Posted on in Networking
If you see an error like the one below in your Cisco ASA log files, check with the other end and make sure your transform-set matches.
QM FSM error (P2 struct &0xd7fed708, mess id 0xcc86fb64)!
The QM FSM error message usually relates to a configuration mismatch. Although checking the crypto …
Posted on in Networking
In most VPN setups, each VPN user is given unique login credentials. Very rarely, you might run into a situation where a group of individuals is going to be sharing a set of credentials. For example, you might assign VPN credentials to another company for temporary access to part of …
Posted on in Networking
I saw this error message on a Cisco ASA 5540 today:
%ASA-3-210005: LU allocate connection failed
According to Cisco, this error means the standby unit was not able to create a new connection for stateful failover. The recommendation is to verify that the system has enough RAM.
OK...
# show memory …Posted on in Networking
When setting up a Cisco ASA or PIX to send logs to a remote syslog server, you need to specify which facility to use. This can cause a bit of disconnect since the syslog server configuration uses names and the logging facility command in the Cisco Adaptive Security Appliance Software …
Posted on in Networking
I could blame it on the late hour, but the truth of the matter is that I'm just a bonehead.
I'm currently installing a new Cisco ASA 5520 to replace an old Cisco PIX. This new device is going to use <acronym title="Secure SHell">SSH</acronym> and TACACS+ to …
Posted on in Networking
By default Point-to-Point Tunneling Protocol (PPTP) will now work properly through a Cisco Adaptive Security Appliance (ASA) firewall or it's forerunner the Cisco <acronym title="Private Internet EXchange">PIX</acronym>.
Prior to PIX software version 6.3, allowing PPTP to work through a PIX was a painful procedure involving static …
