ITAdminGuide.com

Configuration guides for IT Administrators

Cisco ASA

How to setup Cisco ASA in High Availability Active/Standby Failover

July 17, 2017

⏱︎

Read time:

Cisco, Cisco ASA

In a highly critical environment, we strongly recommend to setup Cisco ASAs in high availability mode. This way, if the Active ASA unit fails, the Standby unit takes over the role and becomes Active. Before we proceed, you need to ensure that following pre-requisites are met Both Cisco ASA units must be an identical hardware…
Read More →: How to setup Cisco ASA in High Availability Active/Standby Failover
Apply and Activate Cisco ASA License

July 16, 2017

⏱︎

Read time:

Cisco, Cisco ASA

On every purchase of ASA firewall, Cisco ships product authorization key known as PAK in printed format along with delivery. The steps remain same irrespective of ASA license feature. 1.Login to Cisco registration portal – http://www.cisco.com/go/license and enter PAK key and ASA serial number, then you will get the license key by registered email immediately. Caution: When…
Read More →: Apply and Activate Cisco ASA License
Can’t ping ASA inside interface over IPSec VPN

July 15, 2017

⏱︎

Read time:

Cisco, Cisco ASA

Even though, IPSec VPN is successfully established between 2 ends of your network, you can’t ping ASA inside over IPSec VPN from the other end. Basically, you cannot remotely manage Cisco ASA through the VPN tunnel. You also noticed that inside interface is reachable from LAN. The problem is with manual NAT statement that overlaps…
Read More →: Can’t ping ASA inside interface over IPSec VPN
Configure IKEV1 Site to Site VPN between Cisco ASA and Paloalto Firewall

June 1, 2017

⏱︎

Read time:

Cisco, Cisco ASA, Firewall, Paloalto Firewall

In this guide, we are configuring IKEV1 VPN between Cisco ASA and Paloalto firewall. This is applicable to all models of Cisco and PA firewalls. Configure Cisco ASA: 1) Phase 1: IKE policy ciscoasa(config)# crypto ikev1 policy 10 ciscoasa(config-ikev1-policy)# authentication pre-share ciscoasa(config-ikev1-policy)# encryption 3des ciscoasa(config-ikev1-policy)# hash sha ciscoasa(config-ikev1-policy)# group 2 ciscoasa(config-ikev1-policy)# lifetime 86400 ciscoasa(config)# crypto…
Read More →: Configure IKEV1 Site to Site VPN between Cisco ASA and Paloalto Firewall
Cisco ASA Error – AnyConnect package on the secure gateway could not be located

February 16, 2017

⏱︎

Read time:

Cisco, Cisco ASA

You might be experiencing a similar issue while connecting through Cisco ASA AnyConnect to your remote network. Even though you have loaded the proper AnyConnect image to flash, reason for this problem is because Cisco ASA is unable to locate AnyConnect package in the device. In order to fix this issue, configure ASA WebVPN to locate AnyConnect…
Read More →: Cisco ASA Error – AnyConnect package on the secure gateway could not be located
Copy image to standby Cisco ASA

February 5, 2017

⏱︎

Read time:

Cisco, Cisco ASA

Copy IOS image to standby Cisco ASA unit, for example in order to copy asa942-6-smp-k8.bin from tftp server (10.10.10.10) to Standby ASA disk0, execute following command asa/pri/act#failover exec mate copy /noconfirm tftp://10.10.10.10/asa942-6-smp-k8.bin disk0:/asa942-6-smp-k8.bin Here is useful link to run commands on standby ASA Running Commands on Standby Cisco ASA
Read More →: Copy image to standby Cisco ASA
Running Commands on Standby Cisco ASA

February 5, 2017

⏱︎

Read time:

Cisco, Cisco ASA

In order to execute Cisco ASA commands on Standby unit, use failover exec as prefix. failover exec is used to execute commands on a specific unit in a failover pair, the syntax is failover exec {active | standby | mate} cmd active – means the command is executed on active ASA unit standby – means the…
Read More →: Running Commands on Standby Cisco ASA
Alternate to Cisco Client VPN for Windows 10

November 19, 2016

⏱︎

Read time:

Cisco, Cisco ASA

If you are looking for an alternate software for Cisco Client VPN software, here is the step by step guide to set it up.This worked for me in Windows 10 Pro 64 bit edition computer. Download Shrew VPN Client for Windows. In this guide I used 2.2.2 release. 2. Install the package and choose ‘Standard Edition’…
Read More →: Alternate to Cisco Client VPN for Windows 10
Packet Tracer Phase 9 Type:VPN Subtype:encrypt Result:DR

October 9, 2016

⏱︎

Read time:

Cisco, Cisco ASA

We have an issue of no traffic flow over IPSec VPN, however the VPN is successfully established between Cisco ASA firewalls in Site A and Site B. Using packet-tracer, we are trying to find out the path and status of an icmp packet leaving the firewall. For ICMP, you need to specify ICMP type (8)…
Read More →: Packet Tracer Phase 9 Type:VPN Subtype:encrypt Result:DR
Configure Cisco ASA Firepower Services for the first time

October 1, 2016

⏱︎

Read time:

Cisco, Cisco ASA

Before you proceed with configuration, ensure that Source FirePower (SFR) service is up and running on your ASA ASA# sh module Mod Card Type Model Serial No. —- ——————————————– —————— ———– 1 ASA 5506-X with SW, 8GE Data, 1GE Mgmt, AC ASA5506 JAD101600GX sfr FirePOWER Services Software Module ASA5506 JAD101600GX Mod MAC Address Range Hw…
Read More →: Configure Cisco ASA Firepower Services for the first time

Lucas Brey

I’m Lucas Brey, a travel blogger sharing practical guides, hidden gems, and honest tips from the road. Follow along for smart itineraries, great food finds, and stories worth bookmarking.

Tags