All Questions
835
questions with no upvoted or accepted answers
2
votes
1
answer
353
views
Allow outgoing connections
I have an Arista switch (EOS) and I'm having trouble allowing outgoing connection from the switch to the outside. Using tcpdump I can see that no packets are being allowed. This has an impact on DNS ...
anon
1
vote
0
answers
19
views
Juniper and EdgeCore dhcpv6-relay remote-id (option 37)
I have the following problem. I have minimal configuration of dhcpv6-relay agent on QFX5100. Before the QFX, there is an Edgecore switch on which DHCPv6 snooping is enabled. The problem occurs as soon ...
- 11
1
vote
1
answer
54
views
Cisco BGP RTBH in EVPN fabric
I have Cisco basic EVPN fabric configuration in DC with two spine and couple of leafs using OSFP+iBGP for underlay fabric. My border leaf connected to my ISP using Vrf CUST. I want to configure RTBH ...
- 4,379
1
vote
0
answers
59
views
Trouble configuring BGP policy 'next-hop self' in JunOS
Networking Community,
Problem: I am struggling with applying the correct BGP “next-hop self” policies in JunOS.
Background: I have been brushing up setting BGP policies, e.g. ‘direct’, ‘next-hop self’,...
- 325
1
vote
0
answers
36
views
L2 Circuit ober BGP Signaled MPLS
We are providing MPLS Network services to Customers via Ethernet Links. Our CPEs (mainly Cisco) are linked via VLAN Subinterfaces to the PEs (Juniper MX). Due to the increasing demand of Multiple ...
- 536
1
vote
0
answers
44
views
Need for additional Master Port Role in MSTP
MSTP IEEE specification, it says the Root Port for CIST will be the Master Port for all MSTIs. I'm wondering what is the need for this additional port role, is it just to isolate the region boundaries ...
- 11
1
vote
2
answers
103
views
Can the Cisco SF302-08 switch support IP routing capabilities?
I'm currently working on configuring inter-VLAN routing on a Cisco SF302-08 switch. I've already enabled Layer 3 routing, created the VLANs, assigned them to switchports, and configured the switch ...
- 11
1
vote
0
answers
32
views
Issue with Cisco ASA IPSec VPN clients can't access DMZ network
I have one ASA that is configured for IPSec VPN Cisco client. The VPN allow access to inside network, but trying to get it to my DMZ is a problem. My VPN address pool is defined as 124.140.1.x /24. My ...
- 11
1
vote
1
answer
68
views
If a cisco switch is on the other side of a wire when it's plugged into a cable tester; is that dangerous?
This cable tester has numbered fobs that plug in the other end of an Ethernet port and report back which number they are;
If the cable tester is accidentally plugged into a switch port when the test ...
- 331
1
vote
0
answers
22
views
mpls load balancing in the core
Hi I am working with this topology:
The BNG router receives from the 2 NCS5508 (P routers) l2vpn traffic that terminates in l3 on a PWHE interface. Those interfaces are used as subscriber interfaces ...
- 21
1
vote
1
answer
75
views
Why does 1000BASE-T require a crossover function?
IEEE 802.3-2018 §40.8.2 Crossover function reads:
Although the automatic MDI/MDI-X configuration (see 40.4.4) is not required for successful operation of 1000BASE-T, a crossover function must be ...
- 141
1
vote
0
answers
55
views
Setting the EVPN VXLAN Interconnect ESI for Data Center Interconnect (Seamless EVPN VXLAN Stitching)
With reference to Juniper Networks , when implementing data center interconnect (DCI) using seamless EVPN VXLAN stitching , why do we have to define iESI (interconnect ESI) to stitch VXLAN VNI from ...
- 1,120
1
vote
1
answer
74
views
BGP: Are Virtual Internet Exchanges more efficient than normal internet transit?
There are a number of virtual internet exchanges that BGP peer over VPN links when local presence is not available. Given the IP encapsulation overhead, and the fact that these routes still cross the ...
- 167
1
vote
0
answers
50
views
l2circuit-control-passthrough on Juniper MX Boxes
I need to do some Y.1564 Measurements between 2 Cisco Boxes that are connected by a L2 Martini Circuit on a Juniper MPLS Fabric based on MX480s and MX204s.
I think the default behavior of Juniper is ...
- 536
1
vote
0
answers
39
views
Set promiscuous port for upstream LACP trunk on Cisco 2960X
I have a series of clients who are looking into a intra-VLAN isolation scheme to satisfy a DDQ request.
I was looking into deploying private VLANs for all client device / voice VLANs to satisfy this ...
- 11
1
vote
1
answer
73
views
Wrong subnet configuration works anyway in a shared bus, but doesn't work in switched lan. Why?
I was told that this configuration (which contains an error in DNS mask which is /23 instead of /24) works only because it's a SHARED bus. If it was a SWITCHED lan, the DNS responses from DNS to A ...
- 111
1
vote
0
answers
84
views
JunOS tagging aggregate route from more specific route - bgp communities
I have a certain use case with rtbh for the following:
A /32 route (say 10.1.1.1/32) is injected into the network with a specific bgp community
I'd like to match the aggregate prefix that /32 belongs ...
- 1,388
1
vote
0
answers
94
views
Globally raise IP ARP inspection limit rate on Cisco
I am trying to raise the ip arp inspection limit rate from the default rate of 15 on my Cisco 9300 since I am getting to many %SW_DAI-4-PACKET_RATE_EXCEEDED: x packets received in xx milliseconds ...
- 123
1
vote
1
answer
54
views
ARista 7280SR-48C6 routing table size
i want to use a 7280SR-48C6 as edge switch and i read arista datasheet but i could not find how many ipv4 and ipv6 it can hold. can i have 4-5x IP transits with full tables and 30-40x private peering ?...
- 599
1
vote
1
answer
528
views
MTU for WireGuard over IPv6
What would be the optional MTU for a virtual WireGuard link transmitting over IPv6 to avoid unnecessary fragmentation?
Here is how I approached the calculation:
[IPv6 Header] - 40 bytes
[Some IPv6 ...
- 111
1
vote
1
answer
194
views
Communication between hosts on different local networks
I understand how NAT works in case of communication between one, local host and a server with specific public IP address. The host is sending a request, it pushes the packet with destination IP ...
- 23
1
vote
0
answers
106
views
Redistribution Loops and Route Tagging
I've read that when we configure multipoint redistribution, it's a good idea to tag our routes to prevent them from being advertised from Protocol 1 - Protocol 2 - Back to Protocol 1.
Source: ...
- 803
1
vote
2
answers
294
views
What Does Exactly Happen When A Switch Is Connected To A Portfast Port?
I am trying to get a thorough understanding of what does happen when a switch is connected to a portfast port on another switch that is part of a stable STP network in case of:
1- the port has no ...
- 285
1
vote
1
answer
328
views
DDNS for Palo Alto Behind NAT Internet
We would like to configure SDWAN for our branch site that only has broadband internet. In order to do that we need to know from which public IP does the PAN use to initiate the SDWAN. Because the ...
1
vote
0
answers
33
views
Should a multicast router punt the multicast packets in addition to routing those packets if the router has an interface in this multicast group?
If the multicast router has the (S,G) route present and the same destination address G is also set on one of the router interfaces, then should the router send the packets addressed to group address G ...
- 1,033
1
vote
1
answer
316
views
where can I check assigned phisical IPAddress on FXOS cli and is that possible to access GUI of FXOS?
I am a newbie of my companie's Network department and my boss wants me to check the IP-ADDRESS of each port of our Firepower of cisco.
We have two models of it, one is 4100 series and another is 2100 ...
1
vote
0
answers
78
views
802.11ah Wi-Fi HaLow theoretical network throughput with 100s of clients
What is the theoretical network throughput of a 802.11ah WiFi HaLow network with lets say 300 clients connected to a single AP? The networking overhead is supposed to grow with the number of stations ...
- 121
1
vote
0
answers
43
views
What is "n6" in transparent architecture (NG-RAN)?
Hello everyone!
I study the NG-RAN logical architecture described in TS 38.401, baseline for NTN scenarios.
I have found the picture of transparent architecture, you see below. I can not find a ...
- 111
1
vote
0
answers
155
views
Can't Pass 1 VLAN Through Trunk
I have 2 Cisco switches running IOS with VLANS 20,30,40,50. On SWITCH1 I have servers on Ports 1,2&3 on VLAN 30. I also have a laptop on port 5 on the same VLAN 30 and can ping the servers. They ...
- 461
1
vote
1
answer
576
views
Cisco 9500 switch stack
I have a cisco 9500 switch that is live/up in productions but I need assistance or more information on how to add a few more switches to create a switch stack and would like to be pointed in the right ...
- 41
1
vote
0
answers
89
views
Change mac-address with Netconf
I am playing around with Netconf and I try to do some configurations with the openconfig yang models. I use ncclient to send the configuration and netconfd from the yuma123 project to simulate a ...
- 11
1
vote
0
answers
100
views
HSRP does not work on two switches. Cisco
The problem is this: clients receive IP addresses from the L31 DHCP server, but they cannot ping the gateway, although HSRP seems to be working, there are no problems, I suspect that this is a bug in ...
- 11
1
vote
1
answer
335
views
Multiple GRE tunnels towards single host using anycast IP
I'm trying to build the following network architecture:
Where clients try to connect to a backend server (e.g. SSH) by using a Public Anycast IP adddress (1.2.3.4), that routes the client to the ...
- 11
1
vote
0
answers
111
views
Cisco device chooses link with higher cost as the root
The problem is that psw11 (SG350-28P) is choosing the path to sw10 (C2960L-48TS-LL) with a cost of 20000 as the root instead of the path to sw56 (C2960L-48TS-LL) with a cost of 10000, even though the ...
- 11
1
vote
0
answers
28
views
What are the triggers for PIM-DM prune and assert messages?
There are articles explaining the PIM-DM mechanics, and they only confused me. Considering the most common topology, that of three routers, connected to each other like a triangle as such:
R1 -- R2
\ ...
- 183
1
vote
0
answers
117
views
Was Bluetooth AMP actually used?
Bluetooth AMP (Alternative MAC/PHY) is a way for bluetooth of using the 802.11 MAC/PHY, e.g. Wi-Fi, as a transport to send "High Speed" data, hence the "HS" in the "Bluetooth ...
- 11
1
vote
0
answers
50
views
Restconf not getting switchport vlan information
I have a couple of catalyst switches which I'm experiencing an interesting issue using APIs not pulling all the information I need.
The switches are running IOS-XE 17.6.3, but I have also seen the ...
- 11
1
vote
0
answers
1k
views
Cannot access to Fortigate FW through mgmt port after forming HA
The two FW are Fortigate WiFi 60E, OS v7.2.0 build1157.
The HA connection on the two FortiWifi60E was like
PC1-----Fortigate FW1-----Fortigate FW2-----PC2
PC1 IP:192.168.1.100
PC1 default gateway:192....
- 25
1
vote
0
answers
794
views
Nexus 7706 - switchport trunk allowed vlan not working - all VLANs are being allowed
I noticed that my two Nexus 7706 do not limit the trunk VLANs to what switchport trunk allowed vlan is set to.
Sample configuration:
interface Ethernet1/15
switchport
switchport mode trunk
...
- 226
1
vote
0
answers
137
views
Can I check the security policies hit-count in juniper routers via SNMP?
Am trying to see if there is a way to get the output of "show security policies hit-count descending" via SNMP,
it has the following o/p like so,
show security policies hit-count descending
...
- 11
1
vote
0
answers
741
views
How I can filter only quic packets with `tcpdump` command?
I want to capture only QUIC UDP datagrams on 443 port.
With following command tcpdump reports all udp packets that arrive to the host on port 443.
tcpdump -n udp -SX -i any port 443
How I can set it ...
- 111
1
vote
0
answers
242
views
Full Cone NAT on Cisco router in Packet Tracer
I am trying to create a network with two subnetworks with private IPs. I need to configure symmetric NAT on edge routers within the subnetwork.
Diagram:
I need to configure NAT on Router0 and Router2....
- 11
1
vote
0
answers
134
views
Cisco switch police bandwidth for IPv4 and IPv6 traffic
I am trying to limit the bandwidth of several VLANs on Catalyst 3750X (c3750e-universalk9-mz.152-4.E10.bin) and Nexus 3064PQ (n3000-compact.9.3.9.bin) switches without success...
It is necessary to ...
- 11
1
vote
2
answers
305
views
bgp and routing
I need a bit of help understanding what is going on in my topology.
I really want to understand why i can ping 1.1.1.1 from r4 but not from r5 or r6.
Please help and advise me.
Many thanks guys
r1
...
- 11
1
vote
1
answer
766
views
FSSO Collector agent shows old logs
Troubleshooting serious issue with FSSO - Users not getting access to internet because the primary FSSO agent fails to receive those user log on events. Out of 3 agents configured (2 in DC1 and 1 in ...
- 11
1
vote
0
answers
258
views
MACsec encryption feature on Cisco NX-OSv 9000 Virtual Software?
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/nx-osv/configuration/guide/b_NX-OSv_9000/b_NX-OSv_chapter_01.html
The above link only stated some examples of features which ...
- 111
1
vote
1
answer
91
views
Can an application on two separate devices share a packet to similar resource?
Can packets requested for an image by an app on a phone be sent to same app on another phone by another user?
1
vote
0
answers
91
views
How do I set up IPv6 multicast over an MPLS carrier?
I'm setting up an MPLS carrier with VPNs in GNS3, using Cisco 7200 routers.
Exact version I'm using is C7200-ADVIPSERVICESK9-M Version 15.2(4)S5, but I'm willing to upgrade/change if that's needed.
On ...
- 121
1
vote
0
answers
34
views
ASAv VM version
Where can I find the VM version for the ASAv or how? I have tried to search it using cli and i couldn't find it as well as I searched on ASDM I was able to find only the resource not the version.
...
- 99
1
vote
0
answers
109
views
asa vlan subinterface over s2s ipsec tunnel to IOS router
I am trying to configure wireless traffic that is a separate vlan subinterface on an ASA to travel over a site-to-site vpn to an IOS router.
i have the static NAT set up to go from the (wifimain,...
- 11