-Solicitation can't work //forget about subnetting in ethernet-IPv6 //but remember /127 on ptp-links of course config-if)# ipv6 address 2001:550:xx:xx::/64 eui-64 (2) enable IPv6-Routing globally config)# ipv6 ...


1

I do not believe that you are missing anything in this regard. At least the webex.com zone is not signed as of this time (no DS exists for webex.com). I do not know if any other domain names (which could potentially be part of signed zones) are relevant to their actual video conferencing solution. cisco.com is also not signed, for what it's worth. As for why,...


1

Have spent few days after Debian 10 buster upgrade (full-upgrade) to Debian 11 Bullseye, so want to share the bonding issue solution. After Debian Linux upgrade, existing trunk configuration is not working anymore. There are breaking changes, referred as bugs: https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.html https://bugs....


Only top voted, non community-wiki answers of a minimum length are eligible