Can ASA support multiple PPPoE?

Can ASA support multiple PPPoE configured on different interfaces?
If support, can it load-sharing the outgoing packet to different PPPoE connection?
Thanks!

Actually the PIXASA firewall does not support PPPoE since version 7.2 I believe. That is the official statement, all though I believe the commands are still there and functional. You could do it with a router.
Hope that helps

Similar Messages

Can ASA support multiple LDAP authenticate?

This document describes the use of LDAP authentication method:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008089149d.shtml
But we have multiple LDAP(windows 2003 AD), So can ASA support multiple LDAP authenticate?

Yes.
-Kureli

Can DRM support multiple currency ?

Can DRM support multiple currency ?

Hi,
DRM is a master data management tool - so if you have a currency dimension, then yes it would be easy to manage multiple currencies.
Can you expand on your question a bit?

Can ACS support multiple Active Directory Domains for 802.1x EAP-TLS?

Hi
I'm looking to implement ACS 5.2 using 802.1X, we have two seperate AD domains.
Now.. this is the tricky part...
A single switch will need to support both ADs, so if a machine in AD1 is connected, it will be authenticated to the ACS using AD1 and applied to VLAN1, while a machine that is in AD2 will be authenticated to AD2 and applied to VLAN 2.
I'm looking at machine authentication, not user authentication, so I assume that I will need to import two certs from each AD.
Can any expert please let me know if they think that this will be possible please??
Many thanks

Yes ACS can support multiple AD domains but you will have to configure one as your AD domain and the other as an LDAP database and this will work since you are planning to use eap-tls.
The question I have is which version of ACS are you using? If you are using ACS 5.x then you can setup and identity store sequence so if the user is not found you can move to the next store and this will prevent you from installing two certificates on every machine.
You can then setup an authorization rule for the seperate containers on where the workstations are located (this is assuming machine authentication is being used) for the AD database or the LDAP database and then assign the vlan based off that.
Thanks and I hope this helps!
Tarik Admani

Can X301 support multiple external monitors?

Hi,
I'm looking at buying a X301, but I'd like the ability to drive 2 external monitors at 1600x1200 (the native resolution of those devices). Does anyone know if the X301 can do that? If I need a specific external dock to do that, can someone point me towards that dock?
Any help would be appreciated!
Thanks,
-Jeff

the X301 have a display port and vga output supported natively on the actual machine, which can support one external monitor, you can then get Lenovo usb enhanced port replicator, which has another vga output, using that you can output two external monitor....
haven't tried it, since i don't have a X301, but theoretically it should work, maybe someone can confirm this for you, as the last thing you want is to purchase a machine and it turns out that it won't work in the way you hoped it can.
Regards,
Jin Li
May this year, be the year of 'DO'!
I am a volunteer, and not a paid staff of Lenovo or Microsoft

How can I copy multiple slides with a HP Scanjet 4050 to photoes using Maverick? HP apparently no longer supports this product for this OS.

How can I copy multiple slides with a HP Scanjet 4050 to photoes using Maverick? HP apparently no longer supports this product for OS Maverick.

VueScan
VueScan FAQ

OSB (11.1.1.7): Can OSB/Weblogic (11.1.1.7) support multiple PKIs (Public Key Infra-structure)

Hi All,
Would you be able to help me in understanding if OSB/Weblogic (11.1.1.7) can support multiple private key's in the domain to enable 2-SSL W/S calls ?
Solution walk-through :
A 3rd Party Web Service is only accessible via 2-way SSL http channel. To achieve this, OSB is required to use the private key which is issued by 3rd party. This private key and 3rd party root certificate (CA) need to be installed into OSB’s keystore which is based on Java Keystore format.
The private key (issued by 3rd Party) will be used by OSB for identity signature. This private key is bound to IP address of the OSB machine calling the 3rd Party web service. Also, 3rd Party root certificate (CA) will be used by OSB to verify the identity of 3rd Party web service.
Given the private key is used as the identity of the system and should be guarded closely by the target system, we believe this approach needs to be reviewed and assessed accordingly.
Limitations and drawbacks with the current solution :
1. The private key of OSB system is issued and controlled by an external application vendor.
2. OSB is enforced to use this private key and its signature algorithm for other external parties’ interactions. The current client certificate issued by 3rd Party is X509v3 certificate which uses RSA, with a 2048-bit key size, signed with a SHA-512 hash.
3. The SSL is self-signed, not signed by a publicly trusted cert provider (i.e. VeriSign)
4. Extra dependency on external vendor systems as the key provider. Currently, the keys are bound to server IP address; any changes to the production environment, (i.e. adding new nodes) will require a new key to be generated by 3rd Party system. In case 3rd Party is no more used in the future, the keys can no longer be generated.
Conclusion : OSB does not support multiple PKIs (Public Key Infra-structure) which is a mapping mechanism that OSB uses to provide its certificate for SSL connecitons to the server. Multiple private keys, require multiple PKIs which OSB does not handle.
So, do you agree that OSB/Welblofic (11.1.1.7) could not support multiple private key issued by more than one 3rd party vendor ?
Thanks,
Kunal Singh

Hi Kunal,
Although it is recommended to have 1 key pair for 1 identity store as it represents unique identity of your domain but you can:
import multiple key-pairs in your identity store
Configure PKI credential mapper to use reference of identity store consisting of multiple keys
When in your OSB project, you create Service Key provider(SKP) then it loads all the private keys present in identity store referred by PKI mapper. It will browse both the keys.
Depending on your requirement, you can choose different key pair for for different SKPs for "Client Authentication key" section(For SSL) and "Signature key" for DigiSign.
Please let me know if i understood your query correctly and above helps.
Regards,
Ankit

Can a single HID report descriptor support multiple touch screens with different sizes?

Hi Experts:
I have a question for specifying touch monitor sizes in the HID report descriptor:
Can ONE HID report descriptor support multiple touch monitors with different sizes ?
Thanks in advance
leo

My screen shot is from AA9, and I have seen that the UI for AAX is vastly different, but...
Choose Paper Source from Page Size should be the "one-touch" solution your looking for.
In my test, my Konica-Minolta Bizhub failed to detect the proper paper trays, but Acrobat correctly spooled the pages.

Does the NI-CAN 2.5 Channel API support multiple periodic tasks?

I have different channels that need to be output at seven different periods. Can I create multiple periodic tasks with different periods or am I going to have to either use software timing or the Frame API?
Robert C. Mortensen
Certified LabVIEW Architect
Certified LabVIEW Embedded Systems Developer
Endigit

Hi,
yes you can initialize multiple task with different sample rates, but you have to initialize all sequentialy and then to start thee tasks sequentialy.
Attached you can find an example for LabVIEW which shows how to do it.
DirkW
Attachments:
CAN_Multi-Chans_Diff-Period.vi ‏26 KB

IP Phone SSL VPN to ASA for multiple CUCM (CallManager)

hi all,
I have a case to support multiple CallManager clusters in different locations for internet SSL VPN IP Phone. We will deploy one ASA firewall for SSL VPN IP Phone connections. So, can we use single ASA firewall for mulitple CUCM clusters?? In order words, Internet IP Phone will connect to different CUCM via a single ASA firewall (by using SSL VPN).
I tested I need to upload the ASA's certificate into CUCM and upload CUCM's certificate into ASA for one ASA to one CUCM. If I create multiple profile (e.g. different URL for phone logins) for different CUCM. Is it possible to do that?
thanks for your input!
Samuel

Samuel,
Did you ever find an answer to your question? I have a similar scenario.
Any input would be appreciated.

IKEv2 Doesn't support Multiple Peers action to take

Hi,
I have to establish a tunnel from the local FW to a remote FW in L2L
In case of failure of the remote FW, a tunnel has to be opened with the backup remote FW.
I have proposed to use IKEv2
But with following config i get the message: %ASA-4-752009: IKEv2 Doesn't support Multiple Peers
crypto map local-map 30 set peer 22.22.22.22 33.33.33.33
So i have created two crypto maps:
crypto map local-map 30 set peer 22.22.22.22
crypto map local-map 40 set peer 33.33.33.33
The primary tunnel with peer 22.22.22.22 works fine but with the backup tunnel with peer 33.33.33.33
The tunnel IPSEc is up but no interesting traffic enters the tunnel:
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 28, #pkts decrypt: 28, #pkts verify: 28
I have first taken a capture on the inside interface and i see the counter of the access-list incrementing
but when i take a capture on the outside interface, i don't see any interesting traffic.
I have tried the clear crypto command but no way.
Equipment: Cluster of Cisco ASA 5510 at rel 8.4.7
Do i have to reboot the FW or may be the two crypto maps that i have created are not the good solution.
As an alternative if i want to maintain both peers on the same line i can replace IKEv2 by IKEv1.
Best regards.
Andre

Hello Andre, this is a confirmed issue with Cisco. There is an official bug listed as "ENH: Multiple Peers support for IKEv2 CSCud22276" (Cisco customer login required to view bug). See also the Cisco TAC Document "Migration of IKEv1 to IKEv2 L2L Tunnel" with the following quote:
"Multiple peers used for redundancy is not supported with IKEv2 on the ASA. In IKEv1, for redundancy purposes, one can have more than one peer under the same crypto map when you enter the set peer command. The first peer will be the primary and if it fails, the second peer will kick in. Refer to Cisco bug ID CSCud22276 (registered customers only) , ENH: Multiple Peers support for IKEv2."
Here's an excerpt from the Bug Enhancement Request regarding how to work around the issue.
"Either:
1) remove all but one peer from the crypto map
or
2) use IKEv1 instead of IKEv2"
Hopefully this helps, it would be a great feature for Cisco to add for better migration from IKEv1. I guess a more complicated alternative might be to use BGP and multiple WAN connections to have more than one valid path for the same WAN IP of your IPSec IKEv2 peer.

LDAP supporting multiple DNS domains

I have an environment with multiple DNS domains, and am configuring a Directory server (DS 6.3.1) to centralize various OS configuration maps including user authentication. None of the DNS domains have unique data, so I'd like to do something like storing all the real data in one suffix, then somehow have all clients look to that primary suffix. I am aware that the Solaris Native LDAP client wants to bind to a nisDomainObject that matches its DNS domain. I'm just having a hard time believing that I really need to manage all those individual suffixes when they don't have unique data requirements.
Take as an example the following domains to be supported: foo.example.com, bar.example.com, dev.example.com, qa.example.com, prd.example.com (no hosts are actually in "example.com", they are all in subdomains). Again, all share common configuration data, same user IDs, etc - no unique maps are required.
I created a suffix, "dc=example, dc=com", set it up with idsconfig. All is well there.
[A] My first thought is to bind all Solaris clients, regardless of their DNS domain, to the baseDN of "dc=example, dc=com" in order to avoid having a separate suffix for each DNS domain. I tried to do this using "-a defaultSearchPath=dc=example,dc=com" with ldapclient init, but it failed with an error indicating it wants to see the nisDomainObject of its real DNS domain.
The second though I had, which I don't believe is possible, is to find some sort of a LDAP equivalent of a symbolic link so that I could actually have an object for each DNS domain, but it would simply point back to "dc=example,dc=com". I can't find anything in the documentation which suggests this is possible, but I'd love to be wrong!
[C] Perhaps this could be somehow done with a rats nest of SSDs, but that really seems unwieldy, right? I plan on using a fair amount of the available objects, so it would be many SSDs per suffix. Yuck.
Can anyone comment on my above thoughts, or provide how they would go about supporting multiple DNS domains that have common configuration data?
Thank you,
Chris

Ok, I answered my own question. Turns out it's pretty easy. Just use the "-a domainName=example.com" option with `ldapclient` then make sure that the FQDN of the LDAP server is available (or use its IP address). My problem was that the ldapclient overwriting nsswotch.conf was clobbering the SSL session because I used the FQDN which couldn't resolve.
This leaves an interesting condition of having the output of "domainname" not match the DNS domain. I'm testing now to see if this causes any unexpected issues with our environmnet, but I suspect it's not a problem.

HT201250 Hello i am using TimeMachine to back-up entire Mac image (data + system) on an usb-local drive. I would like (on top of it) add a specific plan to back up some files on a remote network drive. Does TimeMachine support multiple back-up plans ? How

Hello i am using TimeMachine to back-up entire Mac image (data + system) on an usb-local drive. I would like (on top of it) add a specific plan to back up some files on a remote network drive. Does TimeMachine support multiple back-up plans ? How ?

Time Machine is capable of backing up to multiple locations, and can be used to back up to both a local hard drive and a networked drive (provided that that drive is in or connected to a Time Capsule or another Mac that is sharing it over the network). The catch, though, is that you can't specify different things to back up to different destinations. Whatever you exclude from Time Machine backups is excluded from ALL backups, and whatever is included is included on all.
So, get a large enough drive that you can back up everything you want in all locations, or use something else for maintaining the network backup.
More information on these topics can be found here:
How do I set up Time Machine to a shared drive on another Mac?
How do I set up Time Machine to a Time Capsule or Airport Extreme?
"Rotating" Time Machine backup disks

Cisco Jabber client to support Multiple e-mail domains

Hi All,
Per the following link, CUCM an IM&Presence starts supporting multiple domains at version 10:
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/10_0_1/delta/CUCM_BK_C206A718_00_cucm-new-and-changed-1001/CUCM_BK_C206A718_00_cucm-new-and-changed-1001_chapter_010.html#CUCM_RF_I31EA3AB_00
However, we have heard from Cisco that there is NO Jabber client that works with version 10 to support multiple email domains.
This may or not may be true.
Can someone who has connection with BU confirm this? If there is Jabber client that supports multiple email domains, what is the version and when is it going to be available?
Thanks,
Mustafa

Per-Olov
How are you dealing with this DA restriction?
Also, what are your comments about the use of Domain Alias vs. Domain with inetdomainbaseDN pointing to my organization? Which one was your choice?
Thanks,
Ivo

How can i create multiple accounts but use the same itunes?

how can i create multiple accounts but use the same itunes?

Hi iCloud is Making Me Go Crazy,
You will need to create a new Apple ID for your GameCenter and iCloud services. You can continue to use the current Apple ID you share with your Mom for access to iTunes Store purchases if you wish.
Using your Apple ID for Apple services
http://support.apple.com/kb/HT4895
Frequently asked questions about Apple ID
http://support.apple.com/kb/HT5622
Cheers,
- Judy

Can ASA support multiple PPPoE?

Similar Messages

Maybe you are looking for