New board topics in Cisco Community

"Optimize for Motion and Video" option has disappeared

CompCoach — Wed, 21 Apr 2021 00:22:25 GMT

in Webex Meetings, the option to "Optimize for Motion and Video" when sharing no longer appears. Has this feature been deleted or is something wrong with my installation?

Any ideas?

DHCP Pool on VLAN with PC fixed address

victorc7 — Tue, 20 Apr 2021 23:26:14 GMT

Hello,

I am trying to configure on a Catalyst 1000 switch a DHCP Server on network 192.168.1.0/24 with a fixed IP address of 192.168.1.10 for a PC Network with a specific MAC address.

Here is the steps I followed :

1) Type commands on Switch

conf t

ip dhcp pool 192.168.1.0
	network 192.168.1.0 255.255.255.0
	default-router 192.168.1.1
	exit

int vlan 1
	ip address pool 192.168.1.0
	exit

ip dhcp pool PC
	host 192.168.1.10
	hardware-address 01xx.xxxx.xxxx.xx
	exit

do sh ip dhcp pool

2) Check on Switch

Pool 192.168.1.0 :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 254
 Leased addresses               : 0
 Excluded addresses             : 1
 Pending event                  : none
 1 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.1          192.168.1.1      - 192.168.1.254     0     / 1     / 254

Pool PC :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 1
 Leased addresses               : 1
 Excluded addresses             : 1
 Pending event                  : none
 0 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.10         192.168.1.10     - 192.168.1.10      1     / 1     / 1

3) Type commands on Switch

do clear ip dhcp binding *

4) Type commands on PC

ipconfig /release && ipconfig /renew

No IP delivered

5) Type commands on Switch

do sh interfaces

6) Check

Vlan1 is up, line protocol is up
Hardware is EtherSVI, address is XXXX.XXXX.XXXX (bia XXXX.XXXX.XXXX)
Internet address will be autoconfigured from local DHCP pool
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:22:34, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 packets output, 0 bytes, 0 underruns
0 output errors, 2 interface resets
1704 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet1/0/1 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is XXXX.XXXX.XXXX (bia XXXX.XXXX.XXXX)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:01:18, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 3000 bits/sec, 3 packets/sec
34620 packets input, 8502653 bytes, 0 no buffer
Received 4427 broadcasts (3590 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 3590 multicast, 0 pause input
0 input packets with dribble condition detected
62613 packets output, 37744232 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

7) Type commands on Switch

int gigabitEthernet 1/0/1
	shutdown
	no shutdown
	exit
	
do sh ip dhcp binding

Check

Bindings from all pools not associated with VRF:
IP address      Client-ID/              Lease expiration        Type       State      Interface
                Hardware address/
                User name
192.168.1.10     01xx.xxxx.xxxx.xx       Infinite                Manual     Selecting  Unknown

9) Type commands on PC

ipconfig /renew

No IP delivered

10) Type commands on Switch

ip dhcp pool 192.168.1.0
	network 192.168.1.0 255.255.255.0
	default-router 192.168.1.1
	address 192.168.1.10 hardware-address 01xx.xxxx.xxxx.xx

% Address 192.168.1.10 is not valid in this pool.

	exit

int vlan 1
	ip address 192.168.1.2 255.255.255.0
	exit

11) Type commands on PC

ipconfig /renew

=> Got 192.168.1.3

12) Type commands on Switch and Check

(config)#do sh ip dhcp binding

Bindings from all pools not associated with VRF:
IP address      Client-ID/              Lease expiration        Type       State      Interface
                Hardware address/
                User name
192.168.1.1      XXXX.XXXX.XXXX          Apr 22 2021 12:57 AM    Automatic  Active     Vlan1
192.168.1.3      01xx.xxxx.xxxx.xx       Apr 22 2021 12:58 AM    Automatic  Active     Vlan1
192.168.1.10     01xx.xxxx.xxxx.xx       Infinite                Manual     Selecting  Unknown

(config)#do sh ip dhcp pool

Pool 192.168.1.0 :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 254
 Leased addresses               : 2
 Excluded addresses             : 1
 Pending event                  : none
 1 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.4          192.168.1.1      - 192.168.1.254     4     / 3     / 254

Pool PC :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 1
 Leased addresses               : 1
 Excluded addresses             : 1
 Pending event                  : none
 0 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.10         192.168.1.10     - 192.168.1.10      1     / 1     / 1

So I have an IP address but not using the one that is matching to the correct fixed pool.

XGPON vs. 10G Switching Network in a very large campus network design competition

ezisaac — Tue, 20 Apr 2021 23:09:00 GMT

I am engaging a very large new smart campus (around 10 sqm, 20 large buildings, 2 train stations, multiple bus stations, and lots of audio visual devices) network design competition recently. Some system integrator proposed the Corning One GPON/XGPON as the network backbone to serve all business and applications there. I understand Cisco also has Catalyst PON product. However, I prefer our "3-tier" campus network architecture but I need your brain to help me fight back on the proposed XGPON solution.

Are there any good reasons that I may include those into my presentation to highlight the benefits and need of the 3-tier campus network architecture vs. the 2-tier GPON service model? Any comments or documents (I read the Lippis's study report before) are welcome.

Catalyst 9300 and extended VLANs

nat8506 — Tue, 20 Apr 2021 22:45:27 GMT

If I'm currently running VTP version 1 or 2 on my network and I have a 9300 switch in Client mode, I change to Server mode and create an extended VLAN, then go back to Client mode, will the revision number increment? I can't confirm but I don't believe it changes the revision number since extended VLANs are not propagated with VTP versions 1 or 2. Can anyone please confirm this?

E164 dial plan----outbound calls to PSTN

G3261 — Tue, 20 Apr 2021 22:22:57 GMT

Hello, we are unable to call numbers in US because our telco is saying we are sending 11 digits to them (instead of 10). My senior staff is away so I am trying to figure this out. We are using e164 dial plan----and using mask with +1XXXXXXXXXX number

1-user dials LD number to US

2-TP is matched -9.1[2-9]XX[2-9]XXXXXX we add + and discard 9 So number becomes +1XXXXXXXXXX format

3-RP is matched--+.1[2-9]XX[2-9]XXXXXX

4-RL to PSTN

5-RL points to SLRG to PSTN

6-SLRG hows called number as +1XXXXXXXXXX

at what point or where exactly, we should be localizing the number for PSTN? It seems right now the number going out to PSTN is 1XXXXXXXXXX.

Change Webex Upgrade Schedule

lallimander — Tue, 20 Apr 2021 20:19:45 GMT

Hi All,

We have been recently getting notices that our webex site xyzcompany.webex.com will upgrade at the time mentioned in email. That is our production time and we would like to permanently change these upgrade times to off hours instead of manually setting upgrade time each time. Is there a feature or option to configure this?

Thanks,

Lalli

Cisco AP 3602i without WLC

Kingsleyizuka — Tue, 20 Apr 2021 20:13:18 GMT

Hello,

What are the possible methods of deploying a Cisco 3602i AirCap Access Point and Cisco c9105AXi AP without an external Wireless LAN Controller?

Is it possible to deploy the 3602i access point in lightweight mode, using the inbuilt AireOS Wireless Controller, without an external WLC?

Thanks.

How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Alex Ribas — Tue, 20 Apr 2021 20:03:38 GMT

Hi All

I have just ONE Ldap authenticantion in connection do VPN AnyConnection

So Tried to find some option to use 2 Two LDAP (HA) just in case one fail I have secondary.

I didn't find option secondary

tunnel-group TUNNEL_VPN general-attributes
address-pool (inside) POOL_VPN

address-pool POOL_VPN
authentication-server-group LDAP01
authentication-server-group (inside) LDAP01 LOCAL <--------- no have option to include LDAP02 just Local
authorization-server-group LDAP01
default-group-policy GRP_VPN
tunnel-group TUNNEL_VPN webvpn-attributes

any clue?

Thank you

cisco vpn banch to main site asa no internet at branch

chuckdock1 — Tue, 20 Apr 2021 19:53:54 GMT

Hello all,

I have a vpn between my branch and main office. From the branch I can reach the main office and the devices there.

I would like the branch site to hit the main sites asa and then use it for the internet breakout. I just want it for a few internet ip's, not all traffic though. I know the traffic hits the outside interface of the main, but then would have to go back out that interface for the specific ip's I want to reach. I did enter a global command for that, something with intra - I just dont recall it.

Seems like a nat issue but I'm not sure. I'm running 8.2 on both sides.

Suggestions?

UCCX NonVoice Subsystem in partial service

Timothy Jaberg — Tue, 20 Apr 2021 19:49:43 GMT

I was alerted an issue the other day from a UCCX Subscriber node of the NonVoice Subsystem in partial service.

When I checked the CCX Engine service and sub service, it showed fully up and had been up for several weeks since it was last rebooted. Nothing was in partial service.

The messages in the log are:

17067055: Apr 19 14:20:43.275 EDT %MIVR-SS_CHAT-1-SS_PARTIAL_SERVICE: [SM Tomcat Poller Thread - 1] com.cisco.wf.subsystems.chat.SubsystemChat NonVoice Subsystem is in partial service

17067056: Apr 19 14:20:43.280 EDT %MIVR-SS_CHAT-1-SS_PARTIAL_SERVICE_CCP_TOMCAT_DOWN: [SM Tomcat Poller Thread - 1] com.cisco.wf.subsystems.chat.SMTomcatPollerThread NonVoice Subsystem is in partial service

I didn't notice any service impacts, yet this is all that the log shows.

UCCX version12.5.1.11900-146

Has anyone seen this before and is this a bug?

Call grading mechanism - VOIP CMR and CDR audio quality metrics for Cisco Jabber and other Cisco IP phones

bhuarora — Tue, 20 Apr 2021 19:40:21 GMT

Hi Team,

I am trying to fix audio issues by collecting different data metrics that can be used for analysis. Since onset of sudden transition from work from home , I am sure many customers like us will be dealing with sudden transition from office to work from home and looking for ways to improve user and customer experience by reducing audio issues.

While I am at it, I was going through cisco documents and still could not find a proper data / voip data metric that can be used for analysis and I have following questions:

Is MOS supported for Cisco Jabber? We currently have users on 12.9.x and CUCM versions 10.5.x, 11.5.x and 12.5.x

The data is pretty inconsistent in terms of MOS evaluation and comes as unknown,fair, poor, excellent etc from the same device. My concern is mostly that it is unknown.

The inbuilt cisco CDR tool in all 3 mentioned versions do not always populate VarVQMetrics and other CMR and CDR related details and raw CDR files do not always have CMR data for Cisco Jabber.

What I have found so far:

K-Factor Data

K-factor represents an endpoint mean opinion score (MOS) estimation algorithm that is defined in ITU standard P.VTQ. It represents a general estimator that is used to estimate the mean value of a perceptual evaluation of speech quality (PESQ) population for a specific impairment pattern.

MOS relates to the output of a well designed listening experiment. All MOS experiments use a five-point PESQ scale as defined in ITU standard P.862.1, which describes the PESQ as an objective method for end-to-end speech quality assessment of narrow-band telephone networks and speech codecs.

The MOS estimate provides a number that is inversely proportional to frame loss density. Clarity decreases as more frames are lost or discarded at the receiving end. Consider the loss or discarding of these frames as concealment. Concealment statistics measure packet (frame) loss and its effect on voice quality in an impaired network.

K-factor represents a weighted estimate of average user annoyance due to distortions that are caused by effective packet loss such as dropouts and warbles. It does not estimate the impact of delay-related impairments such as echo. It provides an estimate of listening quality (MOS-LQO) rather than conversational quality (MOS-CQO), and measurements of average user annoyance range from 1 (poor voice quality) to 5 (very good voice quality).

K-factor gets trained or conditioned by speech samples from numerous speech databases, where each training sentence or network condition that is associated with a P.862.1 value has a duration of 8 seconds. For more accurate scores, the system generates k-factor estimates for every 8 seconds of active speech.

Consider K-factor and other MOS estimators to be secondary or derived statistics because they warn a network operator of frame loss only after the problem becomes significant. Packet counts, concealment ratios, and concealment second counters represent primary statistics because they alert the network operator before network impairment has an audible impact or is visible through MOS.

Table 2. Devices That Support K-factor (varVQMetrics) in CMRs

Device

K-factor (varVQMetrics) Support in CMR

Cisco Unified IP Phone 7906

Cisco Unified IP Phone 7911

Cisco Unified IP Phone 7921

Cisco Unified IP Phone7931

Cisco Unified IP Phone 7940

Cisco Unified IP Phone 7941

Cisco Unified IP Phone 7942-G

Cisco Unified IP Phone 7942-G/GE

Cisco Unified IP Phone 7945

Cisco Unified IP Phone7960

Cisco Unified IP Phone 7961

Cisco Unified IP Phone 7962-G

Cisco Unified IP Phone7962-G/GE

Cisco Unified IP Phone 7965

Cisco Unified IP Phone 7970

Cisco Unified IP Phone7971

Cisco Unified IP Phone7972-G/GE

Cisco Unified IP Phone7975

3x MGCP Gateways

5x MGCP Gateways

Ref link :

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/12_5_1/cdrdef/cucm_b_cdr-admin-guide-1251/cucm_b_cdr-admin-guide-1251_chapter_01001.html

and :

Note that all audio quality metrics listed in Table 1 are stored in the CMR. For phones that do not generate CMR, such as Cisco TelePresence® TC, CE, CTX, and IX endpoints; Jabber® platforms (all platforms); Cisco IP Communicator; and Cisco Unified Personal Communicator, grading will be “N/A”.

The Cisco Network Analysis Module (NAM) reports SCS as well. An audio stream reported from NAM will be graded based on SCSR, the same as an IP Phone.

Ref link :

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/white-paper-c11-735409.html

The language is same or rather identical in different series (e.g 10.x , 11.x ,12.x, etc)and support for devices has largely remained unchanged (at least in the guide if not real world).

Can someone confirm the following?

Is K-factor (varVQMetrics) supported for Cisco Jabber (client services framework)? If not, if there is roadmap to add support?
Is there a partial support for K-factor (varVQMetrics) like concealed seconds, several concealed seconds etc?
If the above are supported in current iterations of Jabber, any documentation or a doc defect?
Current list of supported phone models including soft phones. Interestingly widely used cisco 7821 and cisco 7841s are too not listed for k-factor data.

The other questions I have are listed below. They are mostly aimed at Cisco Jabber however other phone model details are appreciated.

Since MOS is no longer considered a good mechanism, what call grading mechanism can be used for Cisco Jabber specifically and/or other phone models.
Suggested industry (if any) and cisco suggested Jitter or average jitter per call?
Acceptable average jitter for voice ?
Acceptable percentage of packet loss (per call )? If this is codec dependent, then code wise suggested percentage of packet loss.
Acceptable Concealed seconds
Acceptable Latency in CUCM CDR terms
Any other metrics that be can used?
Any cisco tool that can be used to calculate percentages something similar voice bandwidth calculator?

I have referenced some of the other cisco docs and third party, it is getting complicated to have to do this manually:

Voice Over IP - Per Call Bandwidth Consumption

https://www.cisco.com/c/en/us/support/docs/voice/voice-quality/7934-bwidth-consume.html

Understanding Codecs: Complexity, Hardware Support, MOS, and Negotiation

https://www.cisco.com/c/en/us/support/docs/voice/h323/14069-codec-complexity.html

https://www.bandcalc.com/

http://www.voiptroubleshooter.com/diagnosis/emodel.html

Please note: to fetch all this data, I am also using a third party tool that allows me to capture some of this data in excel and csv formats that is parsed from RAW CDR files fetched from CUCM.

Regards

Bhuvan

Call grading mechanism - VOIP CMR and CDR audio quality metrics for Cisco Jabber and other Cisco IP phones

bhuarora — Tue, 20 Apr 2021 19:36:59 GMT

Not sure under which category should I post this for best match so I am posting it under

Cisco Community Technology and Support Collaboration, Voice and Video IP Telephony and Phones
and will be posting under :
Cisco Community Technology and Support Collaboration, Voice and Video Unified Communications Infrastructure:

Hi Team,

While I am at it, I was going through cisco documents and still could not find a proper data / voip data metric that can be used for analysis and I have following questions:

Is MOS supported for Cisco Jabber? We currently have users on 12.9.x and CUCM versions 10.5.x, 11.5.x and 12.5.x

The data is pretty inconsistent in terms of MOS evaluation and comes as unknown,fair, poor, excellent etc from the same device. My concern is mostly that it is unknown.

The inbuilt cisco CDR tool in all 3 mentioned versions do not always populate VarVQMetrics and other CMR and CDR related details and raw CDR files do not always have CMR data for Cisco Jabber.

What I have found so far:

K-Factor Data

Table 2. Devices That Support K-factor (varVQMetrics) in CMRs

Device

K-factor (varVQMetrics) Support in CMR

Cisco Unified IP Phone 7906

Cisco Unified IP Phone 7911

Cisco Unified IP Phone 7921

Cisco Unified IP Phone7931

Cisco Unified IP Phone 7940

Cisco Unified IP Phone 7941

Cisco Unified IP Phone 7942-G

Cisco Unified IP Phone 7942-G/GE

Cisco Unified IP Phone 7945

Cisco Unified IP Phone7960

Cisco Unified IP Phone 7961

Cisco Unified IP Phone 7962-G

Cisco Unified IP Phone7962-G/GE

Cisco Unified IP Phone 7965

Cisco Unified IP Phone 7970

Cisco Unified IP Phone7971

Cisco Unified IP Phone7972-G/GE

Cisco Unified IP Phone7975

3x MGCP Gateways

5x MGCP Gateways

Ref link :

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/12_5_1/cdrdef/cucm_b_cdr-admin-guide-1251/cucm_b_cdr-admin-guide-1251_chapter_01001.html

and :

The Cisco Network Analysis Module (NAM) reports SCS as well. An audio stream reported from NAM will be graded based on SCSR, the same as an IP Phone.

Ref link :

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/white-paper-c11-735409.html

The language is same or rather identical in different series (e.g 10.x , 11.x ,12.x, etc)and support for devices has largely remained unchanged (at least in the guide if not real world).

Can someone confirm the following?

Is K-factor (varVQMetrics) supported for Cisco Jabber (client services framework)? If not, if there is roadmap to add support?
Is there a partial support for K-factor (varVQMetrics) like concealed seconds, several concealed seconds etc?
If the above are supported in current iterations of Jabber, any documentation or a doc defect?
Current list of supported phone models including soft phones. Interestingly widely used Cisco 7821 and Cisco 7841 are too not listed for k-factor data.

The other questions I have are listed below. They are mostly aimed at Cisco Jabber however other phone model details are appreciated.

Since MOS is no longer considered a good mechanism, what call grading mechanism can be used for Cisco Jabber specifically and/or other phone models.
Suggested industry (if any) and cisco suggested Jitter or average jitter per call?
Acceptable average jitter for voice ?
Acceptable percentage of packet loss (per call )? If this is codec dependent, then code wise suggested percentage of packet loss.
Acceptable Concealed seconds
Acceptable Latency in CUCM CDR terms
Any other metrics that be can used?
Any cisco tool that can be used to calculate percentages something similar voice bandwidth calculator?

I have referenced some of the other cisco docs and third party, it is getting complicated to have to do this manually:
Voice Over IP - Per Call Bandwidth Consumption

https://www.cisco.com/c/en/us/support/docs/voice/voice-quality/7934-bwidth-consume.html

Understanding Codecs: Complexity, Hardware Support, MOS, and Negotiation

https://www.cisco.com/c/en/us/support/docs/voice/h323/14069-codec-complexity.html

https://www.bandcalc.com/

http://www.voiptroubleshooter.com/diagnosis/emodel.html

Please note: to fetch all this data, I am also using a third party tool that allows me to capture some of this data in excel and csv formats that is parsed from RAW CDR files fetched from CUCM.

Regards

Bhuvan

Upgraded 8851s to 12.8(1) and am having issues with last line selected

AnthonyGreene64131 — Tue, 20 Apr 2021 19:26:34 GMT

Hi everyone, I recently have started updating our 8800 series phones (specifically 8851s) to 12.8(1) from 12.1(1) and it seems that this breaks the last line remembered. I think I need guidance, because from what I have been able to find this is the expected behaviour. It seems on the 12.1(1), and I have tested this, that when you have say line two selected (whether that is the ipcc extension or just a second line you have on your phone) and make or answer a call and the call disconnects it stays on that selected line. On the 12.8(1) when you disconnect from a call on your selected secondary line and go on hook it automatically jumps you back the primary line.

We have the service parameter "Always Use Prime Line" to false and the "Show all calls on primary line" disabled as well. We also have some 8865s and it is also running 12.8(1) and has the same behaviour. I tried reverting my 8865 back to 12.7(1) and it also has the same behaviour. Is this the expected behaviour on this newer firmware and if it is, is there a way for it to remember last line selected?

Automating Security Assessments, and Concerns with PSIRT API

TimothyHarder00915 — Tue, 20 Apr 2021 19:18:55 GMT

Hello! The company I work for has tasked me with checking the security advisories that Cisco publishes. This task seemed ripe for automation, especially since Cisco provides a restful API where you can access all of the advisories they publish. They advertise being able to return extremely useful and pertinent data such as vulnerable products, the CVSS score, and a written summary of the vulnerability. If you want to get more information such as the affected software releases, you must have a certain kind of account with Cisco, which luckily we have, to access the bug API.

The concept of this API is great. Ideally you could have an inventory that automatically compares the model and version number of live devices on your network against the advisories, and only notify you about the ones that actually apply to your devices. You could set policies on top of this, like only notify me if the CVSS score is a High or more, etc.

The problem I am experiencing is that the data returned from the API is inaccurate, incomplete, and inconsistent. These things make this data untrustworthy, and forces me to manually read each and every advisory. The data returned often leaves out vulnerable products and version information.

The natural next step is to forgo the API altogether and use web-scraping to pull the data. This is also not achievable because there is no consistent formatting between individual advisories, and they are often incomplete as well. Last month there were many advisories that came through without any vulnerable version listed, despite the vulnerability being about vulnerable software.

Additionally, I have found other security-related APIs from Cisco, where you can pass in model numbers and it will return you the applicable advisories, but this is not available for all products that Cisco provides and we would potentially miss something important.

I have interfaced with my account team, but I have been told that the devnet team is experiencing growing pains, and the tooling is in its infancy (with the api being 7 years old...).

So my question to the community is, have you found a way to automate the processing of these vulnerabilities? If so, how?

For loop in xml template

ksj — Tue, 20 Apr 2021 19:12:34 GMT

I am attempting to use the documented for loop in an xml template and am getting an error that says:

Invalid parameters or processing instruction for

This is the section where I am using the loop:

<interface xmlns="http://tail-f.com/ned/cisco-nx">
<mgmt>
<name>0</name>
<description>{$mgmt_description}</description>
<vrf>
<member>management</member>
</vrf>
<ip>
<address>
<ipaddr>{$mgmt_ip}</ipaddr>
</address>
</ip>
</mgmt>
<Vlan>
<name>1</name>
<shutdown/>
</Vlan>
<?for i=1; {$i < 55}; i={$i + 1}?>
<Ethernet>
<name>1/{$i}</name>
<enable>
<switchport>false</switchport>
</enable>
<description>Auto_Cable_Testing</description>
<ip>
<address>
<ipaddr>192.168.{$cable_test}.{$i*2}/31</ipaddr>
</address>
</ip>
<flowcontrol>
<receive>off</receive>
<send>off</send>
</flowcontrol>
</Ethernet>
<?end?>
</interface>

Any ideas on what I'm doing wrong?

TIA

Cisco IT - Journey from Jabber to Webex

Cole Callahan — Tue, 20 Apr 2021 19:03:41 GMT

Join us for insight on Cisco IT’s journey in migrating from Jabber to Webex. Hear from team experts Arti Patel (Project Lead) and Luke Clifford (Collab Architect) on how the program was planned, executed, and communicated across the organization. Register to attend below!

AMP Connector - auto-update?

JF53591 — Tue, 20 Apr 2021 19:01:51 GMT

It appears there is no way to set AMP to automatically update the client software connectors. Do I have that right?

We have a relatively small deployment of 25 machines and no dedicated IT department. We need the security software to stay current without human intervention, as much as possible. Hard to believe this isn't a feature included off-the-shelf!

What am I missing?

Forged Email Detection Question

Jessica Cochran — Tue, 20 Apr 2021 18:46:39 GMT

We have a Dictionary setup with all of our Executives on it to protect us from receiving emails from people pretending to be our executives and this works great. I was wondering if it would be possible to do something like this with all users in our GAL? We sync with LDAP but I haven't been able to figure out a way to create a rule with this information? Is it possible?

Right now the Executives are added to a Dictionary and then associated with an Incoming Content Filter

Any advice would be greatly appreciated

Thank you
Jessie

How do I Isolate the Source of Tunnel Flapping EIGRP

tuckerrose — Tue, 20 Apr 2021 18:26:33 GMT

Hi there!

I am having issues with tunnels flapping across sites on our network, our network is airgapped and we use the customer's already in place network as our backbone to communicate across sites. I have combed left and right through everything I can think of and cannot locate any issues with how our network is setup. I have had the engineers who setup our network look over everything and verify it's good.

Is there a way I can prove that the issue is on their devices / network infrastructure causing these issues?

Note: I do not have access to their network and cannot check any devices, I have to rely on their technicians to tell me if something is messed up, and we are locked in the endless battle of "It's not me, it's you!"

The hello / hold time for these tunnels on our side is 1/3.

Cannot find the 'Start Live Streaming' button

mvillega — Tue, 20 Apr 2021 18:22:52 GMT

Hello! I just updated the Webex app (new color icon) and cannot find the 'Start Live Streaming' button. Does anyone know what can I do? I prefer not to use the traditional Cisco Webex because the resolution is better in the renewed app
Thanks

Intrusion Alert - Email vs SNMP

EverythingBagel62093 — Tue, 20 Apr 2021 23:24:32 GMT

Hi everyone,

We have an FMC set up that is managing a number of FTD devices. We currently have alerts set up to send emails when intrusion events occur. Emails are generated using the Impact Flag settings and when specific rules are fired (via the Intrusion Email tab in the Policy -> Actions -> Alerts section).

We have set up SNMP traps to be sent when Impact Flag alerts are generated. We want to be able to auto-generate tickets for inspection/review. However, when SNMP traps do come through, it seems to be missing quite a bit of information.

This is what the Intrusion email looks like via Impact Flag Alerts (I have redacted certain information):

[1:27964:6] "MALWARE-CNC Win.Trojan.Gh0st variant outbound connection" [Impact: Vulnerable] From "(IP Address_FTD Device)" at Mon Apr 5 12:38:45 2021 UTC [Classification: A Network Trojan was Detected] [Priority: 1] {tcp} (SOURCE_IP:Port) (unknown)->(DEST_IP:Port) (unknown)

This is what the SNMP trap looks like:

Trap: [Trap Number] (translated from v2c)
Mon Apr 5 08:38:45 2021
Src IP: (Redacted)
Agent: (Redacted)
Trap Type: Vendor Specific
Specific Type: XX
Enterprise: [Version]
Timestamp: 3746566981
Object:1.3.6.1.4.1.14223.1.1.29 Value: (IP Address_FTD Device)
Object:1.3.6.1.4.1.14223.1.1.1 Value: (0123456789ABCDEF)
Object:1.3.6.1.4.1.14223.1.1.115 Value:Global
Object:1.3.6.1.4.1.14223.1.1.32 Value:XX
Object:1.3.6.1.4.1.14223.1.1.43 Value:Vulnerable
Object:1.3.6.1.4.1.14223.1.1.13 Value: (Intrusion_SOURCE_IP)

How can I get the SNMP trap to be more descriptive? Is there something about that 16 digit value in the SNMP trap that is related to the intrusion description? If so, what needs to be done on our end to translate the SNMP trap? Any assistance would be greatly appreciated. Thank you.

Webex Meetings, Side by Side view, Resizing of webcam thumbnails

allamore — Tue, 20 Apr 2021 17:26:29 GMT

Webex Meetings automatically upgraded to 41.4.4.10 on Monday, and now when I am in Side by Side view, or any view actually, I cannot resize the participants webcam thumbnails anymore. Everyone is locked at postage stamp size.

Sometimes, if I switch between full screen and back, I can resize again, but then it is only between original and 2x.

A secondary issue is not being able to scroll through the list of participant webcams. I only see the first 5 or 6.

I see other people having resizing issues, but not this particular workflow.

Thank You.

How will I get certificate for CCNA exam

rajesharihant — Tue, 20 Apr 2021 17:13:33 GMT

Hello everyone.

I appeared for CCNA exam at Pearson Vue center. the Center did gave me a preliminary report, which says I passed.

When and how will I get the certificate from CISCO?

Also, If I need hard copy certificate, then how can I get the same.

Regards,

Rajesh Kothari.

Enabling unicast reverse path forwarding ASA

patrick.hurley — Tue, 20 Apr 2021 17:11:01 GMT

I am getting this message when using the Cisco CLI Analyzer on my ASA5505.

Cisco ASA Unicast Reverse Path Forwarding (uRPF) Bypass Vulnerability- CSCuv60724.

Should I remove these commands on the outside interface?

What about inside?

Sending WebEx invites to 999 participants

dwighthicks — Tue, 20 Apr 2021 16:30:30 GMT

When sending WebEx invites to a large nested distribution list, will WebEx kick out duplicate entries or will it try to send multiple invites?

cisco Find IT

michaelhenriquez — Tue, 20 Apr 2021 16:23:44 GMT

Como puedo ingresar a cisco FindIT, que usuario y contraseñas requiere ?

Saludos.

5516 Migration to FPR1140

scoutt — Tue, 20 Apr 2021 16:17:49 GMT

We are starting to configure new firewalls to replace our old 5516x. I'm trying to find the easiest way to accomplish this. My plan was going to migrate ACL/Rules to FMC from the 5516x (Done) and then hook up the new firewalls so FMC can at least talk and they can get licensed. These new firewalls won't be used for access control until they are all configured with the correct interfaces and rules. Then when configuration is done, we just move the cable from the old 5516 to the 1140's? Of course the Firepower IPs will be different. Can this be done this way? Is there a better way? Trying to limit downtime of course.

Our current setup with the old 5516 is FMC is not controlling the access, its just monitoring.

SNR - redirected calling number

ajuanan123 — Tue, 20 Apr 2021 16:17:49 GMT

HI,

We have a scenario where user ask to display the original calling number on his mobile which is configured as SNR destination. I see in cisco community portal that, SNR is different from CallForwd and redirection number won't beIP Telephony and Phones, CUC displayed. Its noted that calling party displayed depends on ISP, but if ISP allows a Non-DID, whether its possible to display original calling number on mobile.

For example -> External User A call from his mobile to a Cisco deskphone(123) where SNR is enabled. Call reach to SNR destination mobile, but the caller-ID displayed is 123(cisco deskphone). Is that possible to display the original calling number of USER A on SNR destination mobile.

Unable to enroll training course "WebEx Contact Center sale" on golearn.webex.com site

trotpany — Tue, 20 Apr 2021 15:57:52 GMT

I’m a Cisco new hire. I've tried to enroll this "WebEx Contact Center sale" from this follow link

https://golearn.webex.com/lms/index.php?r=course/deeplink&course_id=432&hash=d7484cc9dc77641ba037a5edb8da696ee4dd91fb&generated_by=80761

Initially It was prompt me for payment then I was accidently close the browser when I login back to “golearn.webex.com” site again. I unable to enroll this training course any more.

WLC - AP LOG - wl1: fatal error, reinitializing, total count of reinit's

Peter Setaffy — Tue, 20 Apr 2021 15:50:38 GMT

Dear team,
Can you please help me with identify logs from AP?
I have some APs where can I find this logs on syslog.On this AP had also problem one client but he was connected on Dot11Radio 1 - 5Ghz radio.

Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8100] wl1: fatal error, reinitializing, total count of reinit's[8393]
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8650] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8650] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8790] version: 3
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8790] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8790] 0x1006 0 0 0 0 39 0 1 0 0 311 0 -47 1 -1616109324
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8800] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880]
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] OFDM desense (dB) = 7
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] BPHY desense (dB) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna1 tbl desense (ticks) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna2 tbl desense (ticks) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna1 pktgain limit (ticks) = 2
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna2 pktgain limit (ticks) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] elna bypass = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] forced (dB) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] jammer_cnt = 0, txop = 1
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880]
Apr 20 08:20:06 172.17.13.10 kernel: [*04/20/2021 09:20:06.9670] DOT11_DRV[0]: Beacons stuck on Radio 0 for 80 sec
Apr 20 08:20:07 172.17.13.10 kernel: [*04/20/2021 09:20:07.0070] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:20:27 172.17.13.10 kernel: [*04/20/2021 09:20:27.0110] DOT11_DRV[0]: Beacons stuck on Radio 0 for 100 sec
Apr 20 08:20:27 172.17.13.10 kernel: [*04/20/2021 09:20:27.0550] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:20:29 172.17.13.10 kernel: [*04/20/2021 09:20:29.1040] CLSM[AE:FC:5F:D8:B9:A0]: PMK cache was found (11r or 11i)
Apr 20 08:20:47 172.17.13.10 kernel: [*04/20/2021 09:20:47.0590] DOT11_DRV[0]: Beacons stuck on Radio 0 for 120 sec
Apr 20 08:20:47 172.17.13.10 kernel: [*04/20/2021 09:20:47.1000] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:20:47 172.17.13.10 kernel: [*04/20/2021 09:20:47.1000] DOT11_DRV[0]: slot 0 tx_beacon=202533814 tx_data_pkts=3455569
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.0860] wl1: fatal error, reinitializing, total count of reinit's[8394]
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1400] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1400] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1550] version: 3
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1550] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1550] 0x1006 0 0 0 0 37 0 1 0 0 5114 0 -47 1 -1616053048
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1560] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640]
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] OFDM desense (dB) = 7
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] BPHY desense (dB) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna1 tbl desense (ticks) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna2 tbl desense (ticks) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna1 pktgain limit (ticks) = 2
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna2 pktgain limit (ticks) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] elna bypass = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] forced (dB) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] jammer_cnt = 0, txop = 1
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640]
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.1940] wl1: fatal error, reinitializing, total count of reinit's[8395]
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2520] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2520] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] version: 3
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] 0x1006 0 0 3 1 36 0 1 0 0 3851 0 -47 1 -1616038940
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760]
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] OFDM desense (dB) = 7
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] BPHY desense (dB) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna1 tbl desense (ticks) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna2 tbl desense (ticks) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna1 pktgain limit (ticks) = 2
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna2 pktgain limit (ticks) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] elna bypass = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] forced (dB) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] jammer_cnt = 0, txop = 1
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760]
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.3620] wl1: fatal error, reinitializing, total count of reinit's[8396]
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4150] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4150] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] version: 3
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] 0x1006 0 0 0 0 36 0 1 0 0 5375 0 -47 1 -1616010772
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390]
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] OFDM desense (dB) = 7
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] BPHY desense (dB) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna1 tbl desense (ticks) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna2 tbl desense (ticks) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna1 pktgain limit (ticks) = 2
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna2 pktgain limit (ticks) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] elna bypass = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] forced (dB) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] jammer_cnt = 0, txop = 1
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390]
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4230] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4230] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4300] version: 3
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4300] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4300] 0x1006 0 0 0 0 36 0 1 0 0 3663 0 -47 1 -1616008712
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4310] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390]
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] OFDM desense (dB) = 7
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] BPHY desense (dB) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna1 tbl desense (ticks) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna2 tbl desense (ticks) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna1 pktgain limit (ticks) = 2
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna2 pktgain limit (ticks) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] elna bypass = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] forced (dB) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] jammer_cnt = 0, txop = 1
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390]
Apr 20 08:21:57 172.17.13.10 kernel: [*04/20/2021 09:21:57.0950] CLSM[AC:BC:32:C4:72:03]: PMK cache was found (11r or 11i)
Apr 20 08:22:42 172.17.13.10 kernel: [*04/20/2021 09:22:42.1650] DOT11_DRV[0]: Beacons stuck on Radio 0 for 80 sec
Apr 20 08:22:42 172.17.13.10 kernel: [*04/20/2021 09:22:42.2070] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:23:02 172.17.13.10 kernel: [*04/20/2021 09:23:02.2370] DOT11_DRV[0]: Beacons stuck on Radio 0 for 100 sec
Apr 20 08:23:02 172.17.13.10 kernel: [*04/20/2021 09:23:02.2780] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:24:16 172.17.13.10 kernel: [*04/20/2021 09:24:16.9760] wl1: fatal error, reinitializing, total count of reinit's[8397]
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0290] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0290] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] version: 3
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] 0x1006 0 0 0 0 38 0 1 0 0 1192 0 -47 1 -1615850080
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530]
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] OFDM desense (dB) = 7
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] BPHY desense (dB) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna1 tbl desense (ticks) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna2 tbl desense (ticks) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna1 pktgain limit (ticks) = 2
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna2 pktgain limit (ticks) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] elna bypass = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] forced (dB) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] jammer_cnt = 0, txop = 1
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530]
Apr 20 08:24:37 172.17.13.10 kernel: [*04/20/2021 09:24:37.2950] DOT11_DRV[0]: Beacons stuck on Radio 0 for 80 sec
Apr 20 08:24:37 172.17.13.10 kernel: [*04/20/2021 09:24:37.3610] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:24:57 172.17.13.10 kernel: [*04/20/2021 09:24:57.3880] DOT11_DRV[0]: Beacons stuck on Radio 0 for 100 sec
Apr 20 08:24:57 172.17.13.10 kernel: [*04/20/2021 09:24:57.4290] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:17 172.17.13.10 kernel: [*04/20/2021 09:25:17.4320] DOT11_DRV[0]: Beacons stuck on Radio 0 for 120 sec
Apr 20 08:25:17 172.17.13.10 kernel: [*04/20/2021 09:25:17.4730] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:17 172.17.13.10 kernel: [*04/20/2021 09:25:17.4730] DOT11_DRV[0]: slot 0 tx_beacon=202533817 tx_data_pkts=3455569
Apr 20 08:25:37 172.17.13.10 kernel: [*04/20/2021 09:25:37.5200] DOT11_DRV[0]: Beacons stuck on Radio 0 for 140 sec
Apr 20 08:25:37 172.17.13.10 kernel: [*04/20/2021 09:25:37.5620] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4290] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4290] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] version: 3
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] 0x1006 0 0 1 0 38 0 0 0 0 245 0 -47 0 -1615749628
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470]
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] OFDM desense (dB) = 7
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] BPHY desense (dB) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna1 tbl desense (ticks) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna2 tbl desense (ticks) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna1 pktgain limit (ticks) = 2
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna2 pktgain limit (ticks) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] elna bypass = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] forced (dB) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] jammer_cnt = 0, txop = 1
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470]
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.5660] DOT11_DRV[0]: Beacons stuck on Radio 0 for 160 sec
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.6300] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4330] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4330] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] version: 3
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] 0x1006 0 0 0 0 38 0 1 0 0 298 0 -47 1 -1615748624
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490]
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] OFDM desense (dB) = 7
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] BPHY desense (dB) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna1 tbl desense (ticks) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna2 tbl desense (ticks) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna1 pktgain limit (ticks) = 2
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna2 pktgain limit (ticks) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] elna bypass = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] forced (dB) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] jammer_cnt = 0, txop = 1
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490]
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4370] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4370] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4440] version: 3
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4440] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4440] 0x1006 0 0 0 0 38 0 0 0 0 365 0 -47 0 -1615747620
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4450] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530]
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] OFDM desense (dB) = 7
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] BPHY desense (dB) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna1 tbl desense (ticks) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna2 tbl desense (ticks) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna1 pktgain limit (ticks) = 2
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna2 pktgain limit (ticks) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] elna bypass = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] forced (dB) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] jammer_cnt = 0, txop = 1
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530]
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4410] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4410] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] version: 3
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] 0x1006 0 0 0 0 38 0 1 0 0 761 0 -47 1 -1615746616
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4570] Scanning is in progress. Can't dump aci mitigation info.
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4450] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4450] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] version: 3
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] 0x1006 0 0 0 0 38 0 0 0 0 301 0 -47 0 -1615745612
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610]
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] OFDM desense (dB) = 7
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] BPHY desense (dB) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna1 tbl desense (ticks) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna2 tbl desense (ticks) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna1 pktgain limit (ticks) = 2
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna2 pktgain limit (ticks) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] elna bypass = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] forced (dB) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] jammer_cnt = 0, txop = 1
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610]
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4490] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4490] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4580] version: 3
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4580] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4580] 0x1006 0 0 0 0 38 0 1 0 0 664 0 -47 1 -1615744608
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4590] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670]
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] OFDM desense (dB) = 7
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] BPHY desense (dB) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna1 tbl desense (ticks) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna2 tbl desense (ticks) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna1 pktgain limit (ticks) = 2
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna2 pktgain limit (ticks) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] elna bypass = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] forced (dB) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] jammer_cnt = 0, txop = 1
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670]

Its AP: C9120AXI-E

WLC: 5520

AireOS: 8.10.142.0

Mode: FlexConnect

Uptime about 81 days

Have you some experience with this msgs please?

Thank you

Peter

Be An Early Adopter! Check out these EXCLUSIVE ACI Ask the expert sessions...

Brooke Hammer — Tue, 20 Apr 2021 15:49:06 GMT

Join Cisco experts for the exclusive look into Cisco #ACI capabilities with the NEW series of #ACI Ask the Experts sessions: http://cs.co/9009HL0PV
Adapting to Changes: DevOps Trends and Cisco ACI April 26
Troubleshooting Best Practices: Multi-Site for Cisco ACI April 27
Operations Planning and Best Practices: Cisco ACI Multi-Site April 29
Troubleshooting Best Practices: Cisco ACI April 30
Component Integration: Kubernetes VMM for Cisco ACI May 3
Migration Strategies and Best Practices: Multi-Site and Multi-Pod for Cisco ACI May 4
Feature Overview: Security and Segmentation for Cisco ACI using ACI Virtual Edge May 10

transfer call without return

akram.root — Tue, 20 Apr 2021 15:33:58 GMT

hello all,

I need your help please .

I have a cucm 12.5 installed with cisco Ip phones 7821 and 8851.

My costomer would like when the IP phone who make the transfer with another IP phone can retrieve the call if has no answer after the call transfered .

Is that possible ? and how can i do that ?

Best reagards

Akram

"Mandatory TLS" header tag in Cisco ESA

Stephen Hogan — Tue, 20 Apr 2021 15:25:01 GMT

I have enforced TLS on select domains on my ESA. I'd like to add a custom header tag on that says something like "Enforced TLS" to make it easier to see if an email came or went via enforced TLS vs. opportunistic. Is there a way to do it, preferably via the GUI?

Webex Teams not sending activation code

AGuerra — Tue, 20 Apr 2021 15:14:54 GMT

Hi,

I am trying to access to Cisco Webex Teams, but when I log in, a message appears saying that a code will be sent to my email, but it never arrives, so I a unable to join Webex.

How can I solve this? I have tried to do it a lot of times and the email with the code never arrives.

Finesse 11.6 upgrade to 12.0

Mr Brightside — Tue, 20 Apr 2021 15:07:35 GMT

Hello everyone!

I am planning Finesse upgrade from 11.6 to 12.0 in my UCCE environment.

I wonder if I need to open any additional ports on the Firewall for Finesse clients, that are mandatory for 12.0, on top of what we already have for Finesse 11.6 (we have 443 and 7443)

Thx!

WIFI 6 solution - Controller - licensing and support

LovejitSingh130013 — Tue, 20 Apr 2021 14:55:16 GMT

Hello Experts

I am looking to add Cisco Catalyst 9120 APs to 3 different sites and got few questions?

Does Cisco Provide any cloud management for Wireless APs which eliminate the need of physical controller?

In case Physical Controller is only choice, Do i need one for each site ? or it will be one fine for all sites (Considering all sites are connected by IPSec)?

How does licensing work with it ? Is it just one time buy and then annual support ?

Thanks,

Lovejit Singh

FMC Permissions question

ChristopherCraddock66504 — Tue, 20 Apr 2021 15:18:34 GMT

Community,

I have 4 total domains, 1 Global Domain and 3 Leaf domains under the Global. I have external authentication configured in the Global Domain on the FMC via LDAP integration and it is working great. However, I have 2 new users who I only want to have access to leaf domain 3 that is under the global domain when they log in. I was able to create a local user under the Global domain and only allow that local user access to the leaf domain 3 in the User Control Configuration; however, I was wondering if there is a way to accomplish the same thing via an LDAP account? I can control what Role an LDAP user gets, but have not been able to figure out how to control what tenant the user is dropped into after they log in (using LDAP accounts). So far all LDAP users get dropped into the Global Domain with their respective user role. Is this possible to drop an LDAP user into a specific leaf domain after logging in?

Thank you.

CSM stopped working

kostasthedelegate — Tue, 20 Apr 2021 14:31:10 GMT

Hello,

we have CSM 4.19

To day it stopped working and we could not login

We had to restart it and after approx 20 minutes we logged in.

What could the issue be?

Thanks and regards,

Konstantinos

Consulta sobre routers ISR4331

rodrdanj — Tue, 20 Apr 2021 14:23:14 GMT

El escenario es establecer VPN Site to Site, basada en IPSec (aplicando Virtual Tunnel interface) utilizando un arreglo HSRP, adicionalmente se debe emplear la estrategia router on stick (es decir usar una interfaz del router para todas las acciones). Los equipos que tenemos disponibles son los siguientes:

• PID VID: ISR4331/K9 V05
Las consultas concretas son:
• ¿Son compatibles estos equipos con lo que se necesita?.
• ¿Es necesario aplicarles una licencia adicional?.
• ¿Se requiere una versión firmware especifica?.

Sandbox Broken - Cisco Intersight Service for HashiCorp Terraform

Brian Morrissey — Tue, 20 Apr 2021 14:21:31 GMT

Looks like the Devnet Sandbox for "Cisco Intersight Service for HashiCorp Terraform" is broken. The plans stayed stuck in queued in Terraform Cloud forever and when checking in Intersight it looks like the Assist Appliance is offline for the past 8 days.

Centralized Reporting for TrustSec SGACLs

brentpavlovich — Tue, 20 Apr 2021 14:15:55 GMT

Is anyone familiar with a way to centralize the reporting of TrustSec events on switches and routers? Specifically SGACL drop messages. Our network topology consists of around 150 switches (mostly 9200/9300s) and 100 routers (all 4331s or 4431s). Right now the only way we have to tell if traffic is being blocked because of TrustSec is to individually log into each router and switch and look at the log messages. Not only is this not a feasible solution for 250 devices, it doesn't provide long term historical records to look back upon when issues are reported.

Since the log messages are type 6 they dont make it to our logging server so running reports off that isn't an option (unless there is a way to change the message type so the router/switch send it to our remote syslog server???)

Netflow doesn't seem to contain any useful information in it that can distinguish normal traffic from blocked traffic caused by SGACL drops. I've read a few articles about being able to use netflow to determine this, but seems its only available on 6500 switches.

Just wondering if anyone out there has a good solution for this problem. I single pane of glass sort of speak into TrustSec enforcement.

DNA Center Topology - Add unmanaged devices/links

pinglis — Tue, 20 Apr 2021 14:08:40 GMT

Is there any way to add an unmanaged device device to topology diagram in DNA Center and manually add a link.

For example I have an Anchor wireless LAN controller connected to a DMZ switch behind a firewall connected to the core switch. Currently the Anchor WLC and DMZ switch are showing separated from the rest of the LAN so I would like to add a device to represent the firewall with links to the DMZ and Core switches.

It is was possible to do this Prime and on the links configured the source port on the switch end of the link.

Another example would be a WAN provider router.

关于思科AIR-CAP1552E-N-K9室外AP的console调试问题

iliaodong — Tue, 20 Apr 2021 14:04:25 GMT

大家好，最近遇到了一个思科的室外APAIR-CAP1552E-N-K9，着手调试时发现这个AP没有console口。

请问下这个AP是需要特殊的console调试线吗，还是没有console调试接口，只能靠AC来进行调试。

因为连AC是要对应的软件版本，没有console线如何知道这个AP的版本呢？

AP的接口和指示灯见下图：思科1552接口

Site2SIte VPN Overlapping Network

sahara101 — Tue, 20 Apr 2021 13:57:56 GMT

Hello community,

I have a question for which I googled but still do not understand it quite well.

Would it be possible to create a site2site connection, with both sides having the same subnet? What I have found is the use of XLATED.

https://www.petenetlive.com/KB/Article/0001446

But what I do not understand is how this works. If I have Site A 10.10.1.0 and Site B 10.10.1.0 I need to create a masquerade subnet for bothe, so Site A 10.10.2.0 and Site B 10.10.3.0

Then I need to ping 10.10.3.0 from Site A in order for SIte B to provide a response over 10.10.1.0.

But does this not mean that all communication needs to be made over the new addresses? If there are Services that depend on each other how will they communicate without changing any IPs? Let's say I migrate DC from Site A to Site B. How will the Clients on Site A communicate with it?

What I am trying to achive, if possible, is to leave the network as is, create the same netowork at Site B and let them communicate via VPN.

Thank you!

VPN and NAT

gcook0001 — Tue, 20 Apr 2021 13:55:42 GMT

I am fairly new with the Firepower firewalls. I was wondering if this is possible.

I want one profile to use split tunneling. So I have nat(inside,outside) after-auto source static inside inside destination inside inside

I want one profile to send all traffic over the VPN. So from what I understand I need to add the following nat(outside, outside) after-auto source static outside outside destination outside outside

I don't have a way to test this except on production so I am hoping for some feedback.

Is the second nat correct

Can I have both nats or will they interfere with each other.

Question about Q-in-Q Configuration

petehummon — Tue, 20 Apr 2021 13:55:35 GMT

Hi Cisco Folks,

I’m a L3 guy who is struggling to understand a L2 configuration. I need a sanity check to make sure I understand how my devices are configured.

I have two Cisco switches (running IOS XR 6.6.12) connected by a Bundle-Ethernet interface identically configured on both sides. When I look at a switch’s configuration, I see this:

interface Bundle-Ether3
 description "Bundle to remote switch"
 mtu 9192
!
interface Bundle-Ether3.1234 l2transport
 description vlan 1234 to remote switch
 encapsulation dot1q 1234 second-dot1q 500
!

So after doing a little research and posting on this forum, I believe that Bundle-Ethernet3.1234 is configured with Q-in-Q VLAN traffic.

Let me see if I have this correct: As configured, both switches accept my customer’s traffic on VLAN 1234. But to forward traffic across the bundle, we have to double-tag, perhaps because my customer might someday want to include VLANs 1235, 1236, 1237, etc. So my two switches double-tag, using VLAN 500 as the inner VLAN.

VLAN 500 exists only between the two switches on either end of the bundle. When traffic on VLAN 1234 arrives at Switch A, the switch adds the double tag of VLAN 500 before forwarding the frame across the bundle to Switch B. Switch B removes the VLAN 500 double tag and forwards the frame on VLAN 1234. All other switches in the network are oblivious to VLAN 500’s existence.

…do I have this right? Thank you.

Problema con la configuración bridge ASA 5506 X, y como poder quitarla

DavidGustavoSanabriaRocha3330 — Tue, 20 Apr 2021 13:45:27 GMT

Buenas recientemente adquirí el ASA5506X y al momento de configurarlo vi que esta configurado en modo bridge en el grupo BVI1 y deseo quitarla ya que en la configuración que necesito implantar no tendría que estar configurada de esta manera, intente ya quitar esa configuración con la que creo que viene predeterminada.

Si alguien sabe como quitar esa configuración y cambiarla a modo normal le agradecería mucho.

Gracias

Automate personal room creation?

MC900 — Tue, 20 Apr 2021 13:29:59 GMT

Is there a way to automate the creation of personal rooms for new users as they are given Webex accounts?

How update License Catalyst 9300 and 9200

LincolnR — Tue, 20 Apr 2021 13:24:31 GMT

Hi,

I have some Catalyst 9300 and 9200 switches in my park that need to update the license that has the provisional license. When we buy the equipment, we also acquire the licenses. I would like to know how do I update these licenses on these devices.

Has anyone been through this, can you give me the step by step?

Thanks in advance.

Question about the use of firewall in the SD-Access factory

khalilsoltani47714 — Tue, 20 Apr 2021 13:20:21 GMT

When creating SD-Access Fabric we use the transit-IP
I used switch nodes borders Cisco Catalyst 9500 and fusion (you can used Firewall to share the VRF)
either the firewall is not recommended as a fusion ???
for the wireless which recommended in the factory to use wirelless embedded in the border node or in the Edge node.

connect 1GB SFP on Catalyst 3750 to Mellanox SN 2100

jsd281180 — Tue, 20 Apr 2021 13:11:16 GMT

I’m trying to connect a 1GB SFP port on a catalyst 3750 to a Mellanox sn2100 switch.
The ports on the Mellanox switch are all QSFP, so I’ve got a QSFP to SFP adapter module in there as below:
https://www.fs.com/uk/products/75320.html
So then into that I’ve got the following optic:
https://www.fs.com/uk/products/75332.html?attribute=947&id=214720

Then in the port on the cisco 3750 I’ve got the following optic:
https://www.fs.com/uk/products/11774.html

And finally the following fibre between them:
https://www.fs.com/uk/products/43142.html?attribute=240&id=99291

The ports at both ends are configured as 1GB.

The issue I’ve got is that the cisco switch doesn’t seem to recognize that anything is connected to it whereas the Mellanox things that is connected. See below output for the port status, note it has detected the SFP but says line protocol is down:

#show interface gi1/0/26
GigabitEthernet1/0/26 is down, line protocol is down (notconnect)
Hardware is Gigabit Ethernet, address is 001f.caf7.f59a (bia 001f.caf7.f59a)
Description: "Trunk to fsw01-port 7"
MTU 1522 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not set
Auto-duplex, Auto-speed, link type is auto, media type is 1000BaseSX SFP
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
168 packets input, 50240 bytes, 0 no buffer
Received 168 broadcasts (168 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 168 multicast, 0 pause input
0 input packets with dribble condition detected
480706 packets output, 77019048 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out

If I then do the equivalent on the Mellanox switch, it thinks it is connected:

net show interface swp7
Name MAC Speed MTU Mode
-- ---- ----------------- ----- ---- ----------
UP swp7 04:3f:72:30:90:04 1G 1500 BondMember

Alias
-----
core3-port26

cl-netstat counters
-------------------
RX_OK RX_ERR RX_DRP RX_OVR TX_OK TX_ERR TX_DRP TX_OVR
----- ------ ------ ------ ----- ------ ------ ------
0 0 0 0 4028 0 0 0

Routing
-------
Interface swp7 is up, line protocol is up
Link ups: 2 last: 2021/04/19 21:02:23.20
Link downs: 14 last: 2021/04/19 21:01:39.11
PTM status: disabled
vrf: default
OS Description: mer-c3750-core3-port26
index 46 metric 0 mtu 1500 speed 1000
flags: <UP,BROADCAST,RUNNING,MULTICAST>
Type: Unknown
HWaddr: 04:3f:72:30:90:04
Interface Type Other
Master interface: bond0

Does anyone have any thoughts on why the catalyst switch won’t recognise that something is connected to the port?
I have enabled the use of non-cisco SFPs with the command “service unsupported-transceiver" but this hasn’t helped.
It’s been suggested that I would need to reboot the switch in order for the “service unsupported-transceiver" to take effect. I can’t reboot the switch at the moment so I’ve arranged a maintenance window next week to try this but in the mean time can anyone advise on anything else that could be causing this issue?

Many thanks

2X sg550 and 1X3750

mark.stewart1 — Tue, 20 Apr 2021 12:58:51 GMT

Hi, I have this current setup, two sg550 switches connected to a 3750 which is in turn has an external connection to the internet.

from the 3750, i can ping both sg550 and also 8.8.8.8 over the internet.

what i want to be able to do is ping 8.8.8.8 from the sg550's, currently doing a traceroute it gets as far as the 3750 and that is it.

below are the configs for one of the sg550 (both very similar) and the 3750.

the 2 sg550's and plugged into ports 2 and 3 of the 3750 from port 3 on the sg550's.

---------------------------------------------------------------------------------------------------------

3750
Building configuration...

Current configuration : 1883 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SwitchB
!
enable secret 5 XXXXXXXXX
enable password XXXXXXXXX
!
ip subnet-zero
ip routing
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
interface GigabitEthernet2/0/1
switchport access vlan 99
switchport mode access
!
interface GigabitEthernet2/0/2
switchport access vlan 66
switchport mode access
!
interface GigabitEthernet2/0/3
switchport access vlan 66
switchport mode access
!
interface GigabitEthernet2/0/4
!
interface GigabitEthernet2/0/5
!
interface GigabitEthernet2/0/6
!
interface GigabitEthernet2/0/7
!
interface GigabitEthernet2/0/8
!
interface GigabitEthernet2/0/9
!
interface GigabitEthernet2/0/10
!
interface GigabitEthernet2/0/11
!
interface GigabitEthernet2/0/12
!
interface GigabitEthernet2/0/13
!
interface GigabitEthernet2/0/14
!
interface GigabitEthernet2/0/15
!
interface GigabitEthernet2/0/16
!
interface GigabitEthernet2/0/17
!
interface GigabitEthernet2/0/18
!
interface GigabitEthernet2/0/19
!
interface GigabitEthernet2/0/20
!
interface GigabitEthernet2/0/21
!
interface GigabitEthernet2/0/22
!
interface GigabitEthernet2/0/23
!
interface GigabitEthernet2/0/24
!
interface Vlan1
no ip address
shutdown
!
interface Vlan666
ip address 80.0.0.11 255.255.255.240
!
interface Vlan999
ip address 192.168.0.5 255.255.255.0
!
ip default-gateway 10.50.1.145
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 80.0.0.0 255.255.255.240 80.0.0.12
ip route 80.0.0.0 255.255.255.240 80.0.0.13
ip http server
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password XXXXXX
login
line vty 5 15
password XXXXXX
login
!
end

---------------------------------------------------------------------------------------------------------

SG550

config-file-header
-----
v2.4.0.91 / RTESLA2.4_930_181_042
CLI v1.0
file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
!
unit-type-control-start
unit-type unit 1 network gi uplink te
unit-type unit 2 network gi uplink te
unit-type unit 3 network gi uplink te
unit-type unit 4 network gi uplink te
unit-type unit 5 network gi uplink te
unit-type unit 6 network gi uplink te
unit-type unit 7 network gi uplink te
unit-type unit 8 network gi uplink te
unit-type-control-end
!
vlan database
vlan 665-668
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
bonjour interface range vlan 1
hostname -----
aaa authentication login authorization SSH local
aaa authentication enable authorization SSH enable
line ssh
login authentication SSH
enable authentication SSH
password XXXX encrypted
exit
username admin password encrypted XXXX privilege 15
ip ssh server
ip ssh-client source-interface vlan 65
ip ssh-client server authentication
!
interface vlan 65
name abc
ip address 10.50.1.145 255.255.255.240
!
interface vlan 66
name def
ip address 80.0.0.12 255.255.255.240
!
interface GigabitEthernet1/0/1
switchport mode trunk
!
interface GigabitEthernet1/0/2
switchport mode trunk
switchport access vlan 65
!
interface GigabitEthernet1/0/3
spanning-tree link-type point-to-point
switchport access vlan 66
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch
!
interface TengigabitEthernet1/0/1
spanning-tree link-type point-to-point
switchport mode trunk
macro description "switch "
!next command is internal.
macro auto smartport dynamic_type switch
!
exit
ip default-gateway 80.0.0.11

Cannot access any of my old sites

SchwenieDCCC — Tue, 20 Apr 2021 12:52:28 GMT

I neglected to change over to an email address for signing in to my sites so I guess these errors are payback. I do not have any data in My Devices page either and that one was really important to me.

I'm hoping we can merge my old user account into the new email format.

CSPC 2.9 configuring your CSPC appliance failed

jeroenm17 — Tue, 20 Apr 2021 12:49:55 GMT

when configuring the new CSPC 2.9 collector, it failed when configuring a static ip or a ip via DHCP.

------------------------------------------------------------------------------------

Please select from the below options:

1. Get IPv4 Address automatically (Use DHCP)

2. Enter IPv4 Address manually (static IP Address)

3. Main Menu

Enter your choice : 2

Enter IP Address : xxx.xxx.xxx.xxx

Enter Net Mask : xxx.xxx.xxx.xxx
Enter Default Gateway : xxx.xxx.xxx.xxx

Configuring your CSPC appliance...

Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/Activeconnection/2)

Failed!

Press [Enter] key to continue

----------------------------------------------------------------------------------------------

When we use option 1 we only see;

Configuring your CSPC appliance...

Failed!

Press [Enter] key to continue

----------------------------------------------------------------------------------------------

Does anyone have seen this error before? we already had a CSPC running in the environment.

copy IOS from router to tftp : Error

Dhikra Marghli — Tue, 20 Apr 2021 12:18:14 GMT

Hello

I have switch layer 3 : 3750 cisco , so i want to copy ios from this switch to PC with TFTP

so i have a error !!!

Switch-federateur#copy flash: tftp:
Source filename [c3750e-universalk9-mz.122-55.SE3]?
Address or name of remote host []? 192.168.7.189
Destination filename [c3750e-universalk9-mz.122-55.SE3]?
%Error reading flash:c3750e-universalk9-mz.122-55.SE3 (Is a directory)
Switch-federateur#

So how i can copy IOS from cisco to TFTP and i wait a reply from expert switch layer 3

thanks in advance

Can't hide floating toolbar with keyboard shortcut since update

Jill.Robinson — Tue, 20 Apr 2021 12:14:02 GMT

Yesterday I updated the Webex app on both my desktop PC and Windows tablet. Since then, the keyboard shortcuts (ctrl + shift + q and ctrl + shift + alt + h) to hide the floating toolbar when sharing is no longer working on either device. Anyone finding this to be an issue? Since updating, I am on version 41.4.4.10

I work in a school using Webex for hybrid learning so this feature is heavily used by all the teachers.

forwarding message with attachment

Bjoern Schonhoff — Tue, 20 Apr 2021 12:11:07 GMT

Hi community,

we are using Webex App currently in a Poc and later in a larger environment. What has never worked is that messages with attachments (e.g. pictures) can be forwarded to spaces and contacts but the Target sees that only the a file has been shared with you: 10cda999-a10f-4f14-a05c-345703fb6558.PNG but the file itself is not showing. I assume forwarding of an attachment (pic, doc. gif, etc...) should be part of the basic features and everybody who is using Webex App is expecting this.

Am i wrong to believe that this is a must or is it just an error?

Thanks

Bjoern

Catalyst 3560-CX - IGMP Querier commands does not work as in the reference guide

JarnoValkonen38927 — Tue, 20 Apr 2021 11:58:25 GMT

Hi!

I have problem with IGMP querier config. I would like to change version 2, what 3560 uses default, to version 3. Reference guide says that go interfaces config and then type command ”ip igmp version 3”. After that I could config other parameters, but I don’t get anywhere, because that command does not work. And ? mark does not give suggestion that would work etc. Any suggestion?

CUCM SAN Certificate

oosters-mario — Tue, 20 Apr 2021 11:44:40 GMT

Hi,

I am in the process of creating a new Multi-Server (SAN) certificate for our Collaboration Cluster.

This automatically includes my Publisher, 2 Subscribers as well as my 2 Presence Nodes.

My question is, as I need to renew my 2 * Unity Connection and 2 * UCCX as well, could I add there FQDN's (using other domains) in this CSR and create one certificate that would contain all of them for tomcat and tomcat-trust off course. Is this a good or bad idea ??

I suppose I would need to upload the same certificate once for the Unity Connection Cluster as well for the UCCX cluster.

If this is ok, this would seriously reduce the number/complexity of certificates needed.

Also my Internal Signing CA is a Sub CA. Off course I need to add it everywhere in tomcat-trust. But what about it's root. Do I need to add this one as well to tomcat-trust. It seems logic to me, but the previous consultant, didn't do it. And all is still working.

Expressway- Monitoring active calls

mazlumaltuntas — Tue, 20 Apr 2021 11:22:36 GMT

I want to monitor how many calls are passed daily on expressway. What is the way to do this? Can it be monitored on NMS Solarwinds with SNMP?

Expressway C&E X12.6.4

CUCM 11.5

IMP 11.5

WS-C2960XR Failover Timeout

NguyenHung2238 — Tue, 20 Apr 2021 11:32:32 GMT

Hi,

When I do WS-C2960XR Stack Switch Failover Test,

My RDP from thin client to server disconnect.

Teaming both thin client side and server side. And log detail below.

Any Idea what happing with this switch:

Apr 20 10:38:09.985: %STACKMGR-5-SWITCH_READY: Switch 1 is READY
Apr 20 10:38:11.544: %PHY-5-TRANSCEIVERINSERTED: Slot=1 Port=25: Transceiver has been inserted
Apr 20 10:38:11.673: %PNP-6-PNP_BEST_UDI_UPDATE: Best UDI [PID:WS-C2960XR-24TS-I,VID:V06,SN:] identified via (platform-registry)
Apr 20 10:38:11.673: %PNP-6-PNP_CDP_UPDATE: Device UDI [PID:WS-C2960XR-24TS-I,VID:V06,SN:] identified for CDP
Apr 20 10:38:11.676: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Startup Config Present)
Apr 20 10:38:13.176: %USB_CONSOLE-6-MEDIA_RJ45: Console media-type is RJ45.
Apr 20 10:38:15.025: %CFGMGR-4-SLAVE_WRITING_STARTUP_CFG: only master can do that
Apr 20 10:38:15.025: %CFGMGR-4-SLAVE_WRITING_STARTUP_CFG: only master can do that
Apr 20 10:39:18.300: %STACKMGR-4-SWITCH_REMOVED: Switch 2 has been REMOVED from the stack
Apr 20 10:39:18.307: license_init_config_queue: initializing the license_switch_boot_config_q
Apr 20 10:39:18.310: %STACKMGR-4-MASTER_ELECTED: Switch 1 has been elected as MASTER of the stack
Apr 20 10:39:18.489: %CFGMGR-6-APPLYING_RUNNING_CFG: as new master
Apr 20 10:39:18.583: %SSH-5-ENABLED: SSH 1.99 has been enabled
Apr 20 10:39:18.625: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.628: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.628: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.632: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.999: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 0 CLI Request Triggered
Apr 20 10:39:18.999: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.130.1.10 port 0 CLI Request Triggered
Apr 20 10:39:19.002: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 0 CLI Request Triggered
Apr 20 10:39:19.369: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 514 started - CLI initiated
Apr 20 10:39:19.369: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.130.1.10 port 514 started - CLI initiated
Apr 20 10:39:19.369: %STACKMGR-5-MASTER_READY: Master Switch 1 is READY
Apr 20 10:39:19.394: %COMMON_FIB-4-FIBIDB: No fibidb found for Virtual1 during address change
Apr 20 10:39:20.341: %LINK-3-UPDOWN: Interface Port-channel9, changed state to up
Apr 20 10:39:20.348: %LINK-3-UPDOWN: Interface Port-channel11, changed state to up
Apr 20 10:39:20.348: %LINK-3-UPDOWN: Interface Port-channel12, changed state to up
Apr 20 10:39:20.348: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
Apr 20 10:39:20.355: %LINK-3-UPDOWN: Interface Vlan351, changed state to up
Apr 20 10:39:20.355: %LINK-3-UPDOWN: Interface Vlan352, changed state to up
Apr 20 10:39:20.359: %LINK-5-CHANGED: Interface FastEthernet0, changed state to administratively down
Apr 20 10:39:20.359: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan351, changed state to up
Apr 20 10:39:20.359: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan352, changed state to up
Apr 20 10:39:20.369: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 514 started - CLI initiated
Apr 20 10:39:21.344: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel9, changed state to up
Apr 20 10:39:21.351: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel11, changed state to up
Apr 20 10:39:21.351: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel12, changed state to up
Apr 20 10:39:21.362: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down

ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good

JohnB5468 — Tue, 20 Apr 2021 10:54:41 GMT

Cisco 2960X with IOS version 15.2(7)E3 shows PoE requests on several ports of the switch.

To be clear: Port 8, 11 and 28 show the request.

Port 8 has no device connected.

Port 11 and 28 have client computers connected which were OFF at the time I created below debug log:

I activated 'debug cdp packets' and 'debug cdp ilp' for this.

And I started looking at this because port 2 had an AP connected which was not booting not even powering on through the PoE of the switch.

I upgraded to the mentioned IOS to test if this helped but it is still the same and the former IOS 15.2(4)E7 is used globally on all my 2960x switches without any problem. Upgrading IOS now, but the old IOS served me well for a long time.

Please help me in finding the reason why this happens...

Apr 20 09:36:11.935: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:36:14.734: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:36:17.614: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:36:19.656: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:36:20.040: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:36:22.473: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:36:24.161: CDP-PA: Packet received from PAKASW001.stahl.com on interface GigabitEthernet1/0/1
Apr 20 09:36:24.161: **Entry found in cache**
Apr 20 09:36:27.080: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/41
Apr 20 09:36:27.621: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/4
Apr 20 09:36:31.833: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/5
Apr 20 09:36:32.057: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:36:32.693: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/36
Apr 20 09:36:34.717: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:36:39.774: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:36:42.172: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/26
Apr 20 09:36:42.301: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:36:45.814: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:36:48.673: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:36:55.216: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:36:56.940: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/39
Apr 20 09:36:57.390: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/1
Apr 20 09:36:57.719: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:36:59.897: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:37:02.696: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:37:06.296: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:37:08.278: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/9
Apr 20 09:37:09.037: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:37:09.460: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/18
Apr 20 09:37:12.277: CDP-PA: Packet received from PAKASW001.stahl.com on interface GigabitEthernet1/0/1
Apr 20 09:37:12.277: **Entry found in cache**
Apr 20 09:37:15.017: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:37:15.898: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/41
Apr 20 09:37:17.719: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:37:17.995: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/4
Apr 20 09:37:20.054: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:37:22.693: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:37:27.065: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/5
Apr 20 09:37:29.110: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/36
Apr 20 09:37:30.096: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:37:32.797: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:37:35.663: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/26
Apr 20 09:37:38.135: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:37:40.176: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:37:40.938: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:37:43.035: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:37:46.999: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/39
Apr 20 09:37:54.255: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:37:54.492: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/1
Apr 20 09:37:56.981: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:37:58.697: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/9
Apr 20 09:38:00.616: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:38:00.854: CDP-PA: Packet received from PAKASW001.stahl.com on interface GigabitEthernet1/0/1
Apr 20 09:38:00.854: **Entry found in cache**
Apr 20 09:38:03.517: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:38:05.017: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:38:05.307: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/18
Apr 20 09:38:06.600: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/4
Apr 20 09:38:07.914: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:38:08.292: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/41

i want to add mac based VLAN in Switch CBS250-24P-4X - switch422fb2

MehdiGhazi12826 — Tue, 20 Apr 2021 10:43:25 GMT

I want to make mac based VLAN by webinterface or ssh sisco commands how can i do that

my swith model is CBS250-24P-4X - switch422fb2

UNABLE TO LOG ON TO CISCO FINESSE AFTER SECURE LDAP CONFIG

ugwuugochukwukizito — Tue, 20 Apr 2021 10:43:21 GMT

Hello, my client mentioned they need to configure secure LDAP on the CUCM, I researched and used the link below to do the configuration

Configure CUCM for Secure LDAP Directory and Authentication with AD - Cisco

After the configuration, the Call center agents could not log on to Cisco Finesse. I had to revert to the default port 389 for both LDAP directory and LDAP authentication.

After reverting, the agents were able to login.

Is there a way i can configure Secure LDAP or a port number I can use so the Agents can login to cisco finesse afterwards.

How to block outgoing traffic when VPN goes down?

Whoops — Tue, 20 Apr 2021 11:11:43 GMT

Hello
We have an ASA5510 v9.1.(7)32 at branch with configured IKEv2 site-to-site VPN to Head office.

All traffic goes through VPN.

ISP give an ip-address by DHCP with 4 gateways (yes, multiple), that randomly changes. Some of them reachable via ICMP, some no.

Via security reasons we have to block all outgoing traffic when VPN goes down. At routers there was VTI, so config be like: ip route 0.0.0.0 0.0.0.0 Tunnel0, but in this version of ASA we have no VTI, EEM.
I tried to block outgoing traffic by acl outside-out, but it also block traffic through VPN.

Here is parts of config:

interface Ethernet0/0
 nameif outside
 security-level 0
 ip address dhcp setroute 
!
interface Ethernet0/1
 no nameif
 no security-level
 no ip address
!
interface Ethernet0/1.9
 vlan 9
 nameif inside
 security-level 100
 ip address 192.168.3.1 255.255.255.0
!
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
!
object-group network obj-nat-inside
 network-object 10.1.1.0 255.255.255.0
 network-object 10.1.2.0 255.255.255.0
 network-object 192.168.3.0 255.255.255.0
!
access-list outside_cryptomap_1 extended permit ip object-group obj-nat-inside any4 
!
logging host inside 192.168.2.2
!
icmp permit host 192.168.2.2 inside
!
route inside 10.1.1.0 255.255.255.0 192.168.3.2 1
route inside 10.1.2.0 255.255.255.0 192.168.3.2 1
!
http 192.168.2.0 255.255.255.0 inside
snmp-server host inside 192.168.2.2 community 8 encr version 2c
snmp-server community 8 encr
!
crypto map outside_map 1 match address outside_cryptomap_1
crypto map outside_map 1 set peer 2.2.2.2
crypto map outside_map interface outside
!
ssh 192.168.2.0 255.255.255.0 inside
!
management-access inside
!
ntp server 192.168.2.2 source inside
!
group-policy GroupPolicy_2.2.2.2 internal
group-policy GroupPolicy_2.2.2.2 attributes
 vpn-tunnel-protocol ikev2 
 default-domain value corp.domain
tunnel-group 2.2.2.2 type ipsec-l2l
tunnel-group 2.2.2.2 general-attributes
 default-group-policy GroupPolicy_2.2.2.2
tunnel-group 2.2.2.2 ipsec-attributes
 ikev2 remote-authentication pre-shared-key 8 encr
 ikev2 local-authentication pre-shared-key 8  encr

I can't add static route with track, cause multiple gateways from ISP.

Can't add static route to via VPN GW (2.2.2.2), cause in that case there is no icmp, snmp, logging, ntp to ASA (SSH, ASDM works):

route outside 10.0.0.0 255.0.0.0 2.2.2.2 1 track 1
route outside 172.16.0.0 255.240.0.0 2.2.2.2 1 track 1
route outside 192.168.0.0 255.255.0.0 2.2.2.2 1 track 1
route inside 10.0.0.0 255.0.0.0 192.168.3.0 50 !fake routes to blocking
route inside 172.16.0.0 255.240.0.0 192.168.3.0 50 
route inside 192.168.0.0 255.255.0.0 192.168.3.0 50 
!
sla monitor 1
 type echo protocol ipIcmpEcho 2.2.2.2 interface outside
 num-packets 2
 timeout 2000
 threshold 2000
 frequency 5
sla monitor schedule 1 life forever start-time now
!
track 1 rtr 1 reachability

Also I tried to add dhcp client route track 1 in e0/0, but in that case VPN goes down, cause have no route to peer.

# sh ip address outside dhcp lease
Temp default-gateway addr: 1.1.1.251
...
# sh ip address outside dhcp lease
Temp default-gateway addr: 1.1.1.254
...
# sh ip address outside dhcp lease
Temp default-gateway addr: 1.1.1.252

So... how to block outgoing traffic if VPN goes down with multiple gateways via DHCP?

C1117 SD-WAN - request platform software package clean

Xividar — Tue, 20 Apr 2021 10:18:53 GMT

Hi Guys,

"request platform software package clean" is not supported on the SD-WAN code - how do we clean-up flash and remove redundant .PCK files?

Thank you.

DHCP issue After upgrade 1830

Hasan AL-Madani — Tue, 20 Apr 2021 10:14:00 GMT

Hi,

I'm facing an issue in cisco aironet 1830, after upgrade imag of AP to 8.10* depend on cisco guide.

AP didn't send any IP address from dhcp server " External"

any help.

WLC 9800 new PKI Certs

OJ_Magellan — Tue, 20 Apr 2021 10:13:40 GMT

Hi,

We have a new WLC 9800 in our network, and I'm required to install the CA-Server Certs on the controller to have secure connection to the WLC GUI through the browser, how do I perfom this task? does it work like ISE and Stealthwatch in a similar fashion to trust the CA?

Normally I'd:

1)Upload the Root-CA in Cert Store

2)Upload the Sub-CA (Intermediate) in Cert Store

3) Generate a CSR

4) Get it signed by the CA-Server

5) Upload the Signed CSR

Does it work like that as well in the 9800 WLC ?

Regards,

Jabber grabs bluetooth profile of headset that does not work

t.ham — Tue, 20 Apr 2021 10:01:13 GMT

Using a Logitech H800 headset there are two profiles available. A standard one and a stereo one. Other apps work fine with both profiles but Jabber does not work using the stereo profile. This stereo profile is used every time I work with jabber so everyday I have to manually change from stereo to standard bluetooth profile.

How could this be solved?

Best regards

t.ham

Alarms in prime 3.9 do not get auto cleared

Ditter — Tue, 20 Apr 2021 09:49:08 GMT

Hi to all,

I have noticed an old problem in Prime which is still not resolved , unless i am doing something wrong.

That is, Alarms that are not getting cleared automatically when the reason that created the alarm stops.

For example , during a power outage i got a critical alarm for "redundant power supply failure".

This critical alarm was in category switches and routers and the condition was " Environmental Monitor Redundant Issue"

However this alarm appeared 4 days ago and the alarm was cleared after 1 hour in the same day.

But after 4 days i am still having this alarm active.

Shouldn't it be auto cleared by itself?

Thanks,

Ditter.

Management Port Catalyst 9500

Damon M. — Tue, 20 Apr 2021 09:47:54 GMT

Hi guys,

Recently we've added a Catalyst 9500 switch in our production network and i wanted to configure remote access to this switch for monitoring and config purposes.

Now, all of our switches are connected to one management switch (Catalyst 2960X) from were we get access to all the switches.

Every switch has a Vlan configured for this (Vlan 13), each with an interface on that vlan and with an IP.

All the ports on the 2960X are configured as :

interface GigabitEthernet1/0/1

switchport access vlan 13

switchport mode access

Now, i have been reading into the Ethernet Management port that the 9500 has but i am all confused of how i can and or want to implement this in our current environment.

I configured a static ip on Interface GigabitEthernet0/0

10.32.13.59/24

Also made a static route to the 2960X

ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.32.13.2

Now, could you guys help me out?

What am i missing about the Ethernet management port, i'm also not quite sure i understand what out of bound means with those ports. Did i forget or do something wrong with the config?

Thanks in advance!

Greetings

Damon

EDIT : normally i would just connect a cable to one of the other ports, create vlan and add an IP but in this case with this switch (9500) we're occupying all of the ports for use so thats why i would like to use the Management port.

Multiple VPN Users

cpraneshwar — Tue, 20 Apr 2021 09:07:34 GMT

I require 2 additional VPN users for the CUCM sandbox.
Reservation ID: 0445080d-a3c9-4434-bd00-07d779d085ae

ibgp

DragosMariusAvram66611 — Tue, 20 Apr 2021 08:58:51 GMT

Hello everyone,

How do i overcome the ibgp rule not to advertise a BGP advertisement learnt from one iBGP neighbor to another iBGP neighbor?

as in my topology i need router loopbacks advertised via ibgp.

all routers have ospf enabled and conectivity

all routers have ibgp peering

r2 and r3 cant see each other loopbacks

for every router config is as follow

r1:

neigh 10.1.12.2 remote-as 65000

neigh 10.1.14.4 remote-as 65000

neigh 10.1.13.3 remote-as 65000

network 1.1.1.1 mask 255.255.255.255

etc...

all the config is correct but i need to evercome the advertisment rule.

Thank you

Reports missing for specific dates on CUIC 11.5.1

Charles@Cisco-Collaboration — Tue, 20 Apr 2021 08:38:13 GMT

Hi All,

Could someone assist to resolve the aforementioned subject. We are not able to spool reports from date 16/04/2021 to 18/04/2021. This happened when the CUIC services restarted with no human intervention on the Primary UCCX 11.5.1.11001-34

unity connection import greetings from exchange 2016

shafeen — Tue, 20 Apr 2021 08:31:12 GMT

Hi All ,

I have a unified messaging integration(sip) between CUCM and exchange 2016 , is there any way to export the greetings/messages from exchange 2016 and import them into unity connection in bulk? . The exchange 2016 users are migrating to Office 365.

B200 M5 ordering information.

ShishirDash5204 — Tue, 20 Apr 2021 08:21:40 GMT

1.What are the question to be asked before creating BOM for UCS B200 M5 server?

2.Is it necessary to select operating system while ordering the B200 M5 server? Or is it optional?

What is part id for ESXi 7?

FMC: Security Zones and Interfaces on ASA Failover Pair

swscco001 — Tue, 20 Apr 2021 07:59:50 GMT

Hello everybody,

I have just setup my first FMC (6.6.1) for a ASA Failover Pair (9.8(2)20)
with Firepower modules (6.6.1).

At the moment still no traffic will be handled by the module (neither
"sfr fail-open" nor " sfr fail-open monitor-only" is currently configured
in the policy-map under "class sfr".

The are still no zones in the FMC and I want to know how you would proceed
with creating zones.

Attached you find the zones on the ASA.

Do you put the interfaces with the same security level in the same zone,
or is there a better model? For example the outside interfaces on primary
and secondary ASA in the outside zone (see attached)?

Every hint is welcome!

Thanks a lot!

Bye
R.

Cisco 5516x- after copy anyconnect-win-4.10.00093-webdeploy-k9.pkg INFO: No digital signature found

Alex Ribas — Tue, 20 Apr 2021 07:52:06 GMT

Hi All

After copied

Accessing tftp://1xxxxx/anyconnect-win-4.10.00093-webdeploy-k9.pkg...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Writing file disk0:/anyconnect-win-4.10.00093-webdeploy-k9.pkg...
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
INFO: No digital signature found <---- Message

Any ideia why?

thank you

cisco wlc 8.10.130.0

Anjana A — Tue, 20 Apr 2021 07:26:00 GMT

Hi Team,

We have recently upgraded the wlc (5520)to new code 8.10.130.

Post the upgrade users connecting to local mode AP's(3700) are not getting ip address.

After reloading the AP users are getting the ip address.

Regards,

Anjana

Monitoring iSCSI IO/s on Nexus 5k

hermytion — Tue, 20 Apr 2021 07:25:01 GMT

Hi,

we are experiencing issues in our iSCSI environment and i got asked if we can monitor the iSCSI IO/s on the Nexus 5k interfaces.

I looked at the interface counters but could not find a fitting counter.

Have i overlooked something or is there a other way?

Regards,

hermytion

CiscoSG350 switch - No syslog messages found

Yasmeen — Tue, 20 Apr 2021 07:17:28 GMT

Hi,

I have configured below commands in cisco SG350 switch for DOS prevention, but after get SYN Attack in switch ports i am not getting SYSlog messages like below one

01-Jan-2012 05:29:46: A TCP SYN Attack was identified on port gi1

01-Jan-2012 05:29:46: A TCP SYN Attack was identified on port gi1. TCP SYN
traffic destined to the local system is automatically blocked for 100
seconds.

the above logs are not found also when i check the show commands there also not showing SYN blocked Ports,

DOS#show security-suite syn protection
Protection Mode: Block
Threshold: 80
Recovery: 60

Interface Operational Last Attack
Name Status
----------- ------------- ---------------------------------------------

Attacked port not showing,

The below commands i configured for DOS Prevention,

DOS(config)#security-suite enable

DOS(config)#security-suite dos protection mode block

DOS(config)#interface range GigabitEthernet1 - 48

DOS(config-if-range)#switchport mode access

DOS(config-if-range)#switchport access vlan 3

DOS(config-if-range)#security-suite syn protection mode Block

DOS(config-if-range)#security-suite dos syn-attack 199 any

How do i get the Logs that my port Attacked by SYN ?

Pls share me the Commands.

Thanks,

Regards,

Yasmeen Shaul Hameed.

Shared Line phones do not receive external calls simultaneously

APC-Shaban — Tue, 20 Apr 2021 07:13:28 GMT

Hi,

I have 3 Phones 8865 on one shard line, the phones do not receive external calls simultaneously (when the external caller dial the land line then dial the shared extension) , one of them ringing only (Randomly).

Can you help in this ?

N9K 开启log功能并传送至指定服务器命令

nexusNXOS57758 — Tue, 20 Apr 2021 06:56:54 GMT

旧3750 是logging on

N9K没这个命令

UCCX 11.6 have 2 CSQ with the same name

rieda — Tue, 20 Apr 2021 07:03:13 GMT

Hello all,

I faced an issue which should blocked by the system - I thought.

Customer run UCCX 11.6 and reported issues with call distribution at a specific CSQ.

Now I see, there are 2 CSQ´s which have exact the same name - please see attached screenshot.

How can this happen and how could this be solved the best way, without effecting the reporting.

Regards

Alex

Cisco WSA S695 The daemon is not responding

Raymond_1707 — Tue, 20 Apr 2021 06:53:09 GMT

Hi all,

I was performing a firmware upgrade for WSA S695 to version 12.5.0-678. after the upgrade completed. And when I try to resetconfig. I got the following error Failed to reset the configuration. The error was: The daemon is not responding.

Any advice on how we can troubleshoot this daemon issue? Thank you.

Best Regards

Raymond

Cisco AP 每一个月定期重启命令如何设定

bozhouxfcc — Tue, 20 Apr 2021 06:45:43 GMT

Nexus 93180 some interfaces has "output error" on "Store and Forward" Mode.

idc000002 — Tue, 20 Apr 2021 06:14:17 GMT

Nexus 93180 some interfaces has "output error" on "Store and Forward" Mode.

I remember “Cut-Through Mode” will be "output error" if interface has "input error".

but My Nexus 93180 is "Store and Forward" Mode.

interface does not have "input error".

cant create static NAT in cisco RV340 router

ThuvarageshRajagopal56285 — Tue, 20 Apr 2021 05:59:11 GMT

In the static NAT under firewall I am trying to create NAT rule where when I give the static IP in public IP range tab I am getting error as it is the WAN IP of WAN2. How can I create NAT then. Please help.

Help with B-ACD configuration setup

lisandro — Tue, 20 Apr 2021 05:56:57 GMT

Dear I hope you are well, I would like you to help me with what I want to do if it is possible.

I currently have a Cisco 1861 router with the following configuration:

application

service queue flash:/aa/app-b-acd-3.0.0.2.tcl
param queue-len 30
param aa-hunt10 7200
param number-of-hunt-grps 1
param queue-manager-debugs 1
!
service aa flash:/aa/app-b-acd-aa-3.0.0.2.tcl
param number-of-hunt-grps 1
paramspace english index 1
param menu-timeout 0
param dial-by-extension-option 1
param handoff-string aa
paramspace english language en
param max-time-vm-retry 1
param max-extension-length 4
param aa-pilot 7200
paramspace english location flash:/aa/
param second-greeting-time 60
param call-retry-timer 10
param voice-mail 7500
param max-time-call-retry 180
param service-name queue

This works very well for me when I call I listen to the audios and the options (1 to dial the intern and 0 to speak to the operator). But what I need is only to use an audio (which I already have) the audio says "you have a communication with the company X wait and it will be attended". That is, I do not need to mark options, I need to be referred with my operator directly, which will be the search group that I already have created.

My question is if it is possible to configure or change that script to only use an audio with the features that I mention ??

Thank you so much

C9120上怎么安装docker？然后怎么安装APP？

cker — Tue, 20 Apr 2021 05:32:13 GMT

C9120上怎么安装docker？然后怎么安装APP？没有DNA C，这个需要怎么实现？需要fogdir？或者

Wrong External Phone Number Mask

ChrisbJensen1 — Tue, 20 Apr 2021 05:27:41 GMT

I Know that some telco providers manipulate the digits they send to the destination. I will enable the debugs on the gateway which routes these calls and verify what actual digits we are sending to the Telco provider. But I don't know the debug to see it... Can anybody help

/Chris

ARP MAC is all Fs or all 0s.

network_geek — Tue, 20 Apr 2021 05:06:27 GMT

Hi All,

So I had captured an ARP packet and can see that Ethernet header has all FFs for an arp broadcast request while all 0s for Target MAC in the ARP header. Can someone shed light on this?

Regards.

How to configure a Router-on-a-Stick?

MasonCa — Tue, 20 Apr 2021 04:55:03 GMT

I am a student, and learning Switching, Routing, and Wireless Essentials

I have a question about configure a Router-on-a-Stick routing

As we can see, We have 5vlans and 3 switch. I configure etherchannel between S1 and S2.

How can I configure the Router-on-a-Stick in S1 S2 and S3?

(The address table may miss some ip, We can give an ip.)

IKVE2 IPSEC not comes up

VinothkumarRajendran29612 — Tue, 20 Apr 2021 04:45:28 GMT

Between the ISR Router ISR4331, I have configured IKEv2, but the tunnel comes up.

Setup like HUb and spoke
in the HUb router more than 35 tunnels are there, am facing issue with only one site.

Logs collected from spoke router :

Apr 15 12:32:03.188: IKEv2:% Getting preshared key from profile keyring IKEV2-KEYRING
Apr 15 12:32:03.189: IKEv2:% Matched peer block 'routerR02'
Apr 15 12:32:03.189: IKEv2:(SESSION ID = 0,SA ID = 0):Searching Policy with fvrf 0, local address xx.xx.xx.xx
Apr 15 12:32:03.189: IKEv2:(SESSION ID = 0,SA ID = 0):Found Policy 'IKEV2-POLICY'
Apr 15 12:32:03.190: IKEv2-ERROR:Address type 1620352985 not supported

Apr 15 12:32:03.190: IKEv2:SA is already in negotiation, hence not negotiating again
Apr 15 12:32:04.853: IKEv2:(SESSION ID = 3,SA ID = 1):Retransmitting packet

Apr 15 12:32:04.853: IKEv2:(SESSION ID = 3,SA ID = 1):Sending Packet [To XX.xx.xx.xx:500/From xx.xx.xx.xx:500/VRF i0:f0]
Initiator SPI : B5798795A3E64F90 - Responder SPI : 0000000000000000 Message id: 0
IKEv2 IKE_SA_INIT Exchange REQUEST
Payload contents:
SA KE N VID VID VID VID NOTIFY(NAT_DETECTION_SOURCE_IP) NOTIFY(NAT_DETECTION_DESTINATION_IP)

Apr 15 12:32:09.649: IKEv2-ERROR:(SESSION ID = 3,SA ID = 1):: Maximum number of retransmissions reached
Apr 15 12:32:09.649: IKEv2:(SESSION ID = 3,SA ID = 1):Failed SA init exchange
Apr 15 12:32:09.649: IKEv2-ERROR:(SESSION ID = 3,SA ID = 1):Initial exchange failed: Initial exchange failed
Apr 15 12:32:09.649: IKEv2:(SESSION ID = 3,SA ID = 1):Abort exchange
Apr 15 12:32:09.650: IKEv2:(SESSION ID = 3,SA ID = 1):Deleting SA

For IKEv2 what debug command, i need to run in the HUb router or kindly help us to fix the issue.

Thanks,

Vinothkumar.R

Re: Licence Cisco ASA 5516X

ameliascotts80938 — Tue, 20 Apr 2021 04:28:54 GMT

Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. Cisco ASA is the world's most widely deployed, enterprise-class stateful firewall.

Configuration of C9105AXI

Spragm2570 — Tue, 20 Apr 2021 03:43:15 GMT

Hello,

I have a RV345 Cisco router and recently purchased a C9105 WAP. I've assigned a static IP address to the WAP (192.168.1.125) and can ping the WAP, however it is still not 'discoverable' using FindIT, nor can I direct GUI access via 192.168.1.125, so am unable to configure it. Not sure what to try next. Any help would be much appreciated (beginner here).

Many thanks,

Mike

Recommended Cisco meeting devices for a 50 people U-Shape conference room?

RyoAlpha75608 — Tue, 20 Apr 2021 03:22:46 GMT

Hello,

What would you say if customer ask you to offer a remote meeting solution for a 50 people U-Shape conference room? In my point of view, the toughest part is to integrate the camera with the microphones in a such large room. Any ideas for this? Many thanks.

Mismatch in the logic for Vulnerability vs Bugs against an OS version

SDIRnDGroup12151 — Tue, 20 Apr 2021 03:12:21 GMT

Hi Team,

We are looking to determine which Vulnerabilities(CVE) apply against an OS version: say IOS-XE 16.9.2

If we search via the software checker or the PSIRT API , we get the vulnerability Cisco IOS XE Software Arbitrary Code Execution Vulnerability as part of the result, but if we look into this vulnerability and its associated bugId BugId CSCvs58715 which only has 17.2 as its only known affected release.

Can you explain the logic behind this ?

Thanks

1. Cisco Security Software checker result for 16.9.2

2. Cisco vulnerability Result

3,. Cisco Bug's Known affected version

Spanning and tree and static routing

WC415 — Tue, 20 Apr 2021 10:46:36 GMT

Hi,

I am struggling with my networking lab project, I'm familiar with the commands to apply but I can't quite figure out on which devices they should be applied on as I have tried lots of scenarios with no luck.

- I need to configure spanning tree between the 3 switches and primary and secondary root bridges for the management vlan (S1,S2,S3).

- Configure static routes on routers R1 and R2 (no RIP , no EIGRP, and no OSPF)

- The Pings I'm trying to do are:

* PC1 to PC2

* PC1 and PC2 to S1

* PC1 and PC2 to ISP.

https://ufile.io/js6lu3nw

https://ufile.io/0ugv425e

Any help is greatly appreciated.

Note: I'm using Packet tracer 8.

ACI Spine and Leaf connectivity via Netscout Passive TAPs (and Nexus Data broker as traffic receiver)

kishen32 — Tue, 20 Apr 2021 02:40:02 GMT

Hi all, looking for advice on an issue that we facing for traffic visibility by connecting spine and leaf via 40G BiDi taps.

This is the brief description of the issue.

We are connecting ACI spine and leaf via NetScout tap as in attached picture.

Spine and leaf connection up when the cables are connected to the network slots of the taps.

Once the monitor slots are cabled to Nexus data broker, we expect traffic to be sent to the data broker.

Once the link is enabled manually in the data broker ports (which are currently shut), we see it’s not coming up and also the links at spine and leaf goes down.

If I shut the data broker ports, the spine and leaf ports comes up. I am not sure about this behavior.

As a testing, we removed NetScout tap and plug a leaf link directly to the data broker ports, they are up.

Its just via the NetScout tap the links are not coming up at the data broker. We already installed NDB inside the data broker chassis and through GUI, I see everything seems to be fine.

I am not sure what is the issue from switching side via the Data Broker, hence need some guidance. We can't find a working sample for this anywhere, however a few points to state as below.

1. Spine and leaf has not been discovered or registered yet via the APIC contollers, we just testing if all cabling is good at this point.

2. Spine and leaf are on ACI OS, where spine is 9504 model while leaf are 93180FX.

3. Data broker is using NXOS with embedded NDB installed. All the basic configurations on data broker is done (spanning-tree bpdufilter enable on ports, no spanning tree on all vlans, spanning tree as mst and ports blocking multicast and unicast traffic with operational mode tap-aggregation)