How To Fix IPSec Anti Replay Errors On Cisco IOS and IOS XE

I'm sure you've all logged into a VPN Router once or twice and seen this syslog: %IOSXE-3-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:000 TS: %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle X, src_addr x.x.x.x, dest_addr y.y.y.y, SPI 0x0 Here is everything you need to know regarding the feature, the causes of the syslog, and the solutions …

Continue reading "How To Fix IPSec Anti Replay Errors On Cisco IOS and IOS XE"

How To Configure IP SLA with DF-BIT Set and 9K MTU Payload On Cisco IOS XE

Here are instructions on how to configure an IP SLA to ping with an IP MTU of 9K and the don't fragment (DF-BIT) set. I used a CSR1000V (IOS XE) running Fuji. This also works on regular IOS. First configure the IP SLA: ip sla 1 icmp-echo <dest IP> source-interface <source int> request-data-size 8964 !vrf …

Continue reading "How To Configure IP SLA with DF-BIT Set and 9K MTU Payload On Cisco IOS XE"

Cisco EEM Script to Email On Successful Anyconnect Login Of Router

Here is an EEM script that will email you information about a user who just logged into the Router via anyconnect event manager environment _email_to [email protected] manager environment _email_server X.X.X.Xevent manager environment _email_from [email protected] manager applet anyconnectemailevent syslog pattern "SSLVPN-5-LOGIN_AUTH_PASSED"action 1.0 cli command "enable"action 2.0 cli command "show webvpn session context all"action 8.0 mail server …

Continue reading "Cisco EEM Script to Email On Successful Anyconnect Login Of Router"

How to Enable the SSH CLIENT on a CISCO ASA

Here is a method how to SSH FROM a Cisco ASA over to any other device. Basically the SSH client has always been there, but required a secret menu. ASA# debug menu ssh 1 192.168.1.20 admin P@ss1234 The authenticity of host '192.168.1.20 (192.168.1.20)' can't be established. RSA key fingerprint is (SHA256). Are you sure you …

Continue reading "How to Enable the SSH CLIENT on a CISCO ASA"

Dell H310 MINI Flash to IT Mode for FreeNAS!

Here is the procedure to flash your Dell H310 mini to IT mode so you can use it as a FreeNAS HBA. Please note I did NOT come up with this method, am just re-sharing the content as it's been disappearing. For the original PDF see here: https://mega.nz/#!0wphwQIQ!QC2th7vPOsha5U0Um_8jHieas78KTSb1NcvSJPHZOEs Add the H310 MINI to your ServerBoot …

Continue reading "Dell H310 MINI Flash to IT Mode for FreeNAS!"