Advanced Search
Search Results
436 total results found
Installing From The Vault
(2022-02-01) Problem # sudo dnf (operation) Error: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: No URLs in mirrorlist # Solution CentOS-8 is end of life. If you want to use the last released version of everything that'...
Unifi Controller
Installing Unifi Controller on Docker on CentOS 8 (or probably any docker installation at this point but anyways) Create: #!/bin/bash docker create \ --name=unifi-controller \ -e PUID=1000 \ -e PGID=1000 \ -e MEM_LIMIT=1024M `#optional` \ -p 3478:347...
Creating Custom Kernel RPMs
(Note: may not be relevant to CentOS-4, I stuck this here because the dates (2008) kinda lined up?) Creating custom CentOS kernel RPMs Source I need to build a custom kernel A...
Debug Site to Site VPN
(2013 March 8) Useful commands for a v9.x VPN debug Phase 1: you want to see MM_ACTIVE in the State ciscoasa# show crypto isakmp sa IKEv1 SAs: Active SA: 1 Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey) T...
Port Forward
Problem Port-forward firewall outside, port 5000 to inside IP 192.168.1.100, port 8080. Solution conf t static (inside,outside) tcp interface 5000 192.168.1.100 8080 netmask 255.255.255.255 0 0 access-list outside_acl extended permit tcp any host $OUTSIDEIP eq...
Changing A Remote Gateway IP
(2013-12-05) Problem You have an ASA running 8.2(something). You have a l2l VPN with a remote peer. That remote peer is changing its IP address. Solution Here's what I did: create a new name object for the new peer IP create a new tunnel-group definition with...
Site to Site VPN
(2013-11-12) Problem Site to site VPN with an ASA running 8.2. Solution The local network is 192.168.50.0/24; the network on the far side of the VPN is 172.17.64.0/24. ! This ACL controls access to the NAT-exemption rule access-list VPN extended permit ip 192....
Site to Site VPN with NAT
Problem Setting up a site-to-site VPN using your shiny ASA running 8.2. Your peer has a bunch of remote networks for you to connect to, and wants you to NAT all traffic from your end to a particular source IP. Note that your partner will not be able to connect...
ssh_exchange_identification
(2015-06-05) Seems like a terribly late date to still be messing around with clunkers like these, but oh well Problem ASA 5505 factory default, can't ssh in, ssh client gets error ssh_exchange_identification: Connection closed by remote host Solution Generate...
Site to Site VPN
(2013 March 08) Example VPN Configuration ! Enable ISAKMP crypto isakmp enable outside ! ! Object definitions object network net-local subnet 192.168.101.0 255.255.255.0 ! object network net-remote subnet 192.168.102.0 255.255.255.0 ! ! This access list pe...
Site to Site VPN
(2013-05-08) Sorry, no detailed notes (too busy right now) but this seems to work. If you read my notes for other versions of ASA you should be able to figure out what is going on. crypto isakmp enable outside object network net-local subnet 10.179.8.0 255.2...
Can't Run ASDM On New ASA
(2013-07-05) Problem Brand-new out-of-box ASA (5512 in my case) won't permit the ASDM to run. Error is: Unable to load resource: https://192.168.1.1/admin/public/startup.jnlp Solution What is probably happening is the SSL Cipher settings on your browser are n...
ASDM on Windows 10
(2015-10-01) Problem ASDM 7.1(3) on Windows 10. Solution Install 32-bit and 64-bit Java-JRE. I installed jre-8u60-windows-i586 and jre-8u60-windows-x64. Go to the ASDM web page and click the Install ASDM Launcher and let it install. In C: Program Files (x86)C...
DHCP Reservations
(2021-02-25) DHCP Reservations This feature is now supported on ASA in version 9.13(1) and later Example: Magnus-5506-Desk# sh run dhcpd dhcpd dns 192.168.1.22 dhcpd domain cisco.com dhcpd option 4 ip 172.18.124.1 ! dhcpd address 192.168.100.100-192.168.100.20...
Port Forward
(2017-02-28) Problem I have firewall with public IP 1.2.3.4. I need to expose ssh the private server 192.168.1.1 on IP 1.2.3.5 to the internet peer at 1.9.1.1/ Solution conf t object SERVER-NAT host 192.168.1.1 object INTERNETPEER host 1.9.1.1 access-list in...
Same-interface Hairpin
(2017-05-31) Problem I have a server on my dmz at 192.168.1.10, with a public IP of 1.1.1.1. I need another server on the 192.168.1.0/24 network to be able to access .10 through its public IP. Solution object network LAN subnet 192.168.1.0 255.255.255.0 objec...
Show Dropped Packets
(2019-09-20) Show Dropped Packets ALBERT# capture TEST type asp-drop all real-time […] ^C ALBERT# show capture TEST trace | in 10.7.3.1 9: 10:36:38.550340 10.7.3.1 > 10.1.1.11: icmp: echo request Drop-reason: (acl-drop) Flow is denied by configured ru...
Self-Signed Certificates
(2018-01-10) Problem I have a new ASA and I need some self-signed certificates. Solution (this is all conf t ) Setup stuff: hostname myasa domain-name cisco.com clock set 00:00:00 1 Jan 2010 clock set timezone EST -5 Generate the default rsa keypair: crypto...