Had an issue with a user that was failing to log into the VPN from remote. Couldn’t initially figure it out while at home while troubleshooting the authentication. So here’s how to test authentication from the Cisco ASA CLI.
Read More Test Cisco ASA VPN AuthenticationI set up a Cisco router to send an email whenever a VPN user connected. I did this for accounting purposes before I moved to RADIUS. I’ll put this up here because someone else may be interested in this for their own use. Step 1: Environment Variable Setup I like to configure variables to use…
Read More Cisco IOS EEM: Send Email on VPN ConnectionI needed to setup notification to be sent via email when a circuit went down and failed over to a backup circuit on a Cisco Router 2921. Here’s what I did. Create IP SLA I create my IP SLA to monitor ICMP of the internet… router(config)#ip sla 1 router(config)#icmp-echo 8.8.8.8 source-interface GigabitEthernet0/0 router(config)#ip sla schedule…
Read More Cisco EEM Applet – Send Email Notification on Internet Circuit FailureA quick note on factory resetting Cisco PIX 501 devices. In enable mode: pix501# config t pix501(config)# configure factory-default
Read More How To Factory Reset a Cisco PIX 501Just a quick note to myself on debugging VPN connectivity; you can specify a peer, user, etc. as a condition to the crypto debug. Here’s how I did it from the CLI: ciscoasa# debug crypto condition peer 1.2.3.4 ciscoasa# debug crypto isakmp 255 ciscoasa# debug crypto ipsec 255 ciscoasa# term mon This will allow you…
Read More Cisco ASA Debug a Specific VPN TunnelI came across a nice little tool while searching the other day. This tool, called YAPS (Yet Another Port Scanner) is portable and works well (tested on Windows 7 x64 and Server 2008 R2). You can grab YAPS from SteelBytes here: http://www.steelbytes.com/?mid=19 A little information from the site about YAPS: Fast TCP/IP port scanner. Supports…
Read More ToolTip: Portable Windows Port ScannerHere’s a gallery of some of the old photos (2004-2008) of Valkyrie Internet Services (Valkyrie Wireless) network and tower equipment I had the privilege of working on. Definitely a fun time in the early years of my technical work, and definitely the most fun.
Read More Valkyrie Wireless EquipmentCame across a great step-by-step article on migrating from standard vSwitch to vNetwork Distributed Switch in VMware vSphere 4.1.x. Zod Chen did a great write-up on his site dashVue: http://www.dashvue.com/2011/04/migrating-to-vnetwork-distributed-switch/
Read More Migrating to vNetwork Distributed SwitchOne of the Cisco Small Business Smart Switches, this easy-to-install, high-speed small-business switch offers many of the same quality of service (QoS) and security features found in Cisco’s premium managed switches, but without the complexity. The intuitive, easy-to-use web interface allows you to fully utilize the switch’s spectrum of features. The SLM2048 bundles traffic-shaping capabilities…
Read More How to factory reset Cisco Small Business SLM2048I added this to my edge router to block DNSChanger trojan. I created a new ACL (101) and then applied it to my fast ethernet interface (Fa0/0) outbound. This blocks outound domain requests (DNS) to the netblock specified for each rule. You have to convert subnet masks to wildcard netmasks. You can do this with…
Read More Cisco IOS ACL for DNSChanger