Blog | learnitwithcifelli

learnITwithCifelli

CCIE Journey

Archive

Search

Deploying an ASA in Transparent Mode

"The What?" - In this blog I want to explore 1 of the 2 ASA modes, Transparent mode. In this mode the ASA is no longer in routed mode acting as a L3 routed hop. The ASA actually operates as a L2 bump on the wire. "The Why?" - A major benefit is that you can actually insert a transparent ASA into a network without having to modify IPs on other devices. This can be clutch if wanting to segregate and essentially split a vlan up. Some other benefits include simplicity of conf

Configuring & Verifying Dual Cloud & Dual Hub FlexVPN Failover Scenarios

"The What?" - I want to expand on some of the other FlexVPN related blogs shared earlier. This lab will be expanding from an earlier lab where I utilized a Dual Hub FlexVPN in a single cloud topology. For reference that post is here: Configuring & Verifying FlexVPN Redundancy with Dual Hub & Single Cloud "The Why?" - In this post I will be focusing on FlexVPN redundancy with dual hub & dual cloud. This configuration will be a tad different from the previous FlexVPN redunda

Configuring, Verifying, and Troubleshooting a Point-to-Point FlexVPN with PKI Authentication

In this post I want to demo/breakdown configuring a point-to-point FlexVPN that uses certificate authentication. This lab demo will use PKI VPN authentication between two directly connected peers by utilizing an IOS PKI that has been referenced in other blogs. We will also explore ways to verify it. Lastly, I will share how to understand some valuable debugs. I wont be covering IOS PKI in this post so to see more about understanding/configuring IOS PKI see: Configuring, Ve

Enabling ISE 3.0 ERS APIs

I want to walkthrough enabling the External RESTful Services (ERS) APIs in Cisco ISE 3.0 so that we can consume ISE APIs in later posts to do a variety of things to include endpoint creation/manipulation, network device creation, and many more tasks. Once we enable and configure ISE we will briefly go over the ISE Software Development Kit (SDK). A few important things to note: ISE ERS APIs use HTTPS protocol on port 9060 These APIs allow CRUD operations ERS is based on the H