If you vpn clients need to connect to anyconnect IP address, you just need to add the VPN client IP pool space to the split-tunnel list.
If you have this problems, you see it if you want to ping you anyconnect ip address and get: General failure.
If you vpn clients need to connect to anyconnect IP address, you just need to add the VPN client IP pool space to the split-tunnel list.
If you have this problems, you see it if you want to ping you anyconnect ip address and get: General failure.
This guide is only for recovery of a broken IOS image on you Cisco switch!.
First download a new image from Cisco. Is require a Cisco login, ask you dealer for a login for Cisco or a IOS image for you switch.
Then press OK
Then press OK.
Now you are finish recovery you switch.
Follow this quick guide
1) username xxxx password xxxx
2) passwd xxxxx
3) ssh x.x.x.x x.x.x.x {inside/outside} (Example: SSH 130.226.1.2 255.255.255.255 outside, to enable SSH from 130.226.1.2)
4) crypto key generate rsa modulus 2048
5) aaa authentication ssh console LOCAL
I have a customer how has broken his Cisco VPN Client profiles. But the group password encrypted was still fine.
So I found out that it was pretty easy to crack this encryption.
The algorithm
The algorithm which is used to encrypt a given user/group password is shown below (for further details just consult the source code):
Jan Newger has made a programs witch can crack the password automatically, you can download it here: newgre.net/passwordrevealer#download
First you need to download a new firmware on Cisco homepage to that you need a cisco login.
Then you need a tftp server. Klever’s pumpkin is free.
Then we need to take backup of the cisco switch before upgrading.
Login to enable mode.
wr mem
copy running-config tftp://192.168.0.1/config
copy flash:vlan.dat tftp://192.168.0.1/vlan.dat
copy flash:c2950-i6q4l2-mz.121-22.EA6.bin tftp://192.168.0.1/c2950-i6q4l2-mz.121-22.EA6.bin
Then we need to delete old HTML files.
delete /r /f flash:html
Then we need to get the new software on the Cisco router.
archive tar /xtract tftp://192.168.0.1/c2950-i6q4l2-tar.121-22.EA10a.tar flash:
And then you just need to reload the cisco router.
reload