When a customer calls with a problem or request I often see a chance to investigate a technology, learn something new or apply random skills to find a creative solution.

This time is about an ASA, customer noticed too much traffic on the Internet facing interface. Syslog, Netflow, bandwidth monitoring and any other …

ASA doesn't boot:

1Launching BootLoader...
2Default configuration file contains 1 entry.
3Searching / for images to boot.
4Loading /asa825-k8.bin... Booting...
5
6Press ESC to interrupt boot:
7
8Use BREAK or ESC to interrupt boot.
9Use SPACE to begin boot immediately.

We're now in rommon:

1rommon #0>

Check …

Office 365 is widely used between many customers. Some of them happen to manage all the Internet connections through a Cisco ASA, not the fancy ASA-X with Firepower, just the plain old 5510.

I was asked to allow Office 365 traffic, looks easy huh?

Step 1: know your enemy

After some Google-fu I found Microsoft kindly …

IP addressing design is a topic that follows every networker from the basic to the architect level of experience.

Usually we just pick a random range from RFC1918 and address all the devices.

But then VPN happens, and with VPN comes the risk of overlapping.

How do we fix overlapping? With NAT of course!

In this post …

Today a customer called to change the IP address of a L2L VPN peer on his Cisco ASA 8.3(2)4.

The task can be divided in 3 steps:

1. Get the VPN password. It should be written somewhere in the network documentation, as stated by rule 7, but you know, password sometimes just get lost.

2. Find and update crypto map

   asa# sh …

Sometimes it can be useful to copy files to and from a Cisco ASA Firewall via SCP.

To enable SCP just type:

ssh scopy enable

Forgot the PSK of a VPN on a Cisco ASA? With this command you can see all the passwords in cleartext:

more system:running-configuration

A customer called today for a strange issue on their Cisco ASA. They have 60Mbit internet connection and a big event is filling the bandwidth. The session graph is what they are worried about:

<img
  loading="lazy"
  decoding="async" …</picture></figure></a></p>