ASA - www.m00nie.com

www.m00nie.com

Sign in Subscribe

ASA

A collection of 9 posts

Disable ASA TCP State tracking (make my ASA a router)

640-553 CCNA Security

Disable ASA TCP State tracking (make my ASA a router)

Recently had to use this (useful?) feature to help a customer with an asymmetric traffic flow via an ASA. The ASA would only see the out bound traffic from a host with the return traffic going via an alternative path not visible to the ASA.This simple diagram is an

Grab multiple OIDs via SNMPwalk

Grab multiple OIDs via SNMPwalk

SNMPWALK is a great too for grabbing SNMP oject identifier values (OIDs). To see how to install it see this post here. Mostly I use it for checking various single OID values but sometimes is can be useful to grab more than one value. SNMPwalk itself doesn't allow

Cisco pipe options and some regex examples

Cisco pipe options and some regex examples

Just a quick post about using the pipe (|) command on Cisco devices to help format the output of any command. Add the pipe to any show command then ? can show the available options. Below is from a 6500. 6509#show run | ? append Append redirected output to URL (URLs supporting append

Cacti graph template for Cisco ASA VPN sessions (IPSEC, SSL, WEBVPN + Total)

Cacti graph template for Cisco ASA VPN sessions (IPSEC, SSL, WEBVPN + Total)

Exported from Cacti 0.8.7e (including all dependencies) and made using a Cisco 5520 ASA running 8.4(1). OIDs used * IPSEC VPN count - .1.3.6.1.4.1.9.9.171.1.3.1.1.0 * SSL VPN count (Anyconnect) - .1.3.6.1.4.

Install & configure nfdump with nfsen on Ubuntu server 10.04

Install & configure nfdump with nfsen on Ubuntu server 10.04

This was done using Ubuntu server 10.04 although everything is compiled from source so the commands should be very similar on any linux box. There are also example configs for Cisco ASA 8.2 near the bottom of the post. I was looking for a netflow collector/analyser that

Pix & ASA Packet capturing via cli

Pix & ASA Packet capturing via cli

Quite a useful feature on Cisco Pix & ASAs is the ability to capture packets and then analyze it with wireshark if needed. The following config sets up the capture for all traffic between two hosts 1.1.1.137 and 10.25.0.143 on the outside interface of

Cisco command aliases (shortcuts)

Cisco command aliases (shortcuts)

I find that (mis)typing the same commands over and over gets boring very quickly. Creating aliases for other commands on your Cisco equipment and save time and after a while become something you wont be able to live without ;) There are already some default ones like "p"

Cisco ASA list all SNMP OIDs

Cisco ASA list all SNMP OIDs

I don't find the cisco SNMP documentation too intuitive(slow) to navigate at the moment so a nice little command to help with ASAs and finding interesting OIDs. It does seem to be one of the "hidden" commands for some reason...Should work with all ASAs

Test AAA setup using Cisco ASA

Test AAA setup using Cisco ASA

A nice little command to test the AAA server will authenticate your users correctly (also works with PIX and FWSM). The sytax is like this: m00nies_ASA# test aaa-server [authentication|authorization] <aaa_server_group> [host <name>|<host_ip>] username <user> password <