All Questions
831
questions with no upvoted or accepted answers
1
vote
0
answers
150
views
Default admin deleted. Cant access CLI on Palo Alto but have access to GUI
I accidentally deleted the default admin for CLI on Palo Alto and now I can't log in. I have access to the GUI. I don't want to blow the image. Any ideas?
What I have tried:
I created a new superuser ...
- 111
1
vote
0
answers
174
views
How to export a device configuaration in Gns3
I have A Gns3 topology and i try to save my configurations to a txt file in my desktop.
I tried the [Tools] > [Import/Export node config] in the menu,[Export configs to a directory] but it only ...
- 89
1
vote
0
answers
91
views
TACACS Through ASA L2L Tunnel
Hello see below network diagram.
I am trying to configure the Branch Router (10.1.1.1) to use TACACS AAA on the HQ-AAA-Server host (192.168.10.10). TACACS works fine for the Branch-FW1 ASA device ...
- 171
1
vote
0
answers
225
views
Diffie-Hellman with PSK/PKI in the context of IKEv1
It seems I fail to understand few things about DH's functionality in the context of IKEv1.
A little bit of context first:
During IKE Main Phase, with the 3rd and 4th messages, the peers each exchange ...
1
vote
0
answers
539
views
Palo Alto Template Revert error
I am a network engineer and we have recently swapped out some Palo Alto firewalls for newer models. The old firewalls were managed in Panorama and I recently tried to integrate these new firewalls to ...
- 11
1
vote
0
answers
20
views
RSVP warning: ID "data" is not configured
I am trying to follow this document: https://www.cisco.com/c/en/us/td/docs/ios/qos/configuration/guide/12_2sr/qos_12_2sr_book/config_rsvp.pdf
to configure rsvp, using gns3, for Entering Senders or ...
1
vote
1
answer
5k
views
J9450A HP 1810-24G Switch firmware upgrade
I'm trying to upgrade the firmware on my J9450A HP 1810-24G Switch, which presently has firmware P.1.6, eCos-2.0
The firmware-update-for-an-1810 question is out there on the internet, but the ...
- 11
1
vote
0
answers
31
views
N5K-5672UP Packet Flow diagram
I have one N5K-5672UP and a few SVIs with IPv4/IPv6 public IPs, I want to have an ACL and apply that ACL to my UPLINKs and deny internet traffic towards SVIs, my question is when i do this then ACL is ...
- 599
1
vote
0
answers
205
views
Using PBR or similar for an IP SLA for a C1111-8P-TLELA with a dynamic Cellular WAN IP
I am trying to get 4G Failover working on a Cisco C1111-8P-LTELA router. I have a known working solution that I usually use with IP SLA, and a local PBR route-map that forces traffic out of the ...
- 1,478
1
vote
0
answers
108
views
Optimize Network For UDP Broadcast Traffic?
I have a computer that creates an AP which multiple microcontrollers connect to. The computer sends out UDP Broadcast packets that tell the microcontrollers to do different things.
I have an issue ...
- 11
1
vote
1
answer
171
views
Configure AAA on a router - Extended ACLs
How do I write a named extended ACL which will allow for traffic between a DNS from a LAN (IP address) to a DNS server at (IP address), ping from a host PC (IP address) to any destination and allow ...
1
vote
0
answers
435
views
Route-map to manipulate metric in EIGRP
I have following Setup
R1 --- R2 --- R3 --- R4 --- R5
The same network is being advertised from R1 and R5. There is some difference in delay between the two paths R1-R2 and R4-R5. So the route from R1 ...
- 1,709
1
vote
0
answers
29
views
Which SCTP event should I expect if remote side changes IP?
We have code that should handle that the remote side of an SCTP connection changes its IP address, but we're unsure of what that would look like on a protocol level. What, if any, event would that ...
- 111
1
vote
0
answers
155
views
How is the Metro Ethernet Forum's "hairpin switching" implemented?
To date, I've found this old document describing implementation of hairpin switching. In particular, page 13 suggests possible implementations. I would like to know what implementations exist.
A ...
1
vote
0
answers
104
views
Why cant my network send packages but piv6 pings go through?
I have the following network:
My routing is as follows:
Device configuration for ISP:
Building configuration...
Current configuration : 1388 bytes
!
version 15.1
no service timestamps log datetime ...
- 15
1
vote
0
answers
189
views
Netscaler SDX 11515 login failure after upgrade
I've got a makeshift lab scenario with an old SDX that came with 10.1 software. I'm new to these machines but have inherited the project and need to cope. I simply used the default nsroot/nsroot login ...
- 84.4k
1
vote
0
answers
40
views
B-VLAN in Shortest Path Bridging (802.1aq)
I know that there is an I-SID tag in the SPB MAC-in-MAC version for service isolation to implementing a VPN-like service. Also, it seems to me that B-VLAN is there to enable the SPB network to have ...
- 551
1
vote
0
answers
949
views
IKEv2 between Cisco router and Google cloud VPN
Hey I'm trying to create a tunnel between cisco router and google cloud vpn (client site) but the connection is stuck on stage 2 (UP-IDLE), need help where the problem may lie.
Some debug that I get ...
- 11
1
vote
0
answers
1k
views
arista pbr - set ip default nexthop
i have arista 7050s-52 and here is my config :
policy-map type pbr pbr-tun
10 class pbr-tun-acl
set nexthop 172.x.x.x
class-map type pbr match-any pbr-tun-acl
10 match ip access-group ...
- 599
1
vote
0
answers
73
views
What are non-learning and learning VLANs?
I was going through some IEEE standards for switches (IEEE 802.1aq and IEEE 802.1Qca), and came upon a terminology of learning and non-learning VLANs.
I read that learning VLANs are used in Shortest ...
- 63
1
vote
0
answers
49
views
Huawei USG OSPF P2MP Network Limits
Good day! Configured an L2TP over IPSec tunnel on Huawei USG6500E. On the tunnel interface prescribed ospf type p2mp. I connect clients to this tunnel. When 32 clients are connected, the OSPF ...
1
vote
0
answers
32
views
MRV OptiSwitch "action tag nest"
What does this command does in an MRV OptiSwitch ?
action tag nest [VLAN X]
The configuration of the whole rule is the following :
rule 1
action redirect port X
action tag nest [VLAN X]
tag eq ...
- 425
1
vote
0
answers
68
views
Distribute list behavior on outgoing routing updates
i have this topology
I'm studying route maps and pbr and distribution list , I advertise bunch of network address from R4 and R5 and R7
,i managed to leverage route maps and distribute list to remove ...
- 21
1
vote
0
answers
67
views
Redirect Junos IP public -> IP private
we have an MX204 here that works as our BGP, border router and it is gateway of a service that has private IP, I need to access this service with private IP outside our network, you can tell me if I ...
- 25
1
vote
0
answers
2k
views
VXLAN working over IGP, but no NVE peers or EVPN routes in BGP
I'm an absolute beginner with NX-OS and VXLAN. I'm trying to set up a very simple configuration for VXLAN/EVPN/BGP. I have one NX-OSv spine and two leaf switches. No VPC, no anycast SVI. The ...
1
vote
0
answers
44
views
Could using punch-down blocks with long stripped ethernet cables cause signal loss or any other issue?
I see it on the internet where people strip and untwist their wires more than 10 cm to use with punch-down blocks. Won't this cause cross-talk or can other noises effect the signal when cables are ...
- 11
1
vote
0
answers
36
views
Does modifying a ASA tunnel create a downtime?
I inherited a cisco ASA, I never really had to manage one before. But, I need to modify an existing tunnel to add IP addresses to both the local and remote traffic selector, specifically there are ...
- 111
1
vote
0
answers
361
views
802.11s versus IBSS mesh (with layer 3 routing protocol)
I just learned that you can create a Wi-Fi mesh network either with the "native Wi-Fi mesh standard" 802.11s, or by putting all devices of the network in the IBSS mode and run a layer-3 mesh ...
- 111
1
vote
0
answers
59
views
Configure nat on src ip to dst port
I wondering about some workaround for issue that I have: I have 2 sources which generates multicast to 224.1.1.1 and port 12345. I'd like to configure on my Cisco IE 3000 NAT which will change the ...
- 183
1
vote
0
answers
405
views
Multicast traffic through Cisco3850
I have a test scenario and trying to pass multicast traffic through Cisco 3850 according to the following diagram:
- 11
1
vote
0
answers
158
views
Getting VRF to work (and some other questions)
I'm messing with BGP/MPLS for the first time and I have some doubts both in if I'm doing something wrong with my configuration and if it is the best approach, hope you guys can clarify me a bit here.
...
- 101
1
vote
0
answers
203
views
EVPN+VxLAN strange silent host issue
EVPN+VxLAN very strange silent host issue
I have very basic EVPN+VxLAN design where i used OSPF/Multicast/BGP/vPC technologies to build small size datacenter. L2VNI working great without any issue. I ...
- 4,379
1
vote
0
answers
186
views
5G NR PUCCH format-0
In 5G-NR PUCCH format-0, for multiplexing of UE's (i.e., UE's sharing the same RB for resource allocation) which are sending the same/different HARQ's or SR should have different initial cyclic shift(...
- 11
1
vote
1
answer
495
views
How to block telnet access for one particular network from all networks except one using Extended ACL
Scenerio is given in the picture. I want to block all the networks except 192.168.5.128/25 from doing telnet of 192.168.5.0/25.
- 21
1
vote
0
answers
348
views
How can I deny or block an IP Address in Cisco FTD
I have a Cisco Firepower Threat Defense firewall. I want to Block an IP and add blocked ip into BlockedIp rule.
How can I achieve it via Web Interface or REST API ?
Thank you!
- 11
1
vote
0
answers
372
views
Untagged VLAN in EVPN+VxLAN
I am dealing with very strange issue but wanted to check with experts if i am doing anything stupid or not. I have small size EVPN+VxLAN clos network (OSFP+iBGP+Multicast+Arp-suppression (no ...
- 4,379
1
vote
0
answers
74
views
Mistakenly added switch configuration on Cisco router 2951 so now it is showing gibberish data on CLI
I have Cisco 2951 router in which my colleague mistakenly uploaded switch configuration from tftp server. Now it is showing gibberish data on CLI when it boots up. I tried to get into the ROMmon mode ...
- 21
1
vote
1
answer
299
views
Nexus N3K-C3064 SNMP ACl is not working
I have a N3K-C3064PQ-10GX and here is my snmp configuration:
Community Group / Access context acl_filter
_________ ______________ _______ __________
X network-operator ...
- 599
1
vote
0
answers
729
views
Cisco IOS XR RPF filter bug?
Based on this documentation: https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/security/62x/b-system-security-cg-ncs5500-62x/b-system-security-cg-ncs5500-62x_chapter_01001.html I'm trying to set up ...
- 111
1
vote
0
answers
483
views
Cisco ASA 5585-x Failover Virtual MAC address
I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question ...
- 4,379
1
vote
0
answers
81
views
Windows L2TP VPN issues when accessing Site to Site VPN on Cisco 5506
We have two Site to Site VPNs and Remote Access VPN configured. Using the builtin IPsec client on OSX all subnets are accessible however when using L2TP built in client on Windows 10 ICMP traffic ...
- 11
1
vote
0
answers
97
views
Access-class in denies telnet under specific configuration
So I created an Access-list to permit telnet from a specific subnet. Here is the network diagram.
I originally tried permitting the subnet 10.1.1.0 /24 to access the R4 vty lines 0 4. It was a ...
- 69
1
vote
0
answers
490
views
Cisco ASA 5506: Adding two public IP's that are on the same subnet for the primary and backup interface
Im programming a Cisco ASA 5506. I need to add a primary (public) IP that is x.x.x.82/24 and a backup IP that is x.x.x.81/24. The ASA wont allow me to do this as it gives me an error: "the IP ...
- 21
1
vote
0
answers
120
views
Using a switch to dynamically connect and disconnect multiple devices together in a point to point configuration
I have an interesting issue. I have to use a switch to dynamically connect and disconnect multiple devices together in a point to point configuration, without changing anything on the end user side.
...
- 11
1
vote
0
answers
89
views
Cisco QinQ - More than one s-vlan on dot1q-tunnel for the same c-vlans
I have a scenario where I have 3 service vlans (10,20,30) from a trunk port and need to brige our customer vlans (100,200,300,400) between all the service vlans. I need to do it all in the same switch ...
- 11
1
vote
0
answers
104
views
VETH ports not working for cisco vIOS L2 devices (vios-l2 and nx-osv) using kvm/qmeu for virtualisation
Ok, so I've been toying with veth links for my Cisco routers and they have been working fine. However when you throw in a virtual switch like the Cisco nx-osv or vios l2 image, using veth interfaces ...
- 11
1
vote
0
answers
106
views
In Bgp TTL security all control packets will have configured hop value?
Topology:
loop(2.1.1.1) - routerA (192.168.1.2)--------- (192.168.1.1) routerB - loop(1.1.1.1)
I have eBGP peering configured with a Multihop of 2 on both sides and static routes to reach loopbacks.
...
1
vote
0
answers
145
views
Connecting layer 3 switches together without trunking
I currently have 2x Juniper EX4200 and I'm looking into changing it into Ubiquiti EdgeSwitchs.
The diagram:
SW01 and SW02 are connected to each other using OSPF P2P. Both of the switches have their ...
- 36
1
vote
0
answers
81
views
Upstream QoS garanteed bandwidth
In the network I'm trying to manage there is a satellite link, the upstream of which is ~ 7 Mbps. In this upstream, I need to allocate 1.5 Mbps of guaranteed bandwidth for one single host, but nothing ...
- 45
1
vote
0
answers
350
views
Configue IOS DHCP server to respond to Option 60 class
I have a number of small networks each with about half-a-dozen mostly-fixed hosts. The routers on each network provide DHCP service for the occasional visiting engineer's laptop. I am adding IP ...
- 16.2k