Well. When you first restored the backup, did you try initializing it with the old certificate? — Sent from Mailbox for iPhone
On Thu, Jul 11, 2013 at 11:16 PM, Mike Rojas <[email protected]> wrote: > I did, and I removed everything that said Certificate on the config. However, > I dont know how the heck it says that encryption validation failed and it > reference the old certificate. > The certificate is not even in the config, it was a self signed. > Mike > Subject: Re: [OSL | CCIE_Security] vWSA New interface > From: [email protected] > Date: Thu, 11 Jul 2013 23:04:06 -0300 > CC: [email protected]; [email protected] > To: [email protected] > Well, that`s different then. What I guess that could`ve happened is that when > you imported the config file it came along with the certificate used by the > old Ironport or at least with the pointers. Did you check that? > BR,Bruno Silva. > Em 11/07/2013, às 22:58, Mike Rojas <[email protected]> escreveu:Hi > Bruno; > I had to install it from scratch, I did not find a way to add another > interface to the VM. So I backed up the file, installed the WSA from scratch > and tried to upload the config, then I got the error. > No go. > Mike. > Date: Thu, 11 Jul 2013 22:53:05 -0300 > Subject: Re: [OSL | CCIE_Security] vWSA New interface > From: [email protected] > To: [email protected] > CC: [email protected]; [email protected] > Hi Mike, > I may be wrong but, did you install the ironport from scratch or did you just > added the new interface on the ironport? > I ask that because last time I got this error was because I added a new > interface and for some reason that I cannot understand, even talked to cisco > which wasn`t much of a help, the ironport tried to use this interface in the > certificate for the management connection. So the certificate could not be > valid because it was previously generated in the first initialization so it > got corrupted...It happened to me 2 times, both times when I added the > interface. Don`t know why it tries to validate the integrity of the > certificate using the new interface instead of the old ones. > Hope it helps.BR,Bruno Silva. > 2013/7/11 Mike Rojas <[email protected]> > Hi Piotr and Team. > So, I installed the WSA but when I try to load the config I get: > Configuration File was not loaded. Parse Error on element "https_certificate" > line number 154 column 22: Error in certificate validation: Configuration > includes an unparseable signing certificate. Verify that it has not been > modified. > This is very critical, because If I dont get to load the config, I may have > to re-do the whole lab and that is something I truly want to avoid. > Any thoughts? > Mike > From: [email protected] > Date: Wed, 10 Jul 2013 09:33:59 -0600 > To: [email protected] > CC: [email protected] > Subject: Re: [OSL | CCIE_Security] vWSA New interface > Hey Piotr; > When I first installed the WSA, I only Added 3 interfaces (its a vWSA), so > when I go to interfaces, i only see the M1, p1 and p2. I dont see any T > Interfaces. > I was wondering if there is a way to add another interface or do I have to > re-install the WSA and add the needed interface. > Sent from my iPhone > On Jul 10, 2013, at 3:23 AM, "Piotr Kaluzny" <[email protected]> wrote: > Mike > Not sure if this is what you are asking for but you can use "interfaceconfig" > to add P1/P2 to the mix. > If you want to use L4TM just go under Network -> Interfaces; port should be > already activated. To modify physical settings for any port, including T1/T2, > use "etherconfig". > Regards,--Piotr KaluznyCCIE #25665 (Security), CCSP, CCNPSr. Technical > Instructor - IPexpert, Inc.URL: http://www.IPexpert.com > On Wed, Jul 10, 2013 at 2:56 AM, Mike Rojas<[email protected]> wrote: > Hi, > Is it possible to add a new interface on a already installed WSA? I need to > add a T1 interface for the final part of the lab. > Mike. > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visitwww.ipexpert.com > Are you a CCNP or CCIE and looking for a job? Check > outwww.PlatinumPlacement.com > _______________________________________________ For more information > regarding industry leading CCIE Lab training, please visit www.ipexpert.com > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > Are you a CCNP or CCIE and looking for a job? Check > outwww.PlatinumPlacement.com > -- > Bruno Silva > Network Consultant > Cisco CCNA/CCDA/CCNP/CCDP/CCSP Certified > Arcsight Professional Certified - ACIA/ACSA >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
