All Questions

9
votes
0answers
512 views

PIM-SM with BSR over SSG5 VPN tunnel

I've created a lab to troubleshoot an issue I'm having with PIM-SM and BSR. There are two sites connected via two Juniper SSG5s (6.3.0r17) with just enough configuration to focus on the problem at ...
7
votes
0answers
878 views

Cisco BGP Graceful Restart behavior

In our environment we generally have ASR-1000X-2s everywhere peering via iBGP/eBGP. These routers have no redundant RPs, hence cannot keep forwarding traffic while the router reboots or crashes. As ...
7
votes
0answers
234 views

How to control unwanted UDP traffic (Broadcast & Multicast) on Cisco Router 2911?

Please suggest, we are getting UDP traffic either broadcast or multicast in router 2911 which cause 95%+ utilisation of the router. And we got error in link and business impact due to this. Company ...
7
votes
0answers
2k views

Openswan-Sonicwall VPN tunnel

I've been trying to figure this out but all the documentation I can find seems to be very old. The feeling seems to be that once Dell acquired Sonicwall, documentation became sparse and mostly useless....
5
votes
0answers
120 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
5
votes
0answers
224 views

ASA5515 - QM FSM error / failed to establish L2L SA when transferring large files

I was hoping someone could help me with a problem I’m having - a little clarification or advice would be much appreciated: The Issue: I have set a new backup server and I want to back up data from ...
5
votes
0answers
413 views

How to break apart an IPv6 /56 6rd delegated prefix from ISP into multiple /64 VLANs for use with SLAAC EUI-64? [Cisco]

I have CenturyLink Internet service, and they have a 6RD IPv6 deployment where they hand out an IPv6 delegated prefix /56 block to me and allow me to use it as I wish. My Cisco ISR router receives the ...
5
votes
0answers
424 views

VirtualAccess Behavior with PPP

A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
4
votes
0answers
39 views

Juniper EX4300 / MAC limiting SNMP trap

I have the following device and configuration: Model: ex4300-32f Junos: 17.3R3-S3.3 show configuration groups GLOBAL-SNMP { snmp { client-list MANAGERS { 10.8.9.0/28; } community TEST-COMMUNITY ...
4
votes
0answers
81 views

Where is the traffic going?

Here is a routing puzzle: I'm working on a poorly documented network, and I'm trying to document things as I discover them. R1 is a core L3 switch. R2 is a router. The FW is a, well, firewall. On ...
4
votes
0answers
112 views

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling rate?

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling? For example, input sampling rate for xe-0/0/1 is one of 100 and input sampling rate for xe-0/0/2 interface is one of 500. I ...
4
votes
0answers
191 views

HSRP IPv6 configuration

Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'. interface FastEthernet0/0 no ip address duplex auto speed auto ipv6 address 2020:...
4
votes
0answers
72 views

mp_reach_nlri bgp Update with 4-byte Community ASN?

I am BGP peering with a Juniper OS router. When starting the connection, my system advertises 4-byte ASN capability, which is accepted by the Juniper router: Jul 28 00:33:00.664202 BGP RECV 4 Byte ...
4
votes
0answers
254 views

Hardening Cisco router on Internet-MANAGEMENT PLANE

I need confirmation that I understood the Cisco manual right. So my network is like this: ISP_RTR ---x.x.x.x/30--- Perimeter/Edge_RTR ---y.y.y.y/30--- FW1 --- DMZ1 ...
4
votes
0answers
128 views

ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217

When I enabled debugging: PIM#debug ip igmp snooping router I get in logs: Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217 Configuration for interfaces: ...
4
votes
0answers
201 views

Distributed Trunking Inconsistent MAC table

Good afternoon. I've recently faced a problem in an HPE Distributed-Trunking Switch-to-Switch Square-Topology. Image 1 (shows the essential part of the architecture that consists of 4 switches ...
4
votes
0answers
657 views

Sonicwall with BGP unable to route to AWS VPN

I'm trying to get our local Sonicwall NSA 2600 to connect to a AWS VPN, within a VPC. I have the IKE portion working and AWS shows the two pipes are connected The BGP routes show as up in the router ...
4
votes
0answers
186 views

E1 over SDH, CRC increasing

I'm Having problem with CRC on E1 interface, after I found clock slips, I have configured "network-clock-participate wic" and "network-clock-select". But I think that is not the cause of CRC, when I ...
4
votes
0answers
349 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
4
votes
0answers
754 views

Juniper SRX IPv6-PD update-router-advertisement issues

I'm trying to get some sweet prefix delegation working on my SRX. My provider offers DHCPv6-PD and gives out /56 addresses. I have done setups using cisco routers and am trying to replicate it onto a ...
3
votes
0answers
29 views

Redundant physical interfaces for Cisco pseudowire-class

I have a link which is LT2P from a site router R1 (Cisco 867-VAE, IOS 15.3) which has two external interfaces defined (dialer1 and vlan-1000), but only one plugged in (first is ADSL, second is ...
3
votes
0answers
36 views

Cisco nexus 9396 rebooted with reason xbar_client

Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
3
votes
0answers
30 views

Why does TCP exit out of slow-start faster than expected?

For context, I am testing a client-server TCP flow, where the client makes a request for a file, and the server sends the file using regular TCP streams. Both servers are using the "Cubic" ...
3
votes
0answers
32 views

Cisco ASA 5525-X Input Current

In switches, like Cisco Catalyst 2960X-24TS-L, datasheet mention input power: 100 to 240 VAC, 1A to 0.5A. So, I assume input current = 1A@100VAC and 0.5A@240VAC or Cisco Catalyst 3850 + Power Supply ...
3
votes
0answers
74 views

Need to configure site to site SSL VPN between two Cisco routers

I would like to configure site-to-site SSL VPN between two sites. I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
3
votes
0answers
258 views

What is the effect of using “ntp allow mode control 0”?

I am attempting to mitigate the issues surrounding bug report CSCum44673. According to the software release notes found here, I need to ensure that all of my routers are on IOS version 15.2(2) or ...
3
votes
0answers
41 views

How do you specify BGP Authentication Key when using Verizon's Secure Cloud Interconnect?

I am trying to establish a Direct Connect Link using Verizon's Secure Cloud Interconnect service. I have established the connection in the Dynamic Network Manager on the Verizon side and the VIFs ...
3
votes
0answers
67 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
3
votes
0answers
735 views

NetFlow configuration on Catalyst 4500-X

I have a problem with config NetFlow on 4500-X switch. This is NetFlow config flow record NFArecord match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address ...
3
votes
0answers
242 views

STB generate IGMP Leave without reason

In my network STB generates IGMP Leave (in STB logs "End of Stream") without any reason or there is something what I don't understand. There is one exeption STB directly connected to PIM (ASR920) ...
3
votes
0answers
79 views

Cisco auto smartport - description removal

let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
3
votes
0answers
43 views

Configure C1861 for SIP to FXS port

I found a C1861 ISR router and I would like to play with it a learn some telephony. I signed up for a VOIP service so I have SIP credentials. Is there a simple walkthrough anywhere to set up the SIP ...
3
votes
0answers
142 views

HP 5500 JD374A Port naming convention

Hi to all :) To most of you it'll prolly sound like a very silly question to ask, however to me as a fresh network trainee the answer is unfortunately not so obvious. So, the question is whether the ...
3
votes
0answers
207 views

Hp Procurve Action ignored in download mode

From an tftp server I'm trying to import the config to startup-config using copy tftp startup-config 10.0.0.10 5006zl.cnf The switch asks for confirmation y/n and when pressing y it just aborts ...
3
votes
0answers
690 views

Is IKEv2 remote access VPN possible to an ASA 5510 without Cisco AnyConnect as the client?

I'm trying to configure a remote acccess vpn into a cisco ASA 5510 (9.1(7)15). I want to be able to use IKEv2 with Certificate + user/password xauth with strongswan as the client under Ubuntu. I ...
3
votes
0answers
1k views

Regarding vPC Dual Active or Split Brain scenario

Consider the below topology: Imagine that both the vPC peer keepalive link and vPC peer link have gone down. I am trying to understand how will that lead to unpredictable traffic flows or loops. ...
3
votes
0answers
68 views

PVC not Accepted by CISCO 878

I have the following config. set up for an MPLS network on my CISCO 878: Current configuration : 941 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log ...
3
votes
0answers
1k views

How do switches behave on multicast?

I am benchmarking multicast throughput of my LAN using an application that considers all the servers as group members. The network consists of homogeneous servers (S0-S9: 192.168.21.70-79) inter-...
3
votes
0answers
98 views

I want to combine a hub and spoke VPN with a dialup VPN

Can I do this with a Juniper SRX-100? I have a combination of corporate office users and remote work from home users. A total of around 30 users with 10 remote work from home. The remote users run ...
3
votes
0answers
796 views

Juniper EX Unicast Flooding

I have a few Juniper EX3300 switches in my core. I'm seeing something strange where packets destined for device with the MAC address 00:90:0b:30:2d:f2 are being flooded out all interfaces. However, an ...
3
votes
0answers
216 views

IOS XE minimum frame size

I recently encountered an issue upgrading from an IOS device to an IOS XE ASR 1000 router concerning Ethernet Over SONET (EOS). VLAN tags are used to map traffic from the hub router to SONET ...
3
votes
0answers
838 views

GRE tunnel(or even any tunnelling technique) between Alcatel 7750 and a Cisco Router

has anyone on here been able to successfully create a GRE tunnel or any kinda of tunnelling mechanism between an Alcatel router and a Cisco router. I've been struggling with this and for a while and ...
3
votes
0answers
4k views

Default Username and password for motorola rfs6000 after factory reset

I have factory reset my Motorola rfs6000 by using >cli Username: restore Password: restoreDefaultPassword Which then asked me if i wanted to wipe the device etc etc. But then after doing this, it ...
3
votes
0answers
406 views

Policy Based Routing (not matching packets) - Virtual Template

I have this configuration runnning : Larger image I tested the policy based routing int the lab using two linksys router acting as ppp clients of the Cisco 7206VXR and another linksys emulating the ...
2
votes
0answers
27 views

How is a MS (Mobile Station) Identified prior to GPRS attach?

So, originally the MS sends a Packet Channel Request over PRACH and then the BSC responds with a Packet Uplink Assignment over PAGCH. How does this PDTCH allocation get picked up by the correct MS? I ...
2
votes
0answers
34 views

Meraki in Passthrough mode behind ASA

I am having trouble getting bidirectional traffic through a Meraki box behind a ASA 5508-X. I can see requests from the client VPN going from a client device to a server on our LAN, the server ...
2
votes
0answers
33 views

What does “l2protocol peer x” exactly do?

i'm struggeling with some Layer2 Service within one of my customer's MPLS networks. My aim is to provide a L2VPN Service between two ISR4000 Boxes that act as CPE in my MPLS platform. This L2 Service ...
2
votes
0answers
30 views

Certain SSH shell script doesn't run well in Cisco APIC bash

The following ping script is running just fine in both script form and interactive shell ping-only.sh date for i in 10.1.1.1 10.1.1.3 10.4.1.13 do echo -e "\nIP: $i" ping -c 1 $i | grep ...
2
votes
0answers
24 views

Juniper QinQ same port for customer as provider

Is it possible to use a single interface as both the provider port and the customer port for a QinQ setup on a Juniper EX 4200 switch? I have a set of switches "on a stick" attached to the network. ...
2
votes
0answers
49 views

RPL: questions on routing mechanism

I'm studying RPL and two questions came to my mind: 1: Both in storing and non-storing modes, if a node wants to send a packet to another node via P2P communication paradigm, then how does the ...

15 30 50 per page