Cisco EEM Script To Email On Successful SSH Login

Here's a quick EEM script I wrote to email you the information of someone who just SSH'd into the Router successfully. event manager environment _email_to [email protected] event manager environment _email_server X.X.X.X event manager environment _email_from [email protected] event manager applet email event syslog pattern "SEC_LOGIN-5-LOGIN_SUCCESS" action 1.0 cli command "enable" action 2.0 cli command "show users" …

Continue reading "Cisco EEM Script To Email On Successful SSH Login"

How To Fix IPSec Anti Replay Errors On Cisco IOS and IOS XE

I'm sure you've all logged into a VPN Router once or twice and seen this syslog: %IOSXE-3-PLATFORM: R0/0: cpp_cp: QFP:0.0 Thread:000 TS: %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle X, src_addr x.x.x.x, dest_addr y.y.y.y, SPI 0x0 Here is everything you need to know regarding the feature, the causes of the syslog, and the solutions …

Continue reading "How To Fix IPSec Anti Replay Errors On Cisco IOS and IOS XE"

How To Configure IP SLA with DF-BIT Set and 9K MTU Payload On Cisco IOS XE

Here are instructions on how to configure an IP SLA to ping with an IP MTU of 9K and the don't fragment (DF-BIT) set. I used a CSR1000V (IOS XE) running Fuji. This also works on regular IOS. First configure the IP SLA: ip sla 1 icmp-echo <dest IP> source-interface <source int> request-data-size 8964 !vrf …

Continue reading "How To Configure IP SLA with DF-BIT Set and 9K MTU Payload On Cisco IOS XE"

Cisco EEM Script to Email On Successful Anyconnect Login Of Router

Here is an EEM script that will email you information about a user who just logged into the Router via anyconnect event manager environment _email_to [email protected] manager environment _email_server X.X.X.Xevent manager environment _email_from [email protected] manager applet anyconnectemailevent syslog pattern "SSLVPN-5-LOGIN_AUTH_PASSED"action 1.0 cli command "enable"action 2.0 cli command "show webvpn session context all"action 8.0 mail server …

Continue reading "Cisco EEM Script to Email On Successful Anyconnect Login Of Router"

How to Enable the SSH CLIENT on a CISCO ASA

Here is a method how to SSH FROM a Cisco ASA over to any other device. Basically the SSH client has always been there, but required a secret menu. ASA# debug menu ssh 1 192.168.1.20 admin P@ss1234 The authenticity of host '192.168.1.20 (192.168.1.20)' can't be established. RSA key fingerprint is (SHA256). Are you sure you …

Continue reading "How to Enable the SSH CLIENT on a CISCO ASA"