Posts

Showing posts from November, 2019

Use FlexConfig to configure EIGRP on FTD - Basic

Image
Eigrp is not natively supported by FTD, need use FlexConifg to push eigrp commands to FTD. In FlexConfig, all keywords can input directly, but parameters have to use variables. 1. First create text object for AS number, network subnets and router ID.   Objects>FlexConfig>Text Object, click Add Text Object button     2. Create FlexConfig Object..    find the system defined "Eigrp_Configure", click the copy icon to make a copy.    remove the system defined variables, then use Insert button to insert the new variables, variable name can't contains dot (.). Pay attention the deployment is Once, type is Append.  When finish, it will look like below: 3. Create FlexConfig policy for the FTD Devices > FlexConfig, click New Policy button, give it a name and choose targeted device. Save the change, then click Preview Config to check

Anyconnect Dynamic Split Tunneling

Image
Configure Dynamic Split Include Tunneling Configure: webvpn  anyconnect-custom-attr dynamic-split-include-domains description dynamic split include domains anyconnect-custom-data dynamic-split-include-domains corporate_service_domains google.ca,google.com group-policy SSL-VPN attributes  anyconnect-custom dynamic-split-include-domains value corporate_service_domains Verify: Configure Enhanced Dynamic Split Include Tunneling Configure: webvpn  anyconnect-custom-attr dynamic-split-include-domains description dynamic split include domains  anyconnect-custom-attr dynamic-split-exclude-domains description dynamic split exclude domains anyconnect-custom-data dynamic-split-include-domains Include_Domain_List google.ca,google.com anyconnect-custom-data dynamic-split-exclude-domains Exclude_Domain_List www.google.ca,www.google.com group-policy SSL-VPN attributes  anyconnect-custom dynamic-split-include-domains value Include_Domain_List  any