Learning, Sharing, Creating
IPsec is a framework of open standards that provides data confidentiality, data integrity, and data authentication among participating peers. It provides these security services at the IP layer; it uses…
Digital certificates as an authentication method for IPSec VPNs is becoming increasingly popular for both remote access and site-to-site deployments. The use of digital certificates requires some form of PKI…
Pre-shared keys and digital certificates are two primary authentication methods in IKE that can be used in the context of IPSec VPN deployments. Digital certificates provide a means to digitally…
Juniper SRX support both Route-based and Policy-based VPN, which can be used in different scenarios based on your environments and requirements. Difference between them (KB15745) With policy-based VPN tunnels, a…
There was a task to change IPSec authentication method from Pre-share key to PKI Certification based. It used on SRX240H and SRX1400 firewalls. This post records the steps and troubleshooting…
Symptoms: Worked on IPSec VPN Certificate for whole morning to try to import a certificate, finally gave up to ask support from Verisign. I did this many times and had…
Symptom: Recently, I were troubleshooting a IPSec VPN using Certificate issue. One IPSec VPN router got rebooted then IPSec tunnel was not able to be re-build. It tested fine with…
1. Checkpoint configuration a. Set up Checkpoint Gateway IPv4 address as the peer address showing in the cisco router. b. Create a new Interoperable Device for Cisco Router c. ISAKMP…
1. Topology a. Rack is from IOU v5. This lab will use seven routers to complete whole DMVPN configuration and test. b. network topology. It is drew from gliffy website…
ASA1# sh ver Cisco Adaptive Security Appliance Software Version 8.4(2) Compiled on Wed 15-Jun-11 18:17 by buildersSystem image file is “Unknown, monitor mode tftp booted image”Config file at boot was…
1. Clear VPN Configuration： clear configure crypto map VPN_AAAA 2. Debug and show commands: Enable logging: ciscoasa#terminal monitorciscoasa(config)# logging buffer-size 1048576ciscoasa(config)# logging buffered 7ciscoasa(config)# logging monitor 7ciscoasa(config)# debug crypto condition…
Cisco VPN Lab Series: Cisco VPN LAB 1 : Simple Easy VPN Example between Routers and Comparison with DMVPN Cisco VPN LAB 2 : IPSec VPN Example Between Two ASA…