Cisco ACS 5.x and getting "enable" to work with TACACs+ on ASA
I had a really hard time finding the answer to this and went down some useless holes. The answer was pretty simple. Set the Max Privilege to 15.…
More vSphere and VT-d, some success but not for long
I made another attempt at using VT-d for my cameras by going with Zoneminder under Linux. This actually worked and seemed to work ok but I really dislike Zoneminder! I tried Motion and kMotion instead and the good news is it works...for longer. I'm still having problems…
vSphere and VT-d not so rosy
Actually, it works but with limitations. No shock there. It turns out the PV-149 CCTV capture card I'm trying to pass through presents each channel as a separate Video and Audio device. What that means is I end up with 8 PCI devices that need to be extended.…
Cisco ASA Standby device "copy TFTP" syntax
That's a mouthful. I've been having a hard time figuring out how to successfully transfer images to the Standby ASA's flash from the Active's CLI. Finally figured it out. Here's the syntax: failover exec standby copy /noconfirm tftp://{ip address}…
Anyconnect for iPhone???
It's now a month or so after the release of iOS4 and the Cisco Anyconnect Secure Mobile Client for iPhone is nowhere to be found. What's up Cisco??? I want my Anyconnect! And anyone believes they'll actually ship the Cius? HA!…
iPhone VPN and Cisco IOS, Part2
I previously posted about some luck I had getting IPSEC VPN to work from my iPhone to my IOS router/firewall. That post is now kind of useless because the source blog disappeared about a year ago. So, in order to make this useful again I'm posting my…
Cisco AnyConnect Essentials still crushing it
Seems my original post about the AnyConnect Essentials license is still quite popular. So why not capitalize on that! :) The license does work as advertised. It's a replacement for the IPSEC based client that Cisco seems to have stopped development on. I've been using it in…
Checkpoint doesn't support Proxy-Arp???
Say whaaaatttt???????? Ok, so you have a Checkpoint firewall with a whole lotta NATed addresses. The router won't find these NATed addresses though unless you go through a painful procedure to enable proxy-arp on the Checkpoint or you have to add static host entries to the router pointing…