Upgrade Cisco WLC and Access Points to fix KRACK Attacks
816On Oct 16th 2017, 7 vulnerabilities affecting both WPA and WPA2 were made publicly available. Additional research also led to discovery of 3 additional vulnerabilities. Among these 10 vulnerabilities, only one CVE-2017-13082 may affect wireless infrastructure, the other nine vulnerabilities affect ..
Cisco UCS C220M4 Purple Screen – Could not start pcpu 1: TSC sync timed out
1237This happened today while setting up ESXi 6.5 on Cisco UCS C200 M4 Server. VMware crashed and throwing an error in the purple screen, Could not start pcpu 1; TSC sync timed out. If you come across similar situation, then try changing CPU settings in BIOS. It fixed the ESXi issue. Log in to BIOS […]
How to setup Cisco ASA in High Availability Active/Standby Failover
2129In a highly critical environment, we strongly recommend to setup Cisco ASAs in high availability mode. This way, if the Active ASA unit fails, the Standby unit takes over the role and becomes Active. Before we proceed, you need to ensure that following pre-requisites are met Both Cisco ASA units must ..
Apply and Activate Cisco ASA License
1480On every purchase of ASA firewall, Cisco ships product authorization key known as PAK in printed format along with delivery. The steps remain same irrespective of ASA license feature. 1.Login to Cisco registration portal – http://www.cisco.com/go/license and enter PAK key and ASA serial number, ..
Can’t ping ASA inside interface over IPSec VPN
1234Even though, IPSec VPN is successfully established between 2 ends of your network, you can’t ping ASA inside over IPSec VPN from the other end. Basically, you cannot remotely manage Cisco ASA through the VPN tunnel. You also noticed that inside interface is reachable from LAN. The problem is with ..
Reset Cisco Router Password Without Losing Configuration
985Step 1: Reload router. If you do not know the password, just perform hard reboot. Step 2: Wait for 10 seconds of startup and send a break signal to terminal If you are using PUTTY, right click on the top of PUTTY Window, and select Special Command > Break *Jan 22 06:36:23.990: %SYS-5-RELOAD: Reload ..
Configure IKEV1 Site to Site VPN between Cisco ASA and Paloalto Firewall
1689In this guide, we are configuring IKEV1 VPN between Cisco ASA and Paloalto firewall. This is applicable to all models of Cisco and PA firewalls. Configure Cisco ASA: 1) Phase 1: IKE policy ciscoasa(config)# crypto ikev1 policy 10 ciscoasa(config-ikev1-policy)# authentication pre-share ciscoasa(config-ikev1-policy)# ..
Backup Cisco Mobility Express Configuration
1384Here is the solution to backup Cisco Mobility Express Configuration. If you are backing up the controller, you do not need to backup each AP. If you are working on standalone model, you need to backup each and every AP individually and the steps remain same. 1.Configure tftp as the transfer mode used ..
Cisco ASA Error – AnyConnect package on the secure gateway could not be located
1798You might be experiencing a similar issue while connecting through Cisco ASA AnyConnect to your remote network. Even though you have loaded the proper AnyConnect image to flash, reason for this problem is because Cisco ASA is unable to locate AnyConnect package in the device. In order to fix this issue, ..
Copy image to standby Cisco ASA
1342Copy IOS image to standby Cisco ASA unit, for example in order to copy asa942-6-smp-k8.bin from tftp server (10.10.10.10) to Standby ASA disk0, execute following command asa/pri/act#failover exec mate copy /noconfirm tftp://10.10.10.10/asa942-6-smp-k8.bin disk0:/asa942-6-smp-k8.bin Here is useful ..