Office 365: Migrating To Exchange Online
Apr01

Office 365: Migrating To Exchange Online

KB ID 0001418 Problem This is Part-One of a migration from ‘on-premise’ Microsoft Exchange, to Office 365 (Exchange Online). I’m using my spare ‘test domain’ (.co.uk). And I’m using the 5 user E3 Office 365 subscription that the good folk at Microsoft let me have, as part of my MVP benefits. Note: I’m using Exchange 2016, with a ‘full-hybrid’ migration into Office 365. Step 1:...

Read More
Microsoft Azure To Cisco ISR Router Site to Site VPN
Jul19

Microsoft Azure To Cisco ISR Router Site to Site VPN

KB ID 0001220  Problem Last week I was having problems getting a VPN up from a client’s Cisco ASA into Azure. This was because the Azure estate was using ‘route-based’ or a ‘dynamic routing VPN’. See the following article; Azure to Cisco VPN – ‘Failed to allocate PSH from platform’ So the firewall was a non-starter, but Cisco ISR routers are supported, and they can handle virtual tunnel interfaces...

Read More
Azure to Cisco VPN – ‘Failed to allocate PSH from platform’
Jul12

Azure to Cisco VPN – ‘Failed to allocate PSH from platform’

KB ID 0001219 Problem It’s been a week for strange VPN shenanigans with Cisco and Azure. I was liaising with an Azure service provider for a customer this week, and trying to get a VPN up from a Cisco ASA in one of our data centres in the UK. This is what we were seeing; And I could see the same error in the debugs; Decrypted packet:Data: 616 bytes IKEv2-PROTO-1: Failed to allocate PSH from platform IKEv2-PROTO-1: IKEv2-PROTO-5:...

Read More
Cisco ASA IKEv2  – ‘Failed To Allocate Memory’
Jul09

Cisco ASA IKEv2 – ‘Failed To Allocate Memory’

KB ID 0001218  Problem This week I was trying to get a VPN tunnel up for a client. They wanted a tunnel from their Cisco ASA into Microsoft Azure. Normally I’d use IKEv1 (because I know how to troubleshoot it!) But the guys running the site in Azure were using policy routing, which needs IKEv2. So I converted from IKEv2 to IKEv2. As I said I’m used to debugging IKEv1, but not IKEv2, so I was struggling to make sense of...

Read More