Install and use ASDM in  a Virtual Cisco ASA
Nov17

Install and use ASDM in a Virtual Cisco ASA

KB ID 0000052 Problem You have already created a Virtual ASA, now you want to web manage it. Solution Notes: Software Download Links Fiddler Fiddler Script Related Articles, References, Credits, or External Links NA

Read More
Deploy Dual Virtual ASA Firewalls In Active/Standby Failover
Nov17

Deploy Dual Virtual ASA Firewalls In Active/Standby Failover

KB ID 0000053 Problem Now you have created your Virtual ASA platform you want to deploy 2 of them in failover configuration. Solution Notes: Software To Download Qemu with ASA Dynamips WinPcap Sample Batch File @echo off ECHO Telnet to 127.0.0.1 on port 1234 to access ASA Console ECHO ——————————————————- ECHO * * * * * * *DO NOT...

Read More

Building a Virtual Cisco ASA

KB ID 0000051 Problem You would like to create a virtual Cisco ASA platform in a virtualized environment for training and or testing. Solution Notes: Software To Download Qemu with ASA Dynamips WinPcap Sample Batch File @echo off ECHO Telnet to 127.0.0.1 on port 1234 to access ASA Console ECHO ——————————————————- ECHO * * * * *...

Read More
GNS3 Cannot Connect Network Interfaces when running on VMware vSphere
Nov17

GNS3 Cannot Connect Network Interfaces when running on VMware vSphere

KB ID 0000671  Problem I have plenty of real ASA firewalls to play with, but it’s getting round to re-certification time, so for ease I thought I’d run up a Virtual ASA on my vSphere 5 box just for testing and breaking. However no matter what type of Virtual Network adaptor I used (vmxnet3, e1000, etc) I could not connect to the virtual firewall. Solution 1. Firstly make sure you actually have an IP address in the correct...

Read More
Cisco Catalyst Password Recovery / Reset
Nov17

Cisco Catalyst Password Recovery / Reset

KB ID 0000496  Problem The title is a bit of a misnomer, we are not going to recover the password, we are simply going to change the password to one we know. Solution Note: This procedure works on models, 2900, 2940, 2950, 2955, 3500XL, and 3550. Before you start connect the the device with a console cable and terminal emulation software, the procedure is the same as the one I’ve outlined here. 1. Power the switch off >press...

Read More
Cisco Catalyst Switches – Set a Management IP and Allow Telnet and Web Management
Nov17

Cisco Catalyst Switches – Set a Management IP and Allow Telnet and Web Management

KB ID 0000614  Problem If you want to manage your Cisco Catalyst switch it’s not always practical to plug a console cable in to change its settings or monitor what it is doing. Putting an IP address on it and enabling remote management via Telnet or from your web browser is a better alternative, particularly if you have a lot of switches. Solution Enable Telnet Management on Cisco Catalyst Switch 1. Connect to the Switch using a...

Read More
Cisco IOS – Configuring Switch to Switch MACSEC
Nov17

Cisco IOS – Configuring Switch to Switch MACSEC

KB ID 0001000  Problem My colleague had to set this up on the test bench today, and it looked infinitely more interesting that what I was doing, so I grabbed my console cable, and offered to ‘help’. This was done on two Cisco Catalyst 3560-X switches, each with a 10G Service Module (C3KX-SM-10G), and 1Gb SFP modules (Note: Not 10Gb ones, this will become important later). Solution 1. First hurdle was, when we tried to add...

Read More
Cisco Catalyst – Upgrading ‘Stacked’ Switches
Nov17

Cisco Catalyst – Upgrading ‘Stacked’ Switches

KB ID 0001002 Problem The following procedure was carried out on two Cisco Catalyst 3750 switches. Solution 1. We can see (above) that we have two switches, but if your connected remotely, best make sure. Petes-Stack#show switch Switch/Stack Mac Address : 0018.7347.a000 H/W Current Switch# Role Mac Address Priority Version State...

Read More
Configuring Multiple Cisco Switch Ports at the Same Time
Nov17

Configuring Multiple Cisco Switch Ports at the Same Time

KB ID 0001009  Problem If you have the same configuration that needs to be placed on multiple ports, then doing each one individually can be time consuming. To save time use the ‘interface range’ command. Be aware this command is only available on devices running IOS versions newer than 12.0(7)XE, Release 12.1 E, and Release 12.1(5)T. Solution 1. From configure terminal mode, I want to apply the same configuration to...

Read More
Cisco Catalyst – ‘Daughtercard inserted in this switch may not have been manufactured by Cisco’
Nov17

Cisco Catalyst – ‘Daughtercard inserted in this switch may not have been manufactured by Cisco’

KB ID 0001018  Problem In a newly deployed switch, the MACSEC link refused to establish, when I consoled in I was greeted with this; Dec 06 01:30:07.023: %ILET-1-DEVICE_AUTHENTICATION_FAIL: The FRULink SM Daughtercard inserted in this switch may not have been manufactured by Cisco or with Cisco’s authorization. If your use of this product is the cause of a support issue, Cisco may deny operation of the product, support under...

Read More