https://blogs.damiendye.uk/en/tags/cisco/ Recent content in Cisco on Damien Dye's Blog Hugo en-GB Tue, 15 Sep 2026 09:30:00 +0100 https://blogs.damiendye.uk/en/certificates/webex-certificates-on-a-build-server/ Tue, 15 Sep 2026 09:30:00 +0100 https://blogs.damiendye.uk/en/certificates/webex-certificates-on-a-build-server/ Webex on Linux says "Offline - No internet connection" on a machine whose network is fine: the OpenSSL Cisco ship looks for its trust store inside their own build container. What breaks, the fixes that fail, the one that works, what the build process got wrong, and how a security appliance vendor ships a client that cannot check a certificate. https://blogs.damiendye.uk/en/networking/ipsec-was-a-good-idea-turn-it-off/ Sun, 13 Sep 2026 09:00:00 +0100 https://blogs.damiendye.uk/en/networking/ipsec-was-a-good-idea-turn-it-off/ IPsec bound security to the IP address, then the industry took the address away. NAT, double NAT under CGNAT, NAT64 that will not carry it at all, no ports so no load balancing, the MTU tax, L2TP, PPTP and Windows interop — with diagrams, Cisco and Juniper documentation, a full diagnostic method, and the case for retiring it. https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part1/ Fri, 28 Aug 2026 18:00:00 +0100 https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part1/ Part 1 of 3. Some MSPs lie; most never have to, because the vendors whose products they recommend pay them and nobody must tell you. The tells that you are being sold to rather than engineered for: the free fix refused, requirements never written down, one option on the shortlist, no open source line, and the addresses you rent forever. https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part2/ Fri, 28 Aug 2026 17:00:00 +0100 https://blogs.damiendye.uk/en/random/is-your-msp-lying-to-you-part2/ Part 2 of 3. Cloud for a business all in one building. The firewall brand with the most exploited vulnerabilities on CISA's list. Backups nobody has restored, reports that never reach you, an agent on every machine answering to a console you have never seen. What the ICO found at Advanced and Capita, and the keys that open all of it.