About Whoops

Whoops · 02-09-2022

We have 2 ISP BGP peers (1.1.1.1, AS111; 2.2.2.2, AS222), ASA 5515-X (9.12.4.18), own public network (192.0.2.0/24, AS333).We need to have SSL VPN (and s2s too) be configured on this device, but on our IP-addresses, not ISP. Config be like:router bgp...

Whoops · 04-20-2021

HelloWe have an ASA5510 v9.1.(7)32 at branch with configured IKEv2 site-to-site VPN to Head office.All traffic goes through VPN.ISP give an ip-address by DHCP with 4 gateways (yes, multiple), that randomly changes. Some of them reachable via ICMP, so...

Whoops · 04-05-2022

This is old bug:https://quickview.cloudapps.cisco.com/quickview/bug/CSCuz98722Workaround: Remove and add the user again. (not username ...)

Whoops · 04-04-2022

Thanks. It helps in bgp with 2 ISPs.

Whoops · 02-09-2022

So... I can't use ASA as border and VPN gateway on my IP together?

Whoops · 09-03-2021

There is only 2 solutions:1. Ask ISP for using only one BRAS for that branch.2. Connect link to ISP via switch/etc with applied acl, blocking gray-nets traffic.

Whoops · 09-03-2021

IPSec data plane support for the Suite-B transforms is only available on the following ASR1000 platforms: ASR1001-X, ASR1001-HX, ASR1002-X, ASR1002-HX, and ASR1006 or ASR1013 with an ESP-100 or ESP-200 module. If Suite-B transforms are configured on ...

Member Since	‎01-13-2020 06:49 AM
Date Last Visited	‎06-22-2022 12:08 AM
Posts	8
Total Helpful Votes Received	5

User Statistics

User Activity

SSL VPN via BGP

How to block outgoing traffic when VPN goes down?

Re: ASA RA VPN user information using SNMP

Re: ASA asymmetric routing dual ISP BGP RIPE addressing

Re: SSL VPN via BGP

Re: How to block outgoing traffic when VPN goes down?

Re: IPSec P2P tunnel between CISCO ASR1000 to SRX1500 not coming up