Configuration Example, Security

Configure IOS SSL VPN on IOS router

René Jorissen on February 11, 2010 4 Comments • Tags: #anyconnect #client #context #forwarding #ios #port #ssl #thin #vpn #webvpn

Yesterday I blogged about configuring a VPN client on an IOS router and today I blogged about importing PKCS12 certificates for WebVPN purposes. This follow up blog is about configuring the WebVPN functionality together with the AnyConnect client and port forwarding on an IOS router. I use the same setup as with the VPN client … Read More

Configuration Example, Security

Import PKCS12 certificate on IOS router

René Jorissen on February 11, 2010 7 Comments • Tags: #ca #certificate #crypto #import #ios #passphrase #pkcs12 #pki #router #tftp #trustpoint

Nowadays IOS routers can be configured with WebVPN (Clientless SSL VPN) functionalities. WebVPN allows a user to securely access resources on the corporate LAN from anywhere with an SSL-enabled Web browser. To secure the connection you should use a SSL certificate to encrypt all transferred data. There are different ways of creating and importing SSL … Read More

Configuration Example, Security

Configure VPN client on IOS router

René Jorissen on February 10, 2010 9 Comments • Tags: #access #cisco #client #configure #ios #remote #router #split #split-tunneling #tunneling #vpn

One way to remotely access a network is using the Cisco VPN client. Nowadays more and more implementations of SSL VPN are being done and Cisco stopped their development on their VPN client and pushes their Cisco AnyConnect client. Still the Cisco VPN client is often used to remotely gain access to a network. The … Read More

Configuration Example, Security

MAB and MDA in an IP Phone environment

René Jorissen on February 5, 2010 26 Comments • Tags: #5330 #authenticate #bypass #cdp #cisco-av-pair #device-traffic-classvoice #domain #host-mode #lldp #mab #mac #mda #mitel #multi-domain #multiple #phone #radius #vsa

I blogged before about the MAC Authentication Bypass (MAB) feature in network environments. MAC Authentication Bypass can be used to secure the wired network by verifying MAC addresses to a central database. By using a radius server, like Microsoft IAS or FreeRadius, you can also redirect verified MAC addresses to a specific VLAN. Lately I … Read More

Proxy, Security

eSafe license expires

René Jorissen on November 27, 2009 0 Comments • Tags: #base #esafe #evaluation #expires #filter #knowledge #license #registered #url

I just received the following interesting question: What happens if our eSafe license expires?……Because it expires this weekend!!!!!!!! Interesting question, because I never encountered such a situation. Normally the license is renewed in a timely fashion or a trial is stopped before the license expires. I searched the Knowledge Base from eSafe and found an … Read More

Proxy, Security

Citrix Terminal Server License Server problem

René Jorissen on November 27, 2009 1 Comment • Tags: #available #citrix #disconnected #license #mslicensing #problem #provide #registry #remote #server #session #terminal

One of our customers is using a Citrix NetScaler appliance for SSL VPN capabilities for remote users. I tried to start an application (RDP Client) through this SSL VPN solution, but I couldn’t succeed. I was able to login and I would see all the published applications, but when executing one, I received the following … Read More