All Questions

726 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
10
votes
0answers
540 views

PIM-SM with BSR over SSG5 VPN tunnel

I've created a lab to troubleshoot an issue I'm having with PIM-SM and BSR. There are two sites connected via two Juniper SSG5s (6.3.0r17) with just enough configuration to focus on the problem at ...
7
votes
0answers
320 views

Distributed Trunking Inconsistent MAC table

Good afternoon. I've recently faced a problem in an HPE Distributed-Trunking Switch-to-Switch Square-Topology. Image 1 (shows the essential part of the architecture that consists of 4 switches ...
7
votes
0answers
2k views

Openswan-Sonicwall VPN tunnel

I've been trying to figure this out but all the documentation I can find seems to be very old. The feeling seems to be that once Dell acquired Sonicwall, documentation became sparse and mostly useless....
6
votes
0answers
327 views

How to control unwanted UDP traffic (Broadcast & Multicast) on Cisco Router 2911?

Please suggest, we are getting UDP traffic either broadcast or multicast in router 2911 which cause 95%+ utilisation of the router. And we got error in link and business impact due to this. Company ...
6
votes
0answers
530 views

How to break apart an IPv6 /56 6rd delegated prefix from ISP into multiple /64 VLANs for use with SLAAC EUI-64? [Cisco]

I have CenturyLink Internet service, and they have a 6RD IPv6 deployment where they hand out an IPv6 delegated prefix /56 block to me and allow me to use it as I wish. My Cisco ISR router receives the ...
5
votes
0answers
247 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
5
votes
1answer
520 views

ASA5515 - QM FSM error / failed to establish L2L SA when transferring large files

I was hoping someone could help me with a problem I’m having - a little clarification or advice would be much appreciated: The Issue: I have set a new backup server and I want to back up data from ...
5
votes
0answers
483 views

VirtualAccess Behavior with PPP

A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
5
votes
1answer
422 views

Time Cisco Router reload not always mentioned

Im trying to measure our cisco router availability data based on downtime happened. I assume from show version, the time mentioned in tag "System returned to ROM" is when reload started, and next line ...
5
votes
1answer
233 views

Juniper ERX 310 traffic not going more than 710 mbps?

We have a Juniper ERX 310 configured as B-ras, as per specifications of the router, we should be able to terminate 8000 PPP sessions, but we notice that traffic on the router interface not going more ...
4
votes
0answers
48 views

Cisco ASA IPsec tunnel QM FSM error

I am setting up Cisco 5585 ASA for IPsec tunnel with one of cloud company. we already have lots of tunnel for various cloud provider and life if good but recently this tunnel giving me hard time to ...
4
votes
1answer
146 views

Cisco DAI / arp inspection limit

During a recent penetration test it was found that we didn't have dai set quite as tight as possible to fully stop things. I'm running Cisco 3750x if it matters. The interfaces are configured with ...
4
votes
0answers
50 views

Redundant physical interfaces for Cisco pseudowire-class

I have a link which is LT2P from a site router R1 (Cisco 867-VAE, IOS 15.3) which has two external interfaces defined (dialer1 and vlan-1000), but only one plugged in (first is ADSL, second is ...
4
votes
0answers
75 views

Cisco nexus 9396 rebooted with reason xbar_client

Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
4
votes
0answers
75 views

Juniper EX4300 / MAC limiting SNMP trap

I have the following device and configuration: Model: ex4300-32f Junos: 17.3R3-S3.3 show configuration groups GLOBAL-SNMP { snmp { client-list MANAGERS { 10.8.9.0/28; } community TEST-COMMUNITY ...
4
votes
0answers
124 views

Where is the traffic going?

Here is a routing puzzle: I'm working on a poorly documented network, and I'm trying to document things as I discover them. R1 is a core L3 switch. R2 is a router. The FW is a, well, firewall. On ...
4
votes
0answers
210 views

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling rate?

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling? For example, input sampling rate for xe-0/0/1 is one of 100 and input sampling rate for xe-0/0/2 interface is one of 500. I ...
4
votes
0answers
340 views

HSRP IPv6 configuration

Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'. interface FastEthernet0/0 no ip address duplex auto speed auto ipv6 address 2020:...
4
votes
0answers
99 views

mp_reach_nlri bgp Update with 4-byte Community ASN?

I am BGP peering with a Juniper OS router. When starting the connection, my system advertises 4-byte ASN capability, which is accepted by the Juniper router: Jul 28 00:33:00.664202 BGP RECV 4 Byte ...
4
votes
0answers
160 views

ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217

When I enabled debugging: PIM#debug ip igmp snooping router I get in logs: Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217 Configuration for interfaces: ...
4
votes
0answers
733 views

Sonicwall with BGP unable to route to AWS VPN

I'm trying to get our local Sonicwall NSA 2600 to connect to a AWS VPN, within a VPC. I have the IKE portion working and AWS shows the two pipes are connected The BGP routes show as up in the router ...
4
votes
0answers
196 views

E1 over SDH, CRC increasing

I'm Having problem with CRC on E1 interface, after I found clock slips, I have configured "network-clock-participate wic" and "network-clock-select". But I think that is not the cause of CRC, when I ...
4
votes
0answers
384 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
4
votes
4answers
2k views

PAT and Static NAT not working together?

The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT. Configs: S_HQ ! interface FastEthernet0/1 switchport ...
4
votes
0answers
784 views

Juniper SRX IPv6-PD update-router-advertisement issues

I'm trying to get some sweet prefix delegation working on my SRX. My provider offers DHCPv6-PD and gives out /56 addresses. I have done setups using cisco routers and am trying to replicate it onto a ...
4
votes
1answer
1k views

SonicWall TZ210 PPPoE on WAN interface, need transparent bridging to DMZ

I've got a SonicWall TZ210 which connects to the WAN via PPPoE on the X1 interface. I've got a /29 subnet routed into the box, and everything is running fine. Now, I need to route one of the WAN IP ...
3
votes
0answers
86 views

What is the real standard behind the “Rule of 6” for running network cabling next to power?

Something I picked up years ago at a previous employer is the "Rule of 6": When running data lines in parallel with power for a distance of at least six feet, the data should be at least six inches ...
3
votes
0answers
95 views

Behaviour of TCP SACK

I will ask the question based on the following scenario. Assume I have to send 10 packets using TCP using a window size of 5. I send 1, 2 and receive ACK for them, I send 3 and the ACK is lost, I send ...
3
votes
1answer
116 views

How is a MS (Mobile Station) Identified prior to GPRS attach?

So, originally the MS sends a Packet Channel Request over PRACH and then the BSC (PCU) responds with a Packet Uplink Assignment over PAGCH. How does this PDTCH allocation get picked up by the correct ...
3
votes
1answer
150 views

What does “l2protocol peer x” exactly do?

i'm struggeling with some Layer2 Service within one of my customer's MPLS networks. My aim is to provide a L2VPN Service between two ISR4000 Boxes that act as CPE in my MPLS platform. This L2 Service ...
3
votes
0answers
46 views

Why does TCP exit out of slow-start faster than expected?

For context, I am testing a client-server TCP flow, where the client makes a request for a file, and the server sends the file using regular TCP streams. Both servers are using the "Cubic" ...
3
votes
0answers
45 views

Cisco ASA 5525-X Input Current

In switches, like Cisco Catalyst 2960X-24TS-L, datasheet mention input power: 100 to 240 VAC, 1A to 0.5A. So, I assume input current = 1A@100VAC and 0.5A@240VAC or Cisco Catalyst 3850 + Power Supply ...
3
votes
0answers
116 views

Need to configure site to site SSL VPN between two Cisco routers

I would like to configure site-to-site SSL VPN between two sites. I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
3
votes
0answers
139 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
3
votes
0answers
557 views

What is the effect of using “ntp allow mode control 0”?

I am attempting to mitigate the issues surrounding bug report CSCum44673. According to the software release notes found here, I need to ensure that all of my routers are on IOS version 15.2(2) or ...
3
votes
0answers
44 views

How do you specify BGP Authentication Key when using Verizon's Secure Cloud Interconnect?

I am trying to establish a Direct Connect Link using Verizon's Secure Cloud Interconnect service. I have established the connection in the Dynamic Network Manager on the Verizon side and the VIFs ...
3
votes
0answers
78 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
3
votes
1answer
136 views

Pass traffic from remote access to site to site tunnel

I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
3
votes
1answer
671 views

Direction incoming vs outgoing in logs

I'm trying to understand some Fortinet firewall logs but I'm not sure I fully understand what is being logged by the firewall when it comes to direction (Incoming vs Outgoing) For example: srcip=7.7....
3
votes
0answers
1k views

NetFlow configuration on Catalyst 4500-X

I have a problem with config NetFlow on 4500-X switch. This is NetFlow config flow record NFArecord match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address ...
3
votes
0answers
286 views

STB generate IGMP Leave without reason

In my network STB generates IGMP Leave (in STB logs "End of Stream") without any reason or there is something what I don't understand. There is one exeption STB directly connected to PIM (ASR920) ...
3
votes
0answers
87 views

Cisco auto smartport - description removal

let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
3
votes
0answers
56 views

Configure C1861 for SIP to FXS port

I found a C1861 ISR router and I would like to play with it a learn some telephony. I signed up for a VOIP service so I have SIP credentials. Is there a simple walkthrough anywhere to set up the SIP ...
3
votes
1answer
465 views

WPA2 Enterprise with NPS and WLC

I am pretty new to this and am trying to set up WPA2 enterprise where users can connect to the Wifi using their AD credentials (PEAP-MSCHAPv2). The Cisco WLC has been configured to relay requests ...
3
votes
0answers
175 views

HP 5500 JD374A Port naming convention

Hi to all :) To most of you it'll prolly sound like a very silly question to ask, however to me as a fresh network trainee the answer is unfortunately not so obvious. So, the question is whether the ...
3
votes
0answers
264 views

Hp Procurve Action ignored in download mode

From an tftp server I'm trying to import the config to startup-config using copy tftp startup-config 10.0.0.10 5006zl.cnf The switch asks for confirmation y/n and when pressing y it just aborts ...
3
votes
0answers
782 views

Is IKEv2 remote access VPN possible to an ASA 5510 without Cisco AnyConnect as the client?

I'm trying to configure a remote acccess vpn into a cisco ASA 5510 (9.1(7)15). I want to be able to use IKEv2 with Certificate + user/password xauth with strongswan as the client under Ubuntu. I ...
3
votes
0answers
865 views

Dual ISP NAT Failover Not Working

I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
3
votes
0answers
2k views

Regarding vPC Dual Active or Split Brain scenario

Consider the below topology: Imagine that both the vPC peer keepalive link and vPC peer link have gone down. I am trying to understand how will that lead to unpredictable traffic flows or loops. ...
3
votes
1answer
217 views

FlowVisor Slices

Good day all! I encountered a problem while I was running flowvisor In mininet. The same problem occurred also when I tried running it on different VM (Ubuntu server 14.04). I was able to install ...

15 30 50 per page