one.time
  • Member for 8 years, 5 months
  • Last seen more than a month ago
Unicast RPF On the Edge
Accepted answer
15 votes

Unicast Reverse Path Forwarding (RPF) functions in three distinct modes and can potentially help reduce a router's attack vector, specifically from spoofed IP addresses. Strict Mode (config-if)#ip ...

View answer
Cisco 2960X is 'normal' IOS CLI or not?
Accepted answer
15 votes

The Cisco 2960-X is an IOS platform. According the to the datasheet it ships with LAN Lite, LAN Base, or IP Lite(all IOS variants) depending on the hardware you select. You may want to consult the ...

View answer
Cisco ASA Routing Issue
Accepted answer
13 votes

Best practice wise - should I let the router or the ASA handle NAT (Overloading)? In the most general of design best practices NAT is performed between an inside and outside network. NAT overloading ...

View answer
What are the different modes in Cisco routers, and why these modes?
Accepted answer
12 votes

Cisco's IOS uses the different EXEC modes as a basic way to control user privileges. These user privilege controls can be delegated through an enable password, the local user database or AAA (RADIUS, ...

View answer
tcp.length and tcp.data wireshark filters
Accepted answer
10 votes

Simply put, tcp.len filters the length of TCP segment data in bytes, while tcp.data (or tcp.segment_data in newer versions of Wireshark) filters for the actual data (sequence of bytes) within the TCP ...

View answer
Spanning tree Default Priority Values
9 votes

The bridge ID is an 8-Byte (64 bit) value composed of the following elements: The bridge priority value and the system ID extension together make up a 16 bit (2-byte) value. The bridge priority value,...

View answer
Generate list of subnets on switch using SNMP?
Accepted answer
8 votes

Interfaces/IP Addressing: If you're looking to poll a device's IP address, subnet mask and corresponding interface you can use the following OIDs from the IP-MIB and IF-MIB MIBs: .1.3.6.1.2.1.4.20.1....

View answer
Can we change peer IP of IPSec VPN tunnel in one line?
Accepted answer
6 votes

Can I change that simply by typing the following in conf t: In your example, issuing crypto map Outside_map 10 set peer 0.9.8.7 6.5.4.3 will append 0.9.8.7 6.5.4.3 to your existing peer list for ...

View answer
Is there an automatable way to backup the configuration from a WLC 2504 controller?
5 votes

Expect may be a good candidate to consider for the job. Below is an example template I've put together that is commented out for you to play with. It will log into a WLC, grab the running ...

View answer
Cisco CLI STP VLAN removal
Accepted answer
4 votes

Issuing the command no spanning-tree vlan 5 priority 4096, which is the same as spanning-tree vlan 5 priority 32768, will not affect other VLANs' instances of Per VLAN Spanning Tree Plus (PVST+). ...

View answer
What are the virtual router capabilities of Juniper QFX5100 and MX480?
4 votes

1) How many virtual router [routing instances] can be created on the QFX5100? The QFX5100 platform currently supports up to 512 virtual router routing instances. 2) How many VRF [routing ...

View answer
What is benefit of using CBWFQ with fair-queue statement
Accepted answer
4 votes

To summarize my comments: The benefit of using CBWFQ (class based weighted fair queuing) with the fair-queue statement in the class-default queue (your second example): ... class class-default ...

View answer
Licensing for two Cisco ISE servers
4 votes

"Cisco ISE licenses are specific to a deployment and not to individual appliances in the deployment." -From the Cisco ISE Ordering Guide For example, if you had five Cisco ISE nodes in a ...

View answer
Order of entries in "show ip bgp x.x.x.x"
Accepted answer
3 votes

My question is, does the order in which the three paths to the target appear in the output of this command indicate something? If so, what does it mean? The order of received prefixes listed by ...

View answer
EIGRP active timer
Accepted answer
3 votes

The EIGRP active timer is displayed using the show ip protocols command. R1#show ip protocols | i eigrp|Active Routing Protocol is "eigrp 123" Active Timer: 3 min

View answer
"Debug ip eigrp" command, output interpretation?
Accepted answer
3 votes

This is an EIGRP received route advertisement and can be broken down as follows: IP-EIGRP(90): Int 172.30.7.0/24 M 2297856 - 1657856 640000 SM 128256 - 256 128000 Route type and advertised IP Prefix:...

View answer
eigrp configuration problem over frame-relay
3 votes

There are a few ways to accomplish a back-to-back frame-relay connection. A quick search returns the following options: Back-to-Back Frame-Relay using sub-interfaces Back-to-Back Frame-Relay ...

View answer
Extract QoS Buffer Drops via SNMP
2 votes

If you're just looking for interface output queue drops, you can use the cportQosDropPkts OID (part of CISCO-PORT-QOS-MIB). $ snmptranslate -On CISCO-PORT-QOS-MIB:cportQosDropPkts .1.3.6.1.4.1.9.9....

View answer
Switchport negotiation between trunk and dynamic desirable
Accepted answer
1 votes

If two switches are connected, one with switchport mode trunk and the other with switchport mode dynamic desirable, will both switches form an operational trunk? Yes, the switchports will form a ...

View answer