cisco

ProblemYou want to install HTTPS certificate for the Cisco FirePower Management Centre (FMC) SolutionI already have an Internal CA certificate created with OpenSSL. You only need two commands to create one for you. #Generate private key openssl genrsa -des3 -out internalCA.key 2048 #Generate

In this blog post, I will show you how to send and visualize Cisco ASA syslog in Splunk. Splunk is used to search and analyse the data/logs generated from various devices. As you can see below the syslog generated from the ASA are

IntroductionThis blog post describes how to upgrade Cisco Catalyst C9300 Series Switch using Install mode. The example shows the upgrade procedure for a C9300-48P switch upgrading from 16.6.3 to 16.12.4. Please note that devices running IOS-XE starting from 16.9.

Introduction This blog post describes how to upgrade Cisco Catalyst 3850 Series Stack Switches using Install mode. The example shows the upgrade procedure for 2 x stack switches upgrading from 16.6.3 to 16.6.8 There are minor differences between the Install

ProblemWhen attempting to copy file via FTP to a Cisco Switch you see the following error cisco-3850#copy ftp flash Address or name of remote host [10.10.10.10]? 10.10.10.10 Source filename [cat3k_caa-universalk9.16.09.05.SPA.bin]? Destination

What are VPN filters?VPN Filters consist of rules that determine whether to allow or reject tunneled data packets that come through the ASA, based on criteria such as source address, destination address, and protocol. You can configure ACLs in order to permit or

Cisco ISE  Upgrade Readiness Tool (URT) helps detect and fix any data upgrade issues before you start the upgrade process. Most of the upgrade failures occur because of data upgrade/corruption issues. The URT is designed to validate the data before the upgrade to

I have been working with Nexus for a while and picked up some really useful commands. I use these commands on a daily basis and it saves me few minutes every now and then :) Please let me know in comments if you know any

Dynamic access policies (DAP), a new feature introduced in software release 8.0 code of the ASA, enable you to configure authorization that addresses the dynamics of VPN environments. You create a dynamic access policy by setting a collection of access control attributes that

There are thousands of commands available on Cisco ASA. I found some of the commands very useful when troubleshooting. 1. Removing a tunnel-grouptunnel-group 1.1.1.1 type ipsec-l2l tunnel-group 1.1.1.1 ipsec-attributes ikev1 pre-shared-key lksdjflksd565glmfb ASA (config)# clear configure tunnel-group 1.

Cisco Virtual Internet Routing Lab (VIRL) is a multi-purpose network virtualization platform that provides an easy way to build, configure, and test new or existing network topologies with an intuitive user interface. VIRL 2 is not yet released for personal use, however, you can

If you are looking for a MFA solution for Cisco AnyConnect then there is a good chance that you have heard of Duo and Azure AD. In this blog post I will guide you through the configuration steps required to set up Azure MFA

There are many articles out there about ICMP and PING. This article solely focuses on ICMP traffic passing through Adaptive Security Appliance. With the default configurations ASA will allow a host to ping the interface which is connected to. However, ping from an internal

I recently came across a situation where I needed to check if a frame is received and forwarded correctly on a Nexus 9K. There are multiple ways we can achieve this but I found ELAM (Embedded Logic Analyzer Module) capture is very powerful and