The following command can be used to start Cisco ASDM from command-line on Windows (without ASDM installation) or UNIX. Java must be locally installed:
javaws https://CISCO_ASA_IP/admin/public/asdm.jnlp
Zen, life, computers, programming, firewalls
The following command can be used to start Cisco ASDM from command-line on Windows (without ASDM installation) or UNIX. Java must be locally installed:
javaws https://CISCO_ASA_IP/admin/public/asdm.jnlp
This one-liner takes Cisco ASA config, checks for “tunnel-group … remote-access” and generates the following two lines:
tunnel-group GROUPNAME webvpn-attributes group-url https://CISCO_ASA_FW_FQDN/GROUPNAME enable
for i in `fgrep tunnel-group CISCO_ASA.conf | fgrep remote-access | awk '{print $2}'` do echo "tunnel-group $i webvpn-attributes" echo " group-url https://CISCO_ASA_FW_FQDN/$i enable" done
Sometimes you do not need a detailed log-analysis but several simple one-liners that you can adjust without too much thinking how it works, what you did last time, etc. The examples below are absolutely NOT optimal, but rather modular for easy line-editing.
If UPnP devices do not see each other, most likely there are two problems:
Multicasts are not forwarded
Simple Service Discovery Protocol (SSDP) uses multicast IPv4 address 239.255.255.250. The local switches must be able to forward such traffic. On a Cisco switch you run the following command to allow that:
Firewall blocks UPnP traffic
Related ports: UDP-1900 and TCP-2869
Solaris 11: root/solaris
Cyclades console servers (e.g. ACS4): root/tslinux
Avocent ACS5000 console servers: root/avocent
Avocent ACS6000 console servers: admin/avocent or root/linux
Cisco VPN3000: admin/admin
Cisco ASA: empty
Netscreen: netscreen/netscreen
Avocent/Cyclades PM IPDU: admin/pm8 root/linux
By default ASA does not decrease the TTL field, hence is not visible in traceroute output. This is how to change this behaviour :
The result:
Continue reading “ASA and traceroute”
For IOS:
7609(config)#int gigabitEthernet 1/1
7609(config-if)#mtu ?
<1500-9216> MTU size in bytes
7609(config-if)#mtu 9216
Verify in Native IOS:
For CatOS:
Verify in CatOS
Literature:
Cisco manual
How to enable, disable displaying by page and change the number of lines by page in various OS’es