All Questions

556 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
11
votes
0answers
564 views

PIM-SM with BSR over SSG5 VPN tunnel

I've created a lab to troubleshoot an issue I'm having with PIM-SM and BSR. There are two sites connected via two Juniper SSG5s (6.3.0r17) with just enough configuration to focus on the problem at ...
9
votes
0answers
2k views

Openswan-Sonicwall VPN tunnel

I've been trying to figure this out but all the documentation I can find seems to be very old. The feeling seems to be that once Dell acquired Sonicwall, documentation became sparse and mostly useless....
7
votes
0answers
389 views

How to control unwanted UDP traffic (Broadcast & Multicast) on Cisco Router 2911?

Please suggest, we are getting UDP traffic either broadcast or multicast in router 2911 which cause 95%+ utilisation of the router. And we got error in link and business impact due to this. Company ...
7
votes
0answers
347 views

Distributed Trunking Inconsistent MAC table

Good afternoon. I've recently faced a problem in an HPE Distributed-Trunking Switch-to-Switch Square-Topology. Image 1 (shows the essential part of the architecture that consists of 4 switches ...
6
votes
1answer
617 views

How to break apart an IPv6 /56 6rd delegated prefix from ISP into multiple /64 VLANs for use with SLAAC EUI-64? [Cisco]

I have CenturyLink Internet service, and they have a 6RD IPv6 deployment where they hand out an IPv6 delegated prefix /56 block to me and allow me to use it as I wish. My Cisco ISR router receives the ...
6
votes
0answers
522 views

VirtualAccess Behavior with PPP

A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
5
votes
0answers
57 views

Cisco NX-OS 9K - LDAP Configuration

I'm having some trouble configuring LDAP authentication (via Windows AD) when connecting via ssh on our CISCO. I replaced some information from the switch, you will see it in uppercase here. ...
5
votes
0answers
154 views

Where is the traffic going?

Here is a routing puzzle: I'm working on a poorly documented network, and I'm trying to document things as I discover them. R1 is a core L3 switch. R2 is a router. The FW is a, well, firewall. On ...
5
votes
0answers
321 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
5
votes
0answers
205 views

E1 over SDH, CRC increasing

I'm Having problem with CRC on E1 interface, after I found clock slips, I have configured "network-clock-participate wic" and "network-clock-select". But I think that is not the cause of CRC, when I ...
5
votes
0answers
399 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
5
votes
0answers
799 views

Juniper SRX IPv6-PD update-router-advertisement issues

I'm trying to get some sweet prefix delegation working on my SRX. My provider offers DHCPv6-PD and gives out /56 addresses. I have done setups using cisco routers and am trying to replicate it onto a ...
5
votes
1answer
456 views

Time Cisco Router reload not always mentioned

Im trying to measure our cisco router availability data based on downtime happened. I assume from show version, the time mentioned in tag "System returned to ROM" is when reload started, and next line ...
5
votes
1answer
239 views

Juniper ERX 310 traffic not going more than 710 mbps?

We have a Juniper ERX 310 configured as B-ras, as per specifications of the router, we should be able to terminate 8000 PPP sessions, but we notice that traffic on the router interface not going more ...
4
votes
1answer
238 views

Cisco ASA IPsec tunnel QM FSM error

I am setting up Cisco 5585 ASA for IPsec tunnel with one of cloud company. we already have lots of tunnel for various cloud provider and life if good but recently this tunnel giving me hard time to ...
4
votes
0answers
73 views

Redundant physical interfaces for Cisco pseudowire-class

I have a link which is LT2P from a site router R1 (Cisco 867-VAE, IOS 15.3) which has two external interfaces defined (dialer1 and vlan-1000), but only one plugged in (first is ADSL, second is ...
4
votes
0answers
104 views

Cisco nexus 9396 rebooted with reason xbar_client

Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
4
votes
0answers
111 views

Juniper EX4300 / MAC limiting SNMP trap

I have the following device and configuration: Model: ex4300-32f Junos: 17.3R3-S3.3 show configuration groups GLOBAL-SNMP { snmp { client-list MANAGERS { 10.8.9.0/28; } community TEST-COMMUNITY ...
4
votes
0answers
742 views

What is the effect of using “ntp allow mode control 0”?

I am attempting to mitigate the issues surrounding bug report CSCum44673. According to the software release notes found here, I need to ensure that all of my routers are on IOS version 15.2(2) or ...
4
votes
0answers
226 views

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling rate?

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling? For example, input sampling rate for xe-0/0/1 is one of 100 and input sampling rate for xe-0/0/2 interface is one of 500. I ...
4
votes
0answers
410 views

HSRP IPv6 configuration

Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'. interface FastEthernet0/0 no ip address duplex auto speed auto ipv6 address 2020:...
4
votes
0answers
181 views

ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217

When I enabled debugging: PIM#debug ip igmp snooping router I get in logs: Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217 Configuration for interfaces: ...
4
votes
0answers
281 views

Hp Procurve Action ignored in download mode

From an tftp server I'm trying to import the config to startup-config using copy tftp startup-config 10.0.0.10 5006zl.cnf The switch asks for confirmation y/n and when pressing y it just aborts ...
4
votes
0answers
436 views

Cisco ASA 5505 Remote Access IPSec - Tunnel Rejected - The maximum tunnel count allowed has been reached

I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message: %ASA-4-713239: IP_Address: Tunnel Rejected: ...
4
votes
4answers
2k views

PAT and Static NAT not working together?

The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT. Configs: S_HQ ! interface FastEthernet0/1 switchport ...
4
votes
0answers
230 views

IOS XE minimum frame size

I recently encountered an issue upgrading from an IOS device to an IOS XE ASR 1000 router concerning Ethernet Over SONET (EOS). VLAN tags are used to map traffic from the hub router to SONET ...
4
votes
1answer
1k views

SonicWall TZ210 PPPoE on WAN interface, need transparent bridging to DMZ

I've got a SonicWall TZ210 which connects to the WAN via PPPoE on the X1 interface. I've got a /29 subnet routed into the box, and everything is running fine. Now, I need to route one of the WAN IP ...
4
votes
1answer
5k views

Why is routing not working on my Dell N2048 switch

I am in the process of replacing some older Dell Powerconnect switches with a some Dell N2048 switches. While doing this I wanted to go ahead and segregate certain areas of my network using VLANs. ...
3
votes
0answers
38 views

PVLANs/Port isolation in IPv6 networks

We're currently using port isolation to prevent communication between computers on the same vlan and use client isolation on our guest wifi. The reason for having this enabled is to prevent unwanted ...
3
votes
2answers
92 views

What is the advantage of Supervised Machine Learning over Deep Packet Inspection in Network Traffic Classification?

As per the definition of Deep Packet Inspection (DPI), it uses signatures for packet filtering. Supervised Machine Learning can help put a label on a packet which does not get identified by Deep ...
3
votes
0answers
193 views

Cisco nexus STP loopguard

I have cisco nexus switches in vPC and they are connected to HP c7000 blade center switches and all my c7000 blade server has Linux Bridge is running, i believe something went wrong somewhere in Linux ...
3
votes
1answer
158 views

Port Channel Hybrid Port Issue

I have a Dell Sonicwall NSA 4600 running the latest firmware with an Interface that's configured to have a secondary redundant port. This interface also has a VLAN sub interface assigned to it. On ...
3
votes
0answers
103 views

Behaviour of TCP SACK

I will ask the question based on the following scenario. Assume I have to send 10 packets using TCP using a window size of 5. I send 1, 2 and receive ACK for them, I send 3 and the ACK is lost, I send ...
3
votes
0answers
51 views

Cisco ASA 5525-X Input Current

In switches, like Cisco Catalyst 2960X-24TS-L, datasheet mention input power: 100 to 240 VAC, 1A to 0.5A. So, I assume input current = 1A@100VAC and 0.5A@240VAC or Cisco Catalyst 3850 + Power Supply ...
3
votes
0answers
142 views

Need to configure site to site SSL VPN between two Cisco routers

I would like to configure site-to-site SSL VPN between two sites. I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
3
votes
0answers
199 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
3
votes
0answers
95 views

Is this a valid OSPF topology?

In the following topology: every Backbone router is an ABR. Router 2 belongs to three different areas, area 0, area 1, and area 4. is this a valid topology for OSPF ? it works as expected and it ...
3
votes
0answers
99 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
3
votes
1answer
450 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
3
votes
0answers
266 views

Cisco phone display name change

I am trying to change name on cisco ip phone 7942. I changed the name in directory number configuration and in phone configuration of phone on CUCM. I did reset of phone too. But still showing the old ...
3
votes
0answers
298 views

STB generate IGMP Leave without reason

In my network STB generates IGMP Leave (in STB logs "End of Stream") without any reason or there is something what I don't understand. There is one exeption STB directly connected to PIM (ASR920) ...
3
votes
0answers
92 views

Cisco auto smartport - description removal

let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
3
votes
1answer
522 views

WPA2 Enterprise with NPS and WLC

I am pretty new to this and am trying to set up WPA2 enterprise where users can connect to the Wifi using their AD credentials (PEAP-MSCHAPv2). The Cisco WLC has been configured to relay requests ...
3
votes
0answers
195 views

HP 5500 JD374A Port naming convention

Hi to all :) To most of you it'll prolly sound like a very silly question to ask, however to me as a fresh network trainee the answer is unfortunately not so obvious. So, the question is whether the ...
3
votes
0answers
819 views

Is IKEv2 remote access VPN possible to an ASA 5510 without Cisco AnyConnect as the client?

I'm trying to configure a remote acccess vpn into a cisco ASA 5510 (9.1(7)15). I want to be able to use IKEv2 with Certificate + user/password xauth with strongswan as the client under Ubuntu. I ...
3
votes
0answers
908 views

Dual ISP NAT Failover Not Working

I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
3
votes
0answers
2k views

Regarding vPC Dual Active or Split Brain scenario

Consider the below topology: Imagine that both the vPC peer keepalive link and vPC peer link have gone down. I am trying to understand how will that lead to unpredictable traffic flows or loops. ...
3
votes
0answers
428 views

Dual-Hub DMVPN Outage

Our backup links have always utilized a GRE tunnel based VPN to a hub. Recently we installed a second hub and migrated the primary links to GRE tunnel based VPN with EIGRP to handle routing between ...
3
votes
1answer
231 views

FlowVisor Slices

Good day all! I encountered a problem while I was running flowvisor In mininet. The same problem occurred also when I tried running it on different VM (Ubuntu server 14.04). I was able to install ...
3
votes
1answer
315 views

Juniper NetScreen NAT from a secondary Untrusted Zone

We have multiple public IP address subnets for various purposes. I need to create an Internal Zone behind NAT that presents itself as having an external IP in External Zone B. [...

15 30 50 per page
1 2 3 4 5 12