Comments for The Cruft Of My Brain http://www.thecruftofmybrain.com Purging my mental dust bunnies Tue, 09 Mar 2010 14:55:19 +0000 http://wordpress.org/?v=2.9.2 hourly 1 Comment on Cisco AnyConnect Essentials by JB http://www.thecruftofmybrain.com/2009/06/02/cisco-anyconnect-essentials/comment-page-1/#comment-16125 JB Tue, 09 Mar 2010 14:55:19 +0000 http://www.thecruftofmybrain.com/?p=412#comment-16125 It was the activation key. After switching to the one that was for 8.2 only we can now connect more than two clients using the regular anyconnect software. It was the activation key. After switching to the one that was for 8.2 only we can now connect more than two clients using the regular anyconnect software.

]]> Comment on Cisco AnyConnect Essentials by JB http://www.thecruftofmybrain.com/2009/06/02/cisco-anyconnect-essentials/comment-page-1/#comment-16107 JB Mon, 08 Mar 2010 22:27:48 +0000 http://www.thecruftofmybrain.com/?p=412#comment-16107 actually I think it may be the activation key. We got two keys after buying the license. One was for all versions and one was for 8.2. I applied the one for all versions because we were running 8.0 at the time. We have since upgraded to 8.2 but didn't use the 8.2 only key. I think that is needed for the AC Essentials. We'll see tomorrow after I reboot the ASA tonight. actually I think it may be the activation key. We got two keys after buying the license. One was for all versions and one was for 8.2. I applied the one for all versions because we were running 8.0 at the time. We have since upgraded to 8.2 but didn’t use the 8.2 only key. I think that is needed for the AC Essentials. We’ll see tomorrow after I reboot the ASA tonight.

]]> Comment on Cisco AnyConnect Essentials by JB http://www.thecruftofmybrain.com/2009/06/02/cisco-anyconnect-essentials/comment-page-1/#comment-16106 JB Mon, 08 Mar 2010 22:14:18 +0000 http://www.thecruftofmybrain.com/?p=412#comment-16106 Hey quick question for those that got the essentials working for them. Is there separate software that is needed to use the essentials license? We bought the license and applied it but we're still getting the message saying that we're over our two SSL licenses. I've tried searching for AC Essentials specific software but came up empty. also if anyone has a link to a configuration example (CLI or ASDM doesn't matter) that would be great. I haven't found much online yet. TIA Hey quick question for those that got the essentials working for them. Is there separate software that is needed to use the essentials license? We bought the license and applied it but we’re still getting the message saying that we’re over our two SSL licenses. I’ve tried searching for AC Essentials specific software but came up empty.

also if anyone has a link to a configuration example (CLI or ASDM doesn’t matter) that would be great. I haven’t found much online yet.

TIA

]]> Comment on Cisco AnyConnect Essentials by scott http://www.thecruftofmybrain.com/2009/06/02/cisco-anyconnect-essentials/comment-page-1/#comment-15982 scott Mon, 01 Mar 2010 21:20:44 +0000 http://www.thecruftofmybrain.com/?p=412#comment-15982 Mark, that's exactly right. The basic AnyConnect client falls under this license. I was stunned too but Cisco's been moving towards phasing out a client based IPSEC VPN solution. It's still a long way from happening but I think they recognized that charging a lot for the AnyConnect client wasn't going to fly. Mark, that’s exactly right. The basic AnyConnect client falls under this license. I was stunned too but Cisco’s been moving towards phasing out a client based IPSEC VPN solution. It’s still a long way from happening but I think they recognized that charging a lot for the AnyConnect client wasn’t going to fly.

]]> Comment on Cisco AnyConnect Essentials by Mark Baker http://www.thecruftofmybrain.com/2009/06/02/cisco-anyconnect-essentials/comment-page-1/#comment-15981 Mark Baker Mon, 01 Mar 2010 21:11:36 +0000 http://www.thecruftofmybrain.com/?p=412#comment-15981 Hey all, I'm a little confused by this whole anyconnect-essentials license thing. The cost seems so low, I'm having a hard time figuring out exactly what it is that it allows on my device. Basically, we are attempting to replace the IPSec VPN with the SSL VPN on Windows 7 64-Bit clients. Is that what the anyconnect-essentials license does? I am just looking for confirmation, I do not want, nor do I need, the clientless VPN or anything like that. Thanks, Mark Hey all,

I’m a little confused by this whole anyconnect-essentials license thing. The cost seems so low, I’m having a hard time figuring out exactly what it is that it allows on my device. Basically, we are attempting to replace the IPSec VPN with the SSL VPN on Windows 7 64-Bit clients. Is that what the anyconnect-essentials license does? I am just looking for confirmation, I do not want, nor do I need, the clientless VPN or anything like that.

Thanks,

Mark

]]> Comment on Checkpoint doesn’t support Proxy-Arp??? by TabTwo http://www.thecruftofmybrain.com/2010/02/03/checkpoint-doesnt-support-proxy-arp/comment-page-1/#comment-15586 TabTwo Thu, 04 Feb 2010 15:36:55 +0000 http://www.thecruftofmybrain.com/?p=484#comment-15586 There are two ways ... automatic NAT in the Nodeobjet creates a arp entry or if you dont like this you can create them by hand and merge them in the Firewallobject. There are two ways … automatic NAT in the Nodeobjet creates a arp entry or if you dont like this you can create them by hand and merge them in the Firewallobject.

]]> Comment on Cisco ISR G2’s on the way by scott http://www.thecruftofmybrain.com/2009/10/14/cisco-isr-g2s-on-the-way/comment-page-1/#comment-15453 scott Wed, 27 Jan 2010 12:17:42 +0000 http://www.thecruftofmybrain.com/?p=464#comment-15453 Steve, I know about that and perhaps they're trying to have some cost savings. I've also seen devices that can do both master or slave role. There aren't many though so I have to wonder if the chip or the programming is expensive. Either way, you'd think it would be something Cisco could have figured out. They've got people way smarter than me working on these things though! Steve, I know about that and perhaps they’re trying to have some cost savings. I’ve also seen devices that can do both master or slave role. There aren’t many though so I have to wonder if the chip or the programming is expensive. Either way, you’d think it would be something Cisco could have figured out. They’ve got people way smarter than me working on these things though!

]]> Comment on Cisco ISR G2’s on the way by Steve http://www.thecruftofmybrain.com/2009/10/14/cisco-isr-g2s-on-the-way/comment-page-1/#comment-15441 Steve Tue, 26 Jan 2010 20:22:57 +0000 http://www.thecruftofmybrain.com/?p=464#comment-15441 Regarding "I’m not sure of the wisdom of using that over the already present regular USB ports", unless I'm misunderstanding, the difference is that the CURRENT USB ports are HOST ports, which accept USB devices (memory, specifically), whereas a console port would be a slave port, which would appear as a device to a host PC.. USB, unlike old fashioned serial or even firewire, have distinct "master / slave" roles. Does that make sense, or am I missing something? Regarding “I’m not sure of the wisdom of using that over the already present regular USB ports”, unless I’m misunderstanding, the difference is that the CURRENT USB ports are HOST ports, which accept USB devices (memory, specifically), whereas a console port would be a slave port, which would appear as a device to a host PC..

USB, unlike old fashioned serial or even firewire, have distinct “master / slave” roles.

Does that make sense, or am I missing something?

]]> Comment on Cisco IPS doesn’t like ICMP redirects by Different variations of redirects, 301, 302, 303, 304 etc http://www.thecruftofmybrain.com/2010/01/05/cisco-ips-doesnt-like-icmp-redirects/comment-page-1/#comment-15081 Different variations of redirects, 301, 302, 303, 304 etc Thu, 07 Jan 2010 17:09:10 +0000 http://www.thecruftofmybrain.com/?p=476#comment-15081 [...] Cisco IPS doesn't like ICMP redirects Categories : SEO 301 [...] [...] Cisco IPS doesn't like ICMP redirects Categories : SEO 301 [...]

]]> Comment on Cisco AnyConnect Essentials by DT http://www.thecruftofmybrain.com/2009/06/02/cisco-anyconnect-essentials/comment-page-1/#comment-13755 DT Wed, 02 Dec 2009 19:11:10 +0000 http://www.thecruftofmybrain.com/?p=412#comment-13755 My company has a number of VPN endpoints all using the traditional Cisco IPSEC client - works great but there is no 64bit path forward unless you want to pay for an aftermarket client or go open source. One of the open source ones blue screened my Win 7 notebook on the first try so I'll not be going there. I just installed an ASA 5510 with the AnyConnect Essentials and upgraded my 5505 to the Essentials for less than $100. Working great so far with Win 7 32 & 64 bit testing and also Macintosh. Still works great with the traditional client as well. I'll be testing on an Ubuntu notebook before the end of the week. One thing I like is that I can upgrade my clients by putting the new version into the firmware of the ASA instead of visiting machines or hoping users can do it themselves. Also helps out with initial installations. My company has a number of VPN endpoints all using the traditional Cisco IPSEC client – works great but there is no 64bit path forward unless you want to pay for an aftermarket client or go open source. One of the open source ones blue screened my Win 7 notebook on the first try so I’ll not be going there.

I just installed an ASA 5510 with the AnyConnect Essentials and upgraded my 5505 to the Essentials for less than $100. Working great so far with Win 7 32 & 64 bit testing and also Macintosh. Still works great with the traditional client as well. I’ll be testing on an Ubuntu notebook before the end of the week.

One thing I like is that I can upgrade my clients by putting the new version into the firmware of the ASA instead of visiting machines or hoping users can do it themselves. Also helps out with initial installations.

]]>