Ever noticed when you issue a show running-config on a ASA to look up the VPN tunnel pre shared key and it appears as a “*”? Well here’s how to find out what the key is! more system:running-config This will…
Can’t beat free can yeah? I never knew there were that many free Cisco tools out there! I stumbled upon Brad’s site and he’s got a hefty list! I’m bookmarking this on my site. http://www.bradreese.com/cisco-tools.htm This is my personal favourite…
Problem: Troubleshooting vpn slowness and packet retransmits could be a puzzling task, especially when it’s over an IPsec tunnel. Last week I had the opportunity to troubleshoot a problem with slow website loading times on a webserver across the link….
Today I ran into a weird scenario where a Linux system’s NIC would set itself to 100Mb half duplex regardless whether the device and NIC was manually configured to operate at full duplex. After strolling through Cisco’s website Troubleshooting Cisco…
If you are having issues routing your traffic within the inside interface, or hair-pining your traffic, chances are you need to enable the “same-security-traffic permit intra-interface” command. Take a look at the picture below which explains this problem: Basically when…
After analyzing the situation I have identified several key problems. 1. System Availability – Systems fail frequently due to hardware failures, DoS, and application failures. 2. Collocation is far and administration requires frequent visits 3. Mini tower servers consume space…
Today I was assigned a task to find out and explain a certain network anomaly we are experiencing in our network. The mission started out to be a bandwidth monitoring task against a specific router. This router however was owned…
I think I should be stepping up my security practices. Here’s an article that I came across summarized all the things one should know about Layer 2 security practices on Cisco switches. http://www.networkworld.com/community/node/30682
Today, I got a chance to setup some bandwidth limiting on our Cisco ASA Firewall. The goal was to choke the speed of traffic going to our backup server to 250Mb/s. As our backup traffic goes through a firewall here’s…
ICMP packets are not stateful, how does the ASA handle them by default? Internet Control Message Protocol (ICMP) pings and traceroute on the PIX Firewall are handled differently based on the version of PIX and ASA code. Inbound ICMP through…