Unable to SSH to ASA

We had an issue in SSH to Cisco ASA firewall that was recently purchased and setup in network. While troubleshooting further, we could see some error…

Traffic between ASA interfaces of same security level

Error: Deny inbound UDP from 192.168.109.77 to 8.8.8.8/53 due to DNS query This problem occurs when you have configured 2 or more interfaces of Cisco ASA…

Cisco ASA cannot ping any hosts on outside

Out of the box Cisco ASA firewall doesn’t permit ICMP traffic, that means the firewall permits ping traffic out but it won’t let the reply traffic to come inside. The…

Convert CAPWAP Cisco 1852I Access Point to Mobility Express

Pre-requisites: Cisco 1850 series access point must not join any existing controller in the network. If so, disconnect or isolate the AP from joining any controller…

Cisco ASA ASDM in Windows 10

This error occurred in Windows 10 computer while trying to connect Cisco ASA 5506-x via ASDM. Error: ASDM did not get a response from the ASA in…

Cisco ASA as DHCP Server for Guest Network

This is one of the most common deployment where you want Cisco ASA to lease IP address for your wireless Guests. We have a Windows…

How to block specific MAC address in Cisco Switch

(config)# mac address-table static 0349.1245.95ca vlan 192 drop just repeat with as many VLANs that you wanted to deny access for the specific MAC address

Create CSR and Install certificate in Cisco ASA Firewall

Generate CSR via Cisco ASA CLI Commands 1. Before generating a CSR request, you must create a private key (config)# crypto key generate rsa label…

Cisco ASA AnyConnect Configuration and Troubleshooting

1.Create Network Objects (config)# object network office-subnet subnet 172.20.100.0 255.255.255.0 (config)# object network anyconnect-subnet subnet 192.168.210.0 255.255.255.0 2.Create DHCP Pool for Anyconnect client (config)# ip…

Static bidirectional NAT on Cisco ASA firewall

In this configuration, 192.168.100.255 is an SMTP Server that we would like to publish on internet with public IP address 221.200.200.51 and open port tcp/25.  STATIC NAT: …