• Finally, I passed CCIE R&S written exam.
    It is the time to start preparing for CCIE Lab.
    As you probably aware, Cisco is doing huge change for examination after 23
  • monitor capture UDPCAP interface <interface vlan1234> both
    monitor capture UDPCAP match ipv4 protocol udp any any
    monitor capture UDPCAP start

    --generate traffic...

  • R(config)#aaa new-model
    R(config)#aaa authentication login ciscocp_vpn_xauth_ml_1 local
    R(config)#aaa authorization network ciscocp_vpn_group_ml_1 local

    crypto isakmp profile

  • I've configured a VPN (IPSec) between 2 sites on Cisco 881-K9.

    The server "A", which have the address 192.168.0.X must be reachable on port 3389 from public network.


  • R1(config)#  crypto isakmp policy 1
    R1(config-isakmp)# encr 3des
    R1(config-isakmp)# hash sha

  • On Watchguard:

    1. Create VPN -> Branch Office Gateway:

    Put PSK, Main Mode, Nat traversal, Dead Per Detection
    Create Transform

  • Issue:

    %ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of files (2) allowed has been written to <

  • WPA2(AES-CCMP) on Cisco 877w
    - service-module wlan-ap 0 session
    - dot11 ssid tks-887
    vlan 1 ...

  • Config

    class-map match-any VOICE
      match protocol rtp
      match protocol rtcp
      match protocol sip
  • ERR: Hardware Client connection rejected!   Network Extension Mode is not allowed for this group!
    SOL: group-policy cvpn attributes
    nem enable

  • track 11 ip sla 1 reachability
    ip sla schedule 2 life forever start-time now

  • ERR: Connection terminated for peer vpnuser.  Reason: Peer Terminate  Remote Proxy N/A, Local Proxy N/A (save passord)
    SOL: add save-password to server

  • clock timezone Melbour 10
     clock summer-time Sydney date Mar 30 2003 3:00 Oct 26 2003 2:00
     ntp clock-period 17178393
     ntp update-calendar
     ntp server

  • no ip dhcp use vrf connected
    ip dhcp excluded-address
    ip dhcp excluded-address
    ip dhcp excluded-address


  • - service-module wlan-ap 0 session
    - dot11 ssid tks-887
    vlan 1
    authentication open 
    authentication key-management wpa
    wpa-psk ascii 7

  • interface Dialer1 (or FastEthernet0)
     ip nat outside
    interface Vlan 1
     ip nat

Google AdSence

AUST IT - Computer help out of hours, when you need it most.

Find out why we do it for less.


AUST IT will help you resolve any technical support issues you are facing onsite or remotely via remote desktop 24/7. More...


Reservoir, Melbourne,
3073, VIC, Australia

Phone: 0422 348 882

This email address is being protected from spambots. You need JavaScript enabled to view it.

Sydney: 0481 837 077


Join us in social networks to be in touch.


Complete the form below, and we'll send you our emails with all the latest AUST IT news.