New answers tagged

0 votes

Understanding Cisco standard access lists (Packet Tracer example)

getting to different answers might be confusing but to see the difference we should use simulation mode in packet tracer . by blocking the way on pc0 to reach to pc1 when pinging from pc0 it will say ...
user avatar
1 vote

DOT1X: A practical case for ForceUnauthorized state

Primarily, ForceUnauthorized and ForceAuthorized options are used for testing and auditing. Using them, you can see how a client behaves and what it can or can't do. Other uses include quick ...
user avatar
  • 70.5k
2 votes

OSPF routes are not advertised

OSPF will not make up addresses, so the two network statements: network 172.16.10.0 0.0.0.0 area 0 network 172.31.10.0 0.0.0.0 area 0 are trying to use interfaces that do not exist on your router (...
user avatar
  • 93.5k
1 vote

GNS3 - hosted or VM?

The GNS3 VM distribution is an optimized Linux VM that comes already configured to optimally run the included GNS3 simulator. Using the VM, you save yourself the effort of tweaking your hosted ...
user avatar
  • 70.5k
3 votes

RIP routes are not being advertised

You need to include the link addresses (172.33.x.x) in the rip network statements. Otherwise, RIP won't send advertisements out those interfaces.
user avatar
  • 62.5k
0 votes

Cisco Packet Trace Access-List

You first need to ask yourself do you filter traffic that leaving LAN or you want to filter trafic that enters Server network (172.16.0.0) Based on your ACL you filter trafic leaving LAN. Try this ACL ...
user avatar
0 votes

Cisco Core Switches - Identifying unused ports

If you have some Python skills, you can use the Network to Code templates to read in the output from show interface and format it as structured data. Then you can simply look at the "Last Input&...
user avatar
  • 62.5k
1 vote

Cisco Packet Trace Access-List

Based on the precise requirements, it appears you only need to restrict PC1. access-list 101 deny host 192.168.1.2 host 172.16.0.250 access-list 101 permit any any ! interface FastEthernet0/0 ip ...
user avatar
0 votes

Cisco Core Switches - Identifying unused ports

From the Cisco Community: Sh int | inc Fast|Last input If you have gig ports, change fast to Gig. Sh int | inc Gig|Last input This would show you all ports. You could narrow it down by specifying the ...
user avatar
1 vote

Cisco Core Switches - Identifying unused ports

The way I've done it in the past is use the commands "show version" to get the total uptime of the switch in question. Switch#sh ver Cisco IOS Software, s72033_rp Software (s72033_rp-...
user avatar
  • 11
2 votes
Accepted

Cisco Core Switches - Identifying unused ports

Responding to the comment: I want to see whether the ports are being used over the period of ~1 month your best way for this specific question is to use the logs. They will show when a port goes UP /...
user avatar
  • 18.4k
2 votes

I need help with Meraki AP configuration

You can make them the same by typing (or pasting) these commands: config t default interface gi 2/0/41 interface Gi 2/0/41 description MERAKI AP switchport trunk native vlan 103 switchport mode ...
user avatar
  • 62.5k
0 votes

How does a router decide what route to forward a packet when routes come from different routing protocols?

Longest match is what determines which route is taken. In other words, the most specific route wins every time.
user avatar
2 votes

Cisco ASR1006 QoS on pppoe session: Police percent not supported - no bandwidth for percent calculation

What works for us (ASR 1001X) is the following concept (paraphrased config, syntax might be slightly different). The idea is to have a shaper in the parent class, so the child classes have a reference ...
user avatar
1 vote
Accepted

VLAN and firewall interconnection

You haven't specified which kind of firewall you're using, so we can only provide general advice. You can either use a separate connection for each VLAN between the central switch and the firewall - ...
user avatar
  • 70.5k
0 votes

Spanning tree loop prevention

You should connect switches with trunk links and limit the VLANs allowed on each trunk to only those used on the switch with the switchport trunk allowed vlan <vlan list> command. Use the global ...
user avatar
  • 93.5k
0 votes

Spanning tree loop prevention

The most important thing is to select your root bridge by setting it to the lowest priority value. Default is 8/32768, the root should be 0/0 or 1/4096. The root bridge is the base of your spanning ...
user avatar
  • 70.5k
0 votes
Accepted

Stackpower - hot pluggable?

I have performed the intervention of adding a new switch to my switch stack (stackwise+stackpower) like this: Connected my Stackwise cables to my (turned off) new switch (switch 4) Disabled the ...
user avatar
  • 541
0 votes

how to limit or block broadcast traffic on ASR920 service instance EVC

Storm Control is done on the interface on the 920, not the service instance. Take the following command for example: storm-control broadcast level 5 5 storm-control action trap This would filter ...
user avatar
0 votes

I upgraded a Cisco switch to a newer model with different SNMP OIDs. Can I have the new switch receive the old OID and report values from the new OID?

Can I have the new switch receive the old OID and report values from the new OID? No. The MIB for a device defines the OIDs, and it seems the MIB for your new switch has different OIDs for some ...
user avatar
  • 93.5k
1 vote
Accepted

What is the ssd LUKS file on the (boot)flash of newer 9k Catalyst switches?

As we could not find any information on this we raised an informational support ticket with our VAR which got escalated to Cisco. The following is a summary of the information we were provided. It ...
user avatar
  • 11

Top 50 recent answers are included