All Questions

709 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
13
votes
0answers
670 views

PIM-SM with BSR over SSG5 VPN tunnel

I've created a lab to troubleshoot an issue I'm having with PIM-SM and BSR. There are two sites connected via two Juniper SSG5s (6.3.0r17) with just enough configuration to focus on the problem at ...
10
votes
0answers
2k views

Openswan-Sonicwall VPN tunnel

I've been trying to figure this out but all the documentation I can find seems to be very old. The feeling seems to be that once Dell acquired Sonicwall, documentation became sparse and mostly useless....
8
votes
1answer
1k views

How to break apart an IPv6 /56 6rd delegated prefix from ISP into multiple /64 VLANs for use with SLAAC EUI-64? [Cisco]

I have CenturyLink Internet service, and they have a 6RD IPv6 deployment where they hand out an IPv6 delegated prefix /56 block to me and allow me to use it as I wish. My Cisco ISR router receives the ...
7
votes
1answer
380 views

Where is the traffic going?

Here is a routing puzzle: I'm working on a poorly documented network, and I'm trying to document things as I discover them. R1 is a core L3 switch. R2 is a router. The FW is a, well, firewall. On ...
6
votes
0answers
858 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
6
votes
0answers
527 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
6
votes
0answers
671 views

VirtualAccess Behavior with PPP

A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
5
votes
0answers
360 views

Cisco nexus 9396 rebooted with reason xbar_client

Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
5
votes
0answers
242 views

E1 over SDH, CRC increasing

I'm Having problem with CRC on E1 interface, after I found clock slips, I have configured "network-clock-participate wic" and "network-clock-select". But I think that is not the cause of CRC, when I ...
5
votes
4answers
3k views

PAT and Static NAT not working together?

The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT. Configs: S_HQ ! interface FastEthernet0/1 switchport ...
5
votes
1answer
6k views

Why is routing not working on my Dell N2048 switch

I am in the process of replacing some older Dell Powerconnect switches with a some Dell N2048 switches. While doing this I wanted to go ahead and segregate certain areas of my network using VLANs. ...
5
votes
1answer
261 views

Juniper ERX 310 traffic not going more than 710 mbps?

We have a Juniper ERX 310 configured as B-ras, as per specifications of the router, we should be able to terminate 8000 PPP sessions, but we notice that traffic on the router interface not going more ...
4
votes
0answers
153 views

EVPN MAC Advertisement route not installed to L2 forwarding table

I have a VLAN-based EVPN connecting two sites in a lab environment based on the network topology described in the DAY ONE: USING ETHERNET VPNS FOR DATA CENTER INTERCONNECT book: For some reason, it ...
4
votes
0answers
111 views

PVLANs/Port isolation in IPv6 networks

We're currently using port isolation to prevent communication between computers on the same vlan and use client isolation on our guest wifi. The reason for having this enabled is to prevent unwanted ...
4
votes
0answers
1k views

Cisco ASA IPsec tunnel QM FSM error

I am setting up Cisco 5585 ASA for IPsec tunnel with one of cloud company. we already have lots of tunnel for various cloud provider and life if good but recently this tunnel giving me hard time to ...
4
votes
0answers
804 views

Cisco nexus STP loopguard

I have cisco nexus switches in vPC and they are connected to HP c7000 blade center switches and all my c7000 blade server has Linux Bridge is running, i believe something went wrong somewhere in Linux ...
4
votes
0answers
142 views

Redundant physical interfaces for Cisco pseudowire-class

I have a link which is LT2P from a site router R1 (Cisco 867-VAE, IOS 15.3) which has two external interfaces defined (dialer1 and vlan-1000), but only one plugged in (first is ADSL, second is ...
4
votes
0answers
365 views

Need to configure site to site SSL VPN between two Cisco routers

I would like to configure site-to-site SSL VPN between two sites. I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
4
votes
0answers
272 views

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling rate?

Do Juniper MX-series routers support per-interface jFlow/IPFIX sampling? For example, input sampling rate for xe-0/0/1 is one of 100 and input sampling rate for xe-0/0/2 interface is one of 500. I ...
4
votes
0answers
787 views

HSRP IPv6 configuration

Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'. interface FastEthernet0/0 no ip address duplex auto speed auto ipv6 address 2020:...
4
votes
0answers
234 views

ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217

When I enabled debugging: PIM#debug ip igmp snooping router I get in logs: Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217 Configuration for interfaces: ...
4
votes
0answers
1k views

Is IKEv2 remote access VPN possible to an ASA 5510 without Cisco AnyConnect as the client?

I'm trying to configure a remote acccess vpn into a cisco ASA 5510 (9.1(7)15). I want to be able to use IKEv2 with Certificate + user/password xauth with strongswan as the client under Ubuntu. I ...
4
votes
0answers
456 views

Dual-Hub DMVPN Outage

Our backup links have always utilized a GRE tunnel based VPN to a hub. Recently we installed a second hub and migrated the primary links to GRE tunnel based VPN with EIGRP to handle routing between ...
4
votes
0answers
529 views

Cisco ASA 5505 Remote Access IPSec - Tunnel Rejected - The maximum tunnel count allowed has been reached

I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message: %ASA-4-713239: IP_Address: Tunnel Rejected: ...
4
votes
0answers
275 views

IOS XE minimum frame size

I recently encountered an issue upgrading from an IOS device to an IOS XE ASR 1000 router concerning Ethernet Over SONET (EOS). VLAN tags are used to map traffic from the hub router to SONET ...
4
votes
0answers
79 views

Customising Cisco Clientless VPN Password Change Screen ASA5525

I'm working with one of the network engineers to customise our login screens for the Cisco clientless VPN, which, apart form time consuming, has been fine (knowledge gap on both of our parts). As part ...
4
votes
0answers
190 views

Shaping on ES20/7606-S

I've recently moved from point-to-point WAN to a point-to-multipoint WAN, unfortunately this has really messed up my brain...in regards to shaping. These circuits are aggregated into three physical ...
4
votes
0answers
11k views

Problem ipsec site to site ASA

I am receiving this error when I try to establish an ipsec site to site vpn: PSEC: Parsing PFKey GETSPI message IPSEC: Creating IPsec SA IPSEC: Getting the inbound SPI IPSEC: New embryonic SA created ...
4
votes
0answers
5k views

Change IP address in Cisco Prime infrastructure

Is it possible to change the Cisco Prime Infrastructure platform's IP address after PI has been installed ? This reference in the docs seems to indicate that you can. ncs/admin(config)# interface ...
4
votes
2answers
1k views

SonicWall TZ210 PPPoE on WAN interface, need transparent bridging to DMZ

I've got a SonicWall TZ210 which connects to the WAN via PPPoE on the X1 interface. I've got a /29 subnet routed into the box, and everything is running fine. Now, I need to route one of the WAN IP ...
4
votes
1answer
1k views

Enable SNMP traps for ACLs using Cisco IOS?

Does anyone know if it's possible to enable SNMP traps to be sent from a Cisco IOS device when an ACL blocks traffic? I'd like to send a trap whenever a deny statement gets a hit. I've only been ...
3
votes
0answers
59 views

SSH to ASA on Exit Side Of VPN Tunnel

I have a functioning L2L tunnel between two ASA devices (HQ-FW1 and Branch-FW1 on the diagram). HQ-PC2 - 192.168.10.21 HQ-FW1 eth0 - 192.168.20.2 (outside) HQ-FW1 eth1 - 192.168.10.2 (inside) Branch-...
3
votes
1answer
35 views

N5K-5672 CoPP issue

I have a N5K-5672UP with enterprise license and I execute these commands to protect my control plane : control-plane service-policy input copp-system-policy-default There is 2 issues: When I execute ...
3
votes
0answers
49 views

RESTCONF call to GET/UPDATE switchport configured vlan for IOS-XE running on CAT 3850

I'm unable to figure out the restconf URI needed to GET the configured VLAN for a given switchport interface for IOS-XE. I would also like to be able to UPDATE a switchport-access VLAN given a port. I'...
3
votes
0answers
58 views

Why does RSTP send proposal bit and agreement bit as '1' initially?

From a recent Wireshark capture of a RSTP BPDU on a switch, both proposal and agreement bits were set to '1'. In my understanding, initially both switches 'propose' themselves as root. The better root ...
3
votes
0answers
38 views

Mixing 802.11 channel widths

I don't want to dive too deep into Apple's approach to 802.11 other than to say it's what sparked this question. Apple's CoreWLAN setWLANChannel() method allows macOS application to set the NIC wifi ...
3
votes
0answers
54 views

Arp Protect in dynamic VLAN environment

I am using 802.1x authentication with dynamic Vlan assignment(CPPM). As you may know, when a user logges in to their computer, SW attaches the user port to related Vlan. Thinking the scenario in which ...
3
votes
0answers
50 views

Are there any of NX-OS switchport "meta tags" alike features?

I believe I once stumbled across an NX-OS feature which we currently need, but for the sake of it, I can't remember the details like platform (100V, 5000, 7000) or version. We are currently using 5600'...
3
votes
2answers
180 views

Behaviour of TCP SACK

I will ask the question based on the following scenario. Assume I have to send 10 packets using TCP using a window size of 5. I send 1, 2 and receive ACK for them, I send 3 and the ACK is lost, I send ...
3
votes
0answers
62 views

Cisco ASA 5525-X Input Current

In switches, like Cisco Catalyst 2960X-24TS-L, datasheet mention input power: 100 to 240 VAC, 1A to 0.5A. So, I assume input current = 1A@100VAC and 0.5A@240VAC or Cisco Catalyst 3850 + Power Supply ...
3
votes
0answers
431 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
3
votes
0answers
119 views

Can I do Q-in-Q vlans between Dell and Cisco switch

Our Head Office is connected to our DR location between an L2 tunnel provided by our ISP. I need to establish a Q-in-Q setup between both sides to pass multiple VLANs through. Our head office has a ...
3
votes
0answers
199 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
3
votes
0answers
94 views

802.1Q-2014 I-Tag and MAC addresses

I am reading IEEE 802.1Q-2014 for interest. This incorporates I-Tags, which define backbone service instances. In a few places, the standard implies or states that the I-Tag includes the C-DA and C-SA....
3
votes
0answers
441 views

Cisco phone display name change

I am trying to change name on cisco ip phone 7942. I changed the name in directory number configuration and in phone configuration of phone on CUCM. I did reset of phone too. But still showing the old ...
3
votes
0answers
373 views

STB generate IGMP Leave without reason

In my network STB generates IGMP Leave (in STB logs "End of Stream") without any reason or there is something what I don't understand. There is one exeption STB directly connected to PIM (ASR920) ...
3
votes
0answers
100 views

Cisco auto smartport - description removal

let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
3
votes
0answers
317 views

HP 5500 JD374A Port naming convention

Hi to all :) To most of you it'll prolly sound like a very silly question to ask, however to me as a fresh network trainee the answer is unfortunately not so obvious. So, the question is whether the ...
3
votes
0answers
1k views

Dual ISP NAT Failover Not Working

I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
3
votes
0answers
3k views

Regarding vPC Dual Active or Split Brain scenario

Consider the below topology: Imagine that both the vPC peer keepalive link and vPC peer link have gone down. I am trying to understand how will that lead to unpredictable traffic flows or loops. ...

15 30 50 per page
1
2 3 4 5
15