Lucas Kauffman
  • Member for 8 years, 8 months
  • Last seen more than a month ago
How can I force VTP clients to update their VLAN database from the VTP server, on Cisco devices?
Accepted answer
23 votes

You can't manually force updates because VTP configs are pushed based on the highest current VLAN database revision number. Normally, after every change to your VTP config the configuration revision ...

View answer
On which layer of the OSI Model does the arp protocol belong?
21 votes

ARP is layer 2. The reason being is that a broadcast is sent on layer 2 (data link layer) and ARP will normally not traverse to layer 3 (network layer). However it can provide extra features to the ...

View answer
I'm setting up a Cisco CCNA lab, what equipment would you recommend?
Accepted answer
14 votes

CCNA requires the student to be familiar with the IOS operating system, this makes the Cisco 2948 unusable for a CCNA lab as it runs Catalyst OS (CatOS) and there is no way to upgrade the operating ...

View answer
How do you prevent rogue wireless access points on a network?
14 votes

First of all you need to build a policy prohibiting introducing network equipment into the network which is not owned by or approved by the company IT department. Next enforce port security so that ...

View answer
I want to perform monitoring of my network infrastructure, can this safely be done with SNMPv2?
14 votes

SNMPv2 should not be used especially if SNMPv3 is available. There are some basic flaws in SNMPv2, predominantly the use of community strings which are sent over the network in an unencrypted form to ...

View answer
Can I use Cisco Anyconnect with mobile devices?
Accepted answer
12 votes

Cisco provides a special application for iphone devices or for android devices. Unfortunately Windows Phone isn't supported yet.

View answer
How to connect 5 different networks together?
8 votes

Technically one router and one switch should be sufficient, ideally you should have two switches and two routers (as redundancy). Also it should not be an issue to install several network cards into ...

View answer
Does Windows support PEAPv1/EAP-GTC?
Accepted answer
6 votes

Naitvely, Windows does not support PEAP-GTC, however there are supplicants available to support PEAP-GTC authentication on Windows.

View answer
IPv6 replacement for ICMP timestamp
5 votes

As far as I can read in the ICMP codes, there is no equivalent within ipv6. Below you can find a table showing all possible ICMPv6 codes.

View answer
OpenVPN Bridge on pfsense: once LAN pings clients, connectivity breaks
Accepted answer
5 votes

Turns out there was an implicit rule in the firewall defined on the bridge which dropped fragmented packets. This is not shown in the normal firewall overview. I ended up turning off this 'feature' ...

View answer
Which Python modules are you using for network management and automation?
4 votes

Don't forget about: Ciscoconfparse Cisco CLI Automation argparse (best module for parsing arguments)

View answer
Time to switch to IPv6?
4 votes

I think you should first opt to run a dual stack, meaning to run IPv4 and IPv6 next to each other. In that way you can steadily progress to an all IPv6 environment once IPv4 is getting faced out. Some ...

View answer
What are the reasons for choosing separate or combined VPN and Internet routers?
2 votes

While they may be on the same network, it is still easier to seperate them as you can restrict and control inbound traffic a lot better (because you seperate them in groups) based on the purpose. It ...

View answer
Does authoritative DHCP server mean no static IP setting?
2 votes

You should reserve a seperate pool of IP addresses which will not be distributed by the DHCP server. This will allow you to have spare IPs which you can use to assign static addresses. An example from ...

View answer
Subnetting a IPv4 /24 into 7 equally large subnets
1 votes

What we used to get on our tests was: Create 7 Subnets in the 192.168.10.0/24 Net The subnets should be equally large. The address range must be used as optimal as possible. If you say as optimal as ...

View answer
Does the Cisco SF 302-08P Small Business Switch support accounting commands to tacacs?
0 votes

You forgot: aaa new-model Try and see if that works.

View answer
Building new network and need 200+ wireless devices
0 votes

Personally I would not go with simple WPA2 but with EAP, also make sure you disallow communication between clients.

View answer