Cisco Router – Configure Site to Site IPSEC VPN
KB ID 0000933 Problem I’ve done thousands of firewall VPN’s but not many that terminate on Cisco Routers. It’s been a few years since I did one, and then I think I was a wuss and used the SDM. So when I was asked to do one last week thankfully I had the configs ready to go. I’m going to use the IP addresses above, and my tunnel will use the following settings; Encryption: AES. Hashing: SHA. Diffie Hellman:...
Cisco IOS – Setup Remote Telnet/SSH Management
KB ID 000093 Problem Having the ability to remotely administer network devices, means I don’t have to get my lazy carcass out of my chair and start fishing console cables out of my bag, also it saves on shoe leather, and travelling time. Solution Cisco Router / Switch – Setup Telnet Access These days people frown at Telnet. It’s an insecure protocol so your password is sent in clear text over the wire, and can be...
Cisco Router – CBAC and Zone Based Firewall Setup
KB ID 0000937 Problem IOS 11.2 gave us CBAC, and IOS 12.4(6)T gave us the Zone Based Firewall. You can still use either, (providing you are running the correct IOS, or in the case of version 15 and upwards, added the correct license, ‘securityK9’). For older IOS versions usually you want the advipservices version of the IOS). Solution Run the following command to see if you have the correct license installed....
VPN Error – ‘CRYPTO-4-RECVD_PKT_NOT_IPSEC’
KB ID 0000936 Problem While setting up a simple site to site to site VPN, I was unable to get ISAKMP phase 1 to establish. When I had a look on the device at the far end. I saw this error logged in the console, every time I tried to bring up the tunnel. *Mar 1 00:21:42.811: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec’d packet not an IPSEC packet. (ip) vrf/dest_addr= /192.168.2.3, src_addr= 192.168.1.2, prot= 1 Solution After about 40...
Cisco – Error opening tftp://255.255.255.255/cisconet.cfg
KB ID 0001099 Problem A friend was rolling out some PC’s for a client and wanted me to give him a network with the same subnet etc so he could build everything on the bench. I grabbed a router and set it up for DHCP, and to NAT all traffic for him, but annoyingly it kept doing this; %Error opening tftp://255.255.255.255/cisconet.cfg (timed out) %SYS-4-CONFIG_RESOLVE_FAILIURE: System config parse from...