Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The Community is a hub for connecting with your peers and Cisco specialists to ask for help, share your expertise, build your network, and grow professionally. New Here? Click here to learn more and get started.
Cisco Community is an active and collaborative place to learn more about our products and ask questions of peers and Cisco experts! Check out some of the most popular conversations happening right now!
Hello Experts, Hello Team,Currently, we have two cloud environments (AWS and GCP) connected to our COLO endpoint devices through two transit hubs, with ECMP enabled across the paths.Existing DesignThe network is presently operating in an Active/Activ...
We have a few instances of Cisco ACI Fabric running in a 3 completely unique data centers. All on different versions. 5.2(8i) being the newest5.2(7g) in the middle4.2(5l) being the oldestAll 3 started at 4.2 at some point. We will be moving to 6.x ...
Hello, everyone I've recently began studying IS-IS and I cannot wrap my head around what is happening here. All routers are enabled for IS-IS and their links are configured as P2P. P2 and P4-XR are L1-2 routers. They have an L2 adjacency to share ro...
HiWe have ran into an issue about Cisco Secure Desktop presence in the system.By running the ciscoasa# show webvpn csd ^ERROR: % Invalid input detected at '^' marker.we are getting error as the Cisco Secure Desktop (CSD) software...
Morning Cisco Forums,I'm looking for some guidance on the process of replacing ISE administration nodes, in a 4 node cluster. In our current environment, we're running ISE version 3.4p4, and have a primary/secondary administration node, and 2 policy...
We have Cisco FTD 2110s that are managed with FMC and we are trying to figure out how to block access to our remote access VPN by IP. We already have a geolocation block for Access Control in FMC. But, are we still not able to do geo-ip-based restric...
Just a simple question why it's recommended to use both Portfast and BPDU Guard together apart from the very fact that both should be used in access switches ports connecting to end users?? Like BPDU Guard will still work if I don't have portfast con...
Hello,Currently I have a stacked 9300 with 2 members (master & slave)I want to remove the slave from the stack to make it, its own standalone switch BUT I want to keep its current configurationWhat would the steps be for this to happen?In my head the...
We have a conditional access (CA) policy configured in Entra for MFA. Cisco DUO is setup as an external authentication method (EAM). All of the other authentication methods policies are disabled in Entra.We started adding users to the CA policy in ea...
Hello. I am looking for a way to get the self signed certs to automatically get deleted when a device is rebooted. Or a way to get them from stop being generated at all. I work in an environment where they are not allowed and we are getting hit by se...
Hi, I have 2 server (master and slave) BE6H-M5-K9 is based on a Cisco UCS C220 M5.I need to upgrade the CIMC from version 4.1(2a) 4.1(3n)1. Should I upgrade the master or slave first ?2. Please kinldy help with video or step by step procedure docume...
hello, recently I have deployed multiple Catalyst 9300 Switches (V17.09.06a). I am not able to configure any new VLAN on one of the switch and I am getting below error. %Error Existing Config-VLAN mode 47: NV Storage Failure how can I fix this iss...
Hi everyone,I’m testing Cisco Secure Firewall Management Center (FMC) eStreamer FQE (7.4.x) and wanted to check behavior around ConnectionEvent export.What I’ve validated so fareStreamer client (python) connects successfully over TCP 8302 (mutual TLS...
in ios xe and xr, the 'distance bgp <external> <internal> <local>' command requires three numbers. what is the purpose of <local>?Routing, Routing Protocols