Blog

Video: Cannot create NameID. Source attribute ‘mS-DS-ConsistencyGuid’ does not exist

https://www.youtube.com/watch?v=g6nnPEoiErE

Video Series: ThousandEyes with Network Wizkid

Presentations are available for download here. https://youtu.be/6kM2Xk2rcew https://youtu.be/7T1mIIgP3Lo https://youtu.be/cWtJlMwXxVQ https://youtu.be/hxs3CPBq0P4 https://youtu.be/GjKrXDVZgIs https://youtu.be/E-TmMEvCNAQ https://youtu.be/qMFqEbusgk4 https://youtu.be/OO3WSHVdP4Q

How to add an ESA’s DKIM Signature to a DNS TXT Record

Hopefully, this post will help you save a lot of time when trying to add a DomainKeys Identified Mail (DKIM) signature to a Windows server. The motivation for this post is simply because I spent more than enough time trying…

Configuring D-VTI and S-VTI for Hub & Spoke Deployments

In this post, we're going to configure D-VTI and S-VTI between two CSR1000v routers to demonstrate hub and spoke deployments. The two devices used as shown in the topology below are R9 and R10. R9 will act as the hub…

Configuring IPSec Site-to-Site VPN’s using IOS-XE as a CA Server

In this post, we're going to configure an IPSec site-to-site VPN with two CSR1000v routers. The authentication between the two routers will be performed using digital certificates issued from a separate Cisco CSR1000v router which is acting as a CA…

Configuring FlexVPN Point-to-Point IKEv2 S-VTI with PKI Authentication

In the last post, we explored how to configure FlexVPN point-to-point IKEv2 S-VTI's with preshared keys. In this post, we will do the same but this time using another CSR1000v acting as a CA server. This will allow us to…

Configuring FlexVPN Point-to-Point IKEv2 S-VTI

In this article, we're going to configure a point-to-point IKEv2 Static Virtual Interface (S-VTI) between two Cisco CSR1000v routers using pre-shared keys as the authentication method. To demonstrate this, we're going to use part of my lab topology as shown…