Tricks: How to debug a specific IPSec VPN Tunnel on Cisco.

Let’s say you’ve got a router with well over 100 IPSec VPN peers, and you’ve got this one tunnel that just won’t form correctly. Your not sure why and want nothing more than to debug the IPSec process for this one peer but you know if you debug the isakmp or ipsec process your going … Continue reading Tricks: How to debug a specific IPSec VPN Tunnel on Cisco.

IOS 11 Tip. “Turning Off” your Bluetooth or WiFi from Control Panel doesnt really turns it OFF

BAD NEWS: In IOS 11, turning off BLUETOOTH and WIFI doesnt really turn it off in the background. It just disconnects you from your connected bluetooth peers (or wireless networks)   The GOOD NEWS is, there is still away to totally TURN OFF your Bluetooth (and WIFI) to save power. You can do this from … Continue reading IOS 11 Tip. “Turning Off” your Bluetooth or WiFi from Control Panel doesnt really turns it OFF

How to Clear IPSec VPN Remote Peer on Cisco IOS

The following command clears the crypto sessions for a remote IKE peer. You can use context sensitive help ?to find other options. This command will also reset encap/decap counters on the show crytpo ipsec sa peer <PEER_IP_ADDRESS>  output Syntax clear crypto session remote IP_ADDRESS Example: clear crypto session remote 1.1.1.1

Useful Cisco Site-to-Site VPN Phase 1 and 2 Status Troubleshooting Commands

One way is to display it with the specific peer ip. Check Phase 1 Tunnel ASA#show crypto isakmp sa detail | b [peer IP add] Check Phase 2 Tunnel ASA#show crypto ipsec sa peer [peer IP add] Display the PSK ASA#more system:running-config | b tunnel-group [peer IP add] Display Uptime, etc. ASA#sh vpn-sessiondb detail l2l … Continue reading Useful Cisco Site-to-Site VPN Phase 1 and 2 Status Troubleshooting Commands

Tricks: Unable to access Sonicwall Management Portal? ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Most modern web browser no longer support RC4 encrytion as it is officially declared unsecured by IETF memo RFC7465 published on February 2015. Thus if RC4-Only encryption is enabled in SonicOS, it would block access to the Firewall Management Portal and will display "err_ssl_version_or_cipher_mismatch" error on the browser. Google Chrome and Firefox were among the first ones … Continue reading Tricks: Unable to access Sonicwall Management Portal? ERR_SSL_VERSION_OR_CIPHER_MISMATCH

DNS resolution over IPsec/SSL VPN on Fortigate

Description This article provides basic troubleshooting to follow when you are not able to access hostname over IPSec VPN tunnel or SSLVPN connection Solution   If you are not able to access resources across VPN tunnel by hostname, check following steps: (1)  Make sure to set DNS server properly when configuring SSL or IPsec VPN.  … Continue reading DNS resolution over IPsec/SSL VPN on Fortigate

Tricks: Steps to Fix the Cisco VPN 412 Error

Cisco VPN Error 412 for Legacy VPN Client v5.0.0.07   Reason 412. The remote peer is no longer responding". Means that the software VPN Client detected that the VPN server is not responding anymore and deleted the connection. It can be anything from IPSEC traffic being blocked by your upstream device, NAT Issues or simply misconfigured VPN Settings: Once … Continue reading Tricks: Steps to Fix the Cisco VPN 412 Error

Tricks: 5 handy and simple tools in Network troubleshooting

Sweep Ping. If you want to check all the devices on the LAN Network by doing a sweeping ping to all the IPs in a given /2 subnet. for /L %a in (1,1,254) do @ping -n 1 192.168.1.%a|find "TTL" Just replace the 192.168.1 with your first three octets. 2. DIsplay your machines Routing Table using … Continue reading Tricks: 5 handy and simple tools in Network troubleshooting

Tricks: Cisco VPN on Windows 8.1 or Windows 10 – Reason 442: Failed to enable Virtual Adapter

Problem: Error when connecting to VPN Error Message: Reason 442: Failed to enable Virtual Adapter If you receive this error on Windows 8.1 or Windows 10 while trying to connect with the Cisco VPN Client then the solution is a simple registry fix. To fix: Click Start and type regedit in the Search field and hit enter. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CVirtA Find the String … Continue reading Tricks: Cisco VPN on Windows 8.1 or Windows 10 – Reason 442: Failed to enable Virtual Adapter

Tools: Flow Trace in Fortigate

The flow trace feature in the FortiGate units allows you to trace to flow of a packet through the firewall you are consoled to. It allows you to see if the packet is being denied for some reason or being allowed by a particular policy. You can also see what NAT rule and routing is … Continue reading Tools: Flow Trace in Fortigate