rss.livelink.threads-in-node

"Optimize for Motion and Video" option has disappeared

CompCoach — Wed, 21 Apr 2021 00:22:25 GMT

in Webex Meetings, the option to "Optimize for Motion and Video" when sharing no longer appears. Has this feature been deleted or is something wrong with my installation?

Any ideas?

DHCP Pool on VLAN with PC fixed address

victorc7 — Tue, 20 Apr 2021 23:26:14 GMT

Hello,

I am trying to configure on a Catalyst 1000 switch a DHCP Server on network 192.168.1.0/24 with a fixed IP address of 192.168.1.10 for a PC Network with a specific MAC address.

Here is the steps I followed :

1) Type commands on Switch

conf t

ip dhcp pool 192.168.1.0
	network 192.168.1.0 255.255.255.0
	default-router 192.168.1.1
	exit

int vlan 1
	ip address pool 192.168.1.0
	exit

ip dhcp pool PC
	host 192.168.1.10
	hardware-address 01xx.xxxx.xxxx.xx
	exit

do sh ip dhcp pool

2) Check on Switch

Pool 192.168.1.0 :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 254
 Leased addresses               : 0
 Excluded addresses             : 1
 Pending event                  : none
 1 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.1          192.168.1.1      - 192.168.1.254     0     / 1     / 254

Pool PC :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 1
 Leased addresses               : 1
 Excluded addresses             : 1
 Pending event                  : none
 0 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.10         192.168.1.10     - 192.168.1.10      1     / 1     / 1

3) Type commands on Switch

do clear ip dhcp binding *

4) Type commands on PC

ipconfig /release && ipconfig /renew

No IP delivered

5) Type commands on Switch

do sh interfaces

6) Check

Vlan1 is up, line protocol is up
Hardware is EtherSVI, address is XXXX.XXXX.XXXX (bia XXXX.XXXX.XXXX)
Internet address will be autoconfigured from local DHCP pool
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:22:34, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 packets output, 0 bytes, 0 underruns
0 output errors, 2 interface resets
1704 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet1/0/1 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is XXXX.XXXX.XXXX (bia XXXX.XXXX.XXXX)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:01:18, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 3000 bits/sec, 3 packets/sec
34620 packets input, 8502653 bytes, 0 no buffer
Received 4427 broadcasts (3590 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 3590 multicast, 0 pause input
0 input packets with dribble condition detected
62613 packets output, 37744232 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

7) Type commands on Switch

int gigabitEthernet 1/0/1
	shutdown
	no shutdown
	exit
	
do sh ip dhcp binding

Check

Bindings from all pools not associated with VRF:
IP address      Client-ID/              Lease expiration        Type       State      Interface
                Hardware address/
                User name
192.168.1.10     01xx.xxxx.xxxx.xx       Infinite                Manual     Selecting  Unknown

9) Type commands on PC

ipconfig /renew

No IP delivered

10) Type commands on Switch

ip dhcp pool 192.168.1.0
	network 192.168.1.0 255.255.255.0
	default-router 192.168.1.1
	address 192.168.1.10 hardware-address 01xx.xxxx.xxxx.xx

% Address 192.168.1.10 is not valid in this pool.

	exit

int vlan 1
	ip address 192.168.1.2 255.255.255.0
	exit

11) Type commands on PC

ipconfig /renew

=> Got 192.168.1.3

12) Type commands on Switch and Check

(config)#do sh ip dhcp binding

Bindings from all pools not associated with VRF:
IP address      Client-ID/              Lease expiration        Type       State      Interface
                Hardware address/
                User name
192.168.1.1      XXXX.XXXX.XXXX          Apr 22 2021 12:57 AM    Automatic  Active     Vlan1
192.168.1.3      01xx.xxxx.xxxx.xx       Apr 22 2021 12:58 AM    Automatic  Active     Vlan1
192.168.1.10     01xx.xxxx.xxxx.xx       Infinite                Manual     Selecting  Unknown

(config)#do sh ip dhcp pool

Pool 192.168.1.0 :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 254
 Leased addresses               : 2
 Excluded addresses             : 1
 Pending event                  : none
 1 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.4          192.168.1.1      - 192.168.1.254     4     / 3     / 254

Pool PC :
 Utilization mark (high/low)    : 100 / 0
 Subnet size (first/next)       : 0 / 0
 Total addresses                : 1
 Leased addresses               : 1
 Excluded addresses             : 1
 Pending event                  : none
 0 subnet is currently in the pool :
 Current index        IP address range                    Leased/Excluded/Total
 192.168.1.10         192.168.1.10     - 192.168.1.10      1     / 1     / 1

So I have an IP address but not using the one that is matching to the correct fixed pool.

XGPON vs. 10G Switching Network in a very large campus network design competition

ezisaac — Tue, 20 Apr 2021 23:09:00 GMT

I am engaging a very large new smart campus (around 10 sqm, 20 large buildings, 2 train stations, multiple bus stations, and lots of audio visual devices) network design competition recently. Some system integrator proposed the Corning One GPON/XGPON as the network backbone to serve all business and applications there. I understand Cisco also has Catalyst PON product. However, I prefer our "3-tier" campus network architecture but I need your brain to help me fight back on the proposed XGPON solution.

Are there any good reasons that I may include those into my presentation to highlight the benefits and need of the 3-tier campus network architecture vs. the 2-tier GPON service model? Any comments or documents (I read the Lippis's study report before) are welcome.

Catalyst 9300 and extended VLANs

nat8506 — Tue, 20 Apr 2021 22:45:27 GMT

If I'm currently running VTP version 1 or 2 on my network and I have a 9300 switch in Client mode, I change to Server mode and create an extended VLAN, then go back to Client mode, will the revision number increment? I can't confirm but I don't believe it changes the revision number since extended VLANs are not propagated with VTP versions 1 or 2. Can anyone please confirm this?

Change personal room link

ms_smoore — Tue, 20 Apr 2021 22:44:09 GMT

Initially, this account was used for business so I used my work email, now that I am no longer employed with that agency, I would like to continue with the account but remove my previous employer's name from my personal room. How do I do that?

E164 dial plan----outbound calls to PSTN

G3261 — Tue, 20 Apr 2021 22:22:57 GMT

Hello, we are unable to call numbers in US because our telco is saying we are sending 11 digits to them (instead of 10). My senior staff is away so I am trying to figure this out. We are using e164 dial plan----and using mask with +1XXXXXXXXXX number

1-user dials LD number to US

2-TP is matched -9.1[2-9]XX[2-9]XXXXXX we add + and discard 9 So number becomes +1XXXXXXXXXX format

3-RP is matched--+.1[2-9]XX[2-9]XXXXXX

4-RL to PSTN

5-RL points to SLRG to PSTN

6-SLRG hows called number as +1XXXXXXXXXX

at what point or where exactly, we should be localizing the number for PSTN? It seems right now the number going out to PSTN is 1XXXXXXXXXX.

Cisco DNA Software Demo Series - Cisco ThousandEyes

gajewell — Tue, 20 Apr 2021 21:37:00 GMT

Cisco DNA Software Demo Series - Cisco ThousandEyes
Register now
Wednesday, May 12, 2021
10:00 am Pacific Daylight Time
(San Francisco, GMT-07:00)

SaaS applications and cloud-based services are increasingly critical for on-campus users, but they can be challenging to troubleshoot—particularly because they are delivered over ISPs and other networks that are outside of your control. This webinar will demonstrate how to leverage Cisco ThousandEyes to quickly gain insight into the availability and performance of critical applications and services for campus users.

You will learn how to:

Set up ThousandEyes on Catalyst 9000 switches through Cisco DNA Center
Set up tests for critical applications and endpoints in the ThousandEyes portal
Use tests to visualize network paths, troubleshoot service delivery issues, and understand performance over time

Live Q&A included.

Change Webex Upgrade Schedule

lallimander — Tue, 20 Apr 2021 20:19:45 GMT

Hi All,

We have been recently getting notices that our webex site xyzcompany.webex.com will upgrade at the time mentioned in email. That is our production time and we would like to permanently change these upgrade times to off hours instead of manually setting upgrade time each time. Is there a feature or option to configure this?

Thanks,

Lalli

Cisco AP 3602i without WLC

Kingsleyizuka — Tue, 20 Apr 2021 20:13:18 GMT

Hello,

What are the possible methods of deploying a Cisco 3602i AirCap Access Point and Cisco c9105AXi AP without an external Wireless LAN Controller?

Is it possible to deploy the 3602i access point in lightweight mode, using the inbuilt AireOS Wireless Controller, without an external WLC?

Thanks.

How I configure Two LDAP Authentication to use Anyconnect VPN (HA)

Alex Ribas — Tue, 20 Apr 2021 20:03:38 GMT

Hi All

I have just ONE Ldap authenticantion in connection do VPN AnyConnection

So Tried to find some option to use 2 Two LDAP (HA) just in case one fail I have secondary.

I didn't find option secondary

tunnel-group TUNNEL_VPN general-attributes
address-pool (inside) POOL_VPN

address-pool POOL_VPN
authentication-server-group LDAP01
authentication-server-group (inside) LDAP01 LOCAL <--------- no have option to include LDAP02 just Local
authorization-server-group LDAP01
default-group-policy GRP_VPN
tunnel-group TUNNEL_VPN webvpn-attributes

any clue?

Thank you

cisco vpn banch to main site asa no internet at branch

chuckdock1 — Tue, 20 Apr 2021 19:53:54 GMT

Hello all,

I have a vpn between my branch and main office. From the branch I can reach the main office and the devices there.

I would like the branch site to hit the main sites asa and then use it for the internet breakout. I just want it for a few internet ip's, not all traffic though. I know the traffic hits the outside interface of the main, but then would have to go back out that interface for the specific ip's I want to reach. I did enter a global command for that, something with intra - I just dont recall it.

Seems like a nat issue but I'm not sure. I'm running 8.2 on both sides.

Suggestions?

UCCX NonVoice Subsystem in partial service

Timothy Jaberg — Tue, 20 Apr 2021 19:49:43 GMT

I was alerted an issue the other day from a UCCX Subscriber node of the NonVoice Subsystem in partial service.

When I checked the CCX Engine service and sub service, it showed fully up and had been up for several weeks since it was last rebooted. Nothing was in partial service.

The messages in the log are:

17067055: Apr 19 14:20:43.275 EDT %MIVR-SS_CHAT-1-SS_PARTIAL_SERVICE: [SM Tomcat Poller Thread - 1] com.cisco.wf.subsystems.chat.SubsystemChat NonVoice Subsystem is in partial service

17067056: Apr 19 14:20:43.280 EDT %MIVR-SS_CHAT-1-SS_PARTIAL_SERVICE_CCP_TOMCAT_DOWN: [SM Tomcat Poller Thread - 1] com.cisco.wf.subsystems.chat.SMTomcatPollerThread NonVoice Subsystem is in partial service

I didn't notice any service impacts, yet this is all that the log shows.

UCCX version12.5.1.11900-146

Has anyone seen this before and is this a bug?

Call grading mechanism - VOIP CMR and CDR audio quality metrics for Cisco Jabber and other Cisco IP phones

bhuarora — Tue, 20 Apr 2021 19:40:21 GMT

Hi Team,

I am trying to fix audio issues by collecting different data metrics that can be used for analysis. Since onset of sudden transition from work from home , I am sure many customers like us will be dealing with sudden transition from office to work from home and looking for ways to improve user and customer experience by reducing audio issues.

While I am at it, I was going through cisco documents and still could not find a proper data / voip data metric that can be used for analysis and I have following questions:

Is MOS supported for Cisco Jabber? We currently have users on 12.9.x and CUCM versions 10.5.x, 11.5.x and 12.5.x

The data is pretty inconsistent in terms of MOS evaluation and comes as unknown,fair, poor, excellent etc from the same device. My concern is mostly that it is unknown.

The inbuilt cisco CDR tool in all 3 mentioned versions do not always populate VarVQMetrics and other CMR and CDR related details and raw CDR files do not always have CMR data for Cisco Jabber.

What I have found so far:

K-Factor Data

K-factor represents an endpoint mean opinion score (MOS) estimation algorithm that is defined in ITU standard P.VTQ. It represents a general estimator that is used to estimate the mean value of a perceptual evaluation of speech quality (PESQ) population for a specific impairment pattern.

MOS relates to the output of a well designed listening experiment. All MOS experiments use a five-point PESQ scale as defined in ITU standard P.862.1, which describes the PESQ as an objective method for end-to-end speech quality assessment of narrow-band telephone networks and speech codecs.

The MOS estimate provides a number that is inversely proportional to frame loss density. Clarity decreases as more frames are lost or discarded at the receiving end. Consider the loss or discarding of these frames as concealment. Concealment statistics measure packet (frame) loss and its effect on voice quality in an impaired network.

K-factor represents a weighted estimate of average user annoyance due to distortions that are caused by effective packet loss such as dropouts and warbles. It does not estimate the impact of delay-related impairments such as echo. It provides an estimate of listening quality (MOS-LQO) rather than conversational quality (MOS-CQO), and measurements of average user annoyance range from 1 (poor voice quality) to 5 (very good voice quality).

K-factor gets trained or conditioned by speech samples from numerous speech databases, where each training sentence or network condition that is associated with a P.862.1 value has a duration of 8 seconds. For more accurate scores, the system generates k-factor estimates for every 8 seconds of active speech.

Consider K-factor and other MOS estimators to be secondary or derived statistics because they warn a network operator of frame loss only after the problem becomes significant. Packet counts, concealment ratios, and concealment second counters represent primary statistics because they alert the network operator before network impairment has an audible impact or is visible through MOS.

Table 2. Devices That Support K-factor (varVQMetrics) in CMRs

Device

K-factor (varVQMetrics) Support in CMR

Cisco Unified IP Phone 7906

Cisco Unified IP Phone 7911

Cisco Unified IP Phone 7921

Cisco Unified IP Phone7931

Cisco Unified IP Phone 7940

Cisco Unified IP Phone 7941

Cisco Unified IP Phone 7942-G

Cisco Unified IP Phone 7942-G/GE

Cisco Unified IP Phone 7945

Cisco Unified IP Phone7960

Cisco Unified IP Phone 7961

Cisco Unified IP Phone 7962-G

Cisco Unified IP Phone7962-G/GE

Cisco Unified IP Phone 7965

Cisco Unified IP Phone 7970

Cisco Unified IP Phone7971

Cisco Unified IP Phone7972-G/GE

Cisco Unified IP Phone7975

3x MGCP Gateways

5x MGCP Gateways

Ref link :

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/12_5_1/cdrdef/cucm_b_cdr-admin-guide-1251/cucm_b_cdr-admin-guide-1251_chapter_01001.html

and :

Note that all audio quality metrics listed in Table 1 are stored in the CMR. For phones that do not generate CMR, such as Cisco TelePresence® TC, CE, CTX, and IX endpoints; Jabber® platforms (all platforms); Cisco IP Communicator; and Cisco Unified Personal Communicator, grading will be “N/A”.

The Cisco Network Analysis Module (NAM) reports SCS as well. An audio stream reported from NAM will be graded based on SCSR, the same as an IP Phone.

Ref link :

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/white-paper-c11-735409.html

The language is same or rather identical in different series (e.g 10.x , 11.x ,12.x, etc)and support for devices has largely remained unchanged (at least in the guide if not real world).

Can someone confirm the following?

Is K-factor (varVQMetrics) supported for Cisco Jabber (client services framework)? If not, if there is roadmap to add support?
Is there a partial support for K-factor (varVQMetrics) like concealed seconds, several concealed seconds etc?
If the above are supported in current iterations of Jabber, any documentation or a doc defect?
Current list of supported phone models including soft phones. Interestingly widely used cisco 7821 and cisco 7841s are too not listed for k-factor data.

The other questions I have are listed below. They are mostly aimed at Cisco Jabber however other phone model details are appreciated.

Since MOS is no longer considered a good mechanism, what call grading mechanism can be used for Cisco Jabber specifically and/or other phone models.
Suggested industry (if any) and cisco suggested Jitter or average jitter per call?
Acceptable average jitter for voice ?
Acceptable percentage of packet loss (per call )? If this is codec dependent, then code wise suggested percentage of packet loss.
Acceptable Concealed seconds
Acceptable Latency in CUCM CDR terms
Any other metrics that be can used?
Any cisco tool that can be used to calculate percentages something similar voice bandwidth calculator?

I have referenced some of the other cisco docs and third party, it is getting complicated to have to do this manually:

Voice Over IP - Per Call Bandwidth Consumption

https://www.cisco.com/c/en/us/support/docs/voice/voice-quality/7934-bwidth-consume.html

Understanding Codecs: Complexity, Hardware Support, MOS, and Negotiation

https://www.cisco.com/c/en/us/support/docs/voice/h323/14069-codec-complexity.html

https://www.bandcalc.com/

http://www.voiptroubleshooter.com/diagnosis/emodel.html

Please note: to fetch all this data, I am also using a third party tool that allows me to capture some of this data in excel and csv formats that is parsed from RAW CDR files fetched from CUCM.

Regards

Bhuvan

Call grading mechanism - VOIP CMR and CDR audio quality metrics for Cisco Jabber and other Cisco IP phones

bhuarora — Tue, 20 Apr 2021 19:36:59 GMT

Not sure under which category should I post this for best match so I am posting it under

Cisco Community Technology and Support Collaboration, Voice and Video IP Telephony and Phones
and will be posting under :
Cisco Community Technology and Support Collaboration, Voice and Video Unified Communications Infrastructure:

Hi Team,

While I am at it, I was going through cisco documents and still could not find a proper data / voip data metric that can be used for analysis and I have following questions:

Is MOS supported for Cisco Jabber? We currently have users on 12.9.x and CUCM versions 10.5.x, 11.5.x and 12.5.x

The data is pretty inconsistent in terms of MOS evaluation and comes as unknown,fair, poor, excellent etc from the same device. My concern is mostly that it is unknown.

The inbuilt cisco CDR tool in all 3 mentioned versions do not always populate VarVQMetrics and other CMR and CDR related details and raw CDR files do not always have CMR data for Cisco Jabber.

What I have found so far:

K-Factor Data

Table 2. Devices That Support K-factor (varVQMetrics) in CMRs

Device

K-factor (varVQMetrics) Support in CMR

Cisco Unified IP Phone 7906

Cisco Unified IP Phone 7911

Cisco Unified IP Phone 7921

Cisco Unified IP Phone7931

Cisco Unified IP Phone 7940

Cisco Unified IP Phone 7941

Cisco Unified IP Phone 7942-G

Cisco Unified IP Phone 7942-G/GE

Cisco Unified IP Phone 7945

Cisco Unified IP Phone7960

Cisco Unified IP Phone 7961

Cisco Unified IP Phone 7962-G

Cisco Unified IP Phone7962-G/GE

Cisco Unified IP Phone 7965

Cisco Unified IP Phone 7970

Cisco Unified IP Phone7971

Cisco Unified IP Phone7972-G/GE

Cisco Unified IP Phone7975

3x MGCP Gateways

5x MGCP Gateways

Ref link :

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/12_5_1/cdrdef/cucm_b_cdr-admin-guide-1251/cucm_b_cdr-admin-guide-1251_chapter_01001.html

and :

The Cisco Network Analysis Module (NAM) reports SCS as well. An audio stream reported from NAM will be graded based on SCSR, the same as an IP Phone.

Ref link :

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/white-paper-c11-735409.html

The language is same or rather identical in different series (e.g 10.x , 11.x ,12.x, etc)and support for devices has largely remained unchanged (at least in the guide if not real world).

Can someone confirm the following?

Is K-factor (varVQMetrics) supported for Cisco Jabber (client services framework)? If not, if there is roadmap to add support?
Is there a partial support for K-factor (varVQMetrics) like concealed seconds, several concealed seconds etc?
If the above are supported in current iterations of Jabber, any documentation or a doc defect?
Current list of supported phone models including soft phones. Interestingly widely used Cisco 7821 and Cisco 7841 are too not listed for k-factor data.

The other questions I have are listed below. They are mostly aimed at Cisco Jabber however other phone model details are appreciated.

Since MOS is no longer considered a good mechanism, what call grading mechanism can be used for Cisco Jabber specifically and/or other phone models.
Suggested industry (if any) and cisco suggested Jitter or average jitter per call?
Acceptable average jitter for voice ?
Acceptable percentage of packet loss (per call )? If this is codec dependent, then code wise suggested percentage of packet loss.
Acceptable Concealed seconds
Acceptable Latency in CUCM CDR terms
Any other metrics that be can used?
Any cisco tool that can be used to calculate percentages something similar voice bandwidth calculator?

I have referenced some of the other cisco docs and third party, it is getting complicated to have to do this manually:
Voice Over IP - Per Call Bandwidth Consumption

https://www.cisco.com/c/en/us/support/docs/voice/voice-quality/7934-bwidth-consume.html

Understanding Codecs: Complexity, Hardware Support, MOS, and Negotiation

https://www.cisco.com/c/en/us/support/docs/voice/h323/14069-codec-complexity.html

https://www.bandcalc.com/

http://www.voiptroubleshooter.com/diagnosis/emodel.html

Please note: to fetch all this data, I am also using a third party tool that allows me to capture some of this data in excel and csv formats that is parsed from RAW CDR files fetched from CUCM.

Regards

Bhuvan

Upgraded 8851s to 12.8(1) and am having issues with last line selected

AnthonyGreene64131 — Tue, 20 Apr 2021 19:26:34 GMT

Hi everyone, I recently have started updating our 8800 series phones (specifically 8851s) to 12.8(1) from 12.1(1) and it seems that this breaks the last line remembered. I think I need guidance, because from what I have been able to find this is the expected behaviour. It seems on the 12.1(1), and I have tested this, that when you have say line two selected (whether that is the ipcc extension or just a second line you have on your phone) and make or answer a call and the call disconnects it stays on that selected line. On the 12.8(1) when you disconnect from a call on your selected secondary line and go on hook it automatically jumps you back the primary line.

We have the service parameter "Always Use Prime Line" to false and the "Show all calls on primary line" disabled as well. We also have some 8865s and it is also running 12.8(1) and has the same behaviour. I tried reverting my 8865 back to 12.7(1) and it also has the same behaviour. Is this the expected behaviour on this newer firmware and if it is, is there a way for it to remember last line selected?

Conozca Cisco SecureX - Community Live

Cisco Moderador — Tue, 20 Apr 2021 21:13:25 GMT

Este evento tendrá lugar el Martes 27 de Abril de 2021 a las 10hrs de la Ciudad de México (UTC -5)

-Evento formalmente conocido como Webcast-

Regístrese hoy al evento Community Live en español.

En este evento se habla de Cisco Secure X, el experto de Cisco hablará de cómo esta solución puede integrar la tecnología de Cisco y terceros de manera simple para obtener capacidades unificadas de Respuesta a Incidentes de Ciberseguridad y Threat Hunting, todo mediante una plataforma completamente cloud.

La sesión incluye la muestra de casos de uso y demostraciones en vivo.

Agenda

¿Qué es SecureX?
¿Cómo integrar Secure X?
Casos de uso
Automatización / Orquestación
Demo en vivo

Experto en destaque

Marco Martinez es un Technical Solutions Architect en el equipo de Ciberseguridad. Cuenta con más de 10 años de experiencia en el área de IT, se especializa en Seguridad. Anteriormente ha trabajado como Especialista de Seguridad Sr en el Nacional Monte de Piedad y como Web Application Penetration Tester y Consultor de Seguridad. Marco es un ingeniero en sistemas computacionales por parte de la Universidad ICEL en México. Cuenta con diversas certificaciones en la industria, tanto de Seguridad y Hacking como de Cloud.

Encuentre más información relacionada en la categoria de Seguridad.

Este evento esta abierto a todo público incluyendo socios de negocio, ingenieros en redes y telecomunicaciones, estudiantes y clientes de Cisco.

Automating Security Assessments, and Concerns with PSIRT API

TimothyHarder00915 — Tue, 20 Apr 2021 19:18:55 GMT

Hello! The company I work for has tasked me with checking the security advisories that Cisco publishes. This task seemed ripe for automation, especially since Cisco provides a restful API where you can access all of the advisories they publish. They advertise being able to return extremely useful and pertinent data such as vulnerable products, the CVSS score, and a written summary of the vulnerability. If you want to get more information such as the affected software releases, you must have a certain kind of account with Cisco, which luckily we have, to access the bug API.

The concept of this API is great. Ideally you could have an inventory that automatically compares the model and version number of live devices on your network against the advisories, and only notify you about the ones that actually apply to your devices. You could set policies on top of this, like only notify me if the CVSS score is a High or more, etc.

The problem I am experiencing is that the data returned from the API is inaccurate, incomplete, and inconsistent. These things make this data untrustworthy, and forces me to manually read each and every advisory. The data returned often leaves out vulnerable products and version information.

The natural next step is to forgo the API altogether and use web-scraping to pull the data. This is also not achievable because there is no consistent formatting between individual advisories, and they are often incomplete as well. Last month there were many advisories that came through without any vulnerable version listed, despite the vulnerability being about vulnerable software.

Additionally, I have found other security-related APIs from Cisco, where you can pass in model numbers and it will return you the applicable advisories, but this is not available for all products that Cisco provides and we would potentially miss something important.

I have interfaced with my account team, but I have been told that the devnet team is experiencing growing pains, and the tooling is in its infancy (with the api being 7 years old...).

So my question to the community is, have you found a way to automate the processing of these vulnerabilities? If so, how?

For loop in xml template

ksj — Tue, 20 Apr 2021 19:12:34 GMT

I am attempting to use the documented for loop in an xml template and am getting an error that says:

Invalid parameters or processing instruction for

This is the section where I am using the loop:

<interface xmlns="http://tail-f.com/ned/cisco-nx">
<mgmt>
<name>0</name>
<description>{$mgmt_description}</description>
<vrf>
<member>management</member>
</vrf>
<ip>
<address>
<ipaddr>{$mgmt_ip}</ipaddr>
</address>
</ip>
</mgmt>
<Vlan>
<name>1</name>
<shutdown/>
</Vlan>
<?for i=1; {$i < 55}; i={$i + 1}?>
<Ethernet>
<name>1/{$i}</name>
<enable>
<switchport>false</switchport>
</enable>
<description>Auto_Cable_Testing</description>
<ip>
<address>
<ipaddr>192.168.{$cable_test}.{$i*2}/31</ipaddr>
</address>
</ip>
<flowcontrol>
<receive>off</receive>
<send>off</send>
</flowcontrol>
</Ethernet>
<?end?>
</interface>

Any ideas on what I'm doing wrong?

TIA

Cisco IT - Journey from Jabber to Webex

Cole Callahan — Tue, 20 Apr 2021 19:03:41 GMT

Join us for insight on Cisco IT’s journey in migrating from Jabber to Webex. Hear from team experts Arti Patel (Project Lead) and Luke Clifford (Collab Architect) on how the program was planned, executed, and communicated across the organization. Register to attend below!

AMP Connector - auto-update?

JF53591 — Tue, 20 Apr 2021 19:01:51 GMT

It appears there is no way to set AMP to automatically update the client software connectors. Do I have that right?

We have a relatively small deployment of 25 machines and no dedicated IT department. We need the security software to stay current without human intervention, as much as possible. Hard to believe this isn't a feature included off-the-shelf!

What am I missing?

Forged Email Detection Question

Jessica Cochran — Tue, 20 Apr 2021 18:46:39 GMT

We have a Dictionary setup with all of our Executives on it to protect us from receiving emails from people pretending to be our executives and this works great. I was wondering if it would be possible to do something like this with all users in our GAL? We sync with LDAP but I haven't been able to figure out a way to create a rule with this information? Is it possible?

Right now the Executives are added to a Dictionary and then associated with an Incoming Content Filter

Any advice would be greatly appreciated

Thank you
Jessie

How do I Isolate the Source of Tunnel Flapping EIGRP

tuckerrose — Tue, 20 Apr 2021 18:26:33 GMT

Hi there!

I am having issues with tunnels flapping across sites on our network, our network is airgapped and we use the customer's already in place network as our backbone to communicate across sites. I have combed left and right through everything I can think of and cannot locate any issues with how our network is setup. I have had the engineers who setup our network look over everything and verify it's good.

Is there a way I can prove that the issue is on their devices / network infrastructure causing these issues?

Note: I do not have access to their network and cannot check any devices, I have to rely on their technicians to tell me if something is messed up, and we are locked in the endless battle of "It's not me, it's you!"

The hello / hold time for these tunnels on our side is 1/3.

Fundamentos de EIGRP (parte 1)

Julio E. Moisa — Tue, 20 Apr 2021 18:26:27 GMT

Hola

Si te estas preparando para tu examen de certificacion, este videos sobre EIGRP puede ser de ayuda.

Saludos

Cannot find the 'Start Live Streaming' button

mvillega — Tue, 20 Apr 2021 18:22:52 GMT

Hello! I just updated the Webex app (new color icon) and cannot find the 'Start Live Streaming' button. Does anyone know what can I do? I prefer not to use the traditional Cisco Webex because the resolution is better in the renewed app
Thanks

Intrusion Alert - Email vs SNMP

EverythingBagel62093 — Tue, 20 Apr 2021 23:24:32 GMT

Hi everyone,

We have an FMC set up that is managing a number of FTD devices. We currently have alerts set up to send emails when intrusion events occur. Emails are generated using the Impact Flag settings and when specific rules are fired (via the Intrusion Email tab in the Policy -> Actions -> Alerts section).

We have set up SNMP traps to be sent when Impact Flag alerts are generated. We want to be able to auto-generate tickets for inspection/review. However, when SNMP traps do come through, it seems to be missing quite a bit of information.

This is what the Intrusion email looks like via Impact Flag Alerts (I have redacted certain information):

[1:27964:6] "MALWARE-CNC Win.Trojan.Gh0st variant outbound connection" [Impact: Vulnerable] From "(IP Address_FTD Device)" at Mon Apr 5 12:38:45 2021 UTC [Classification: A Network Trojan was Detected] [Priority: 1] {tcp} (SOURCE_IP:Port) (unknown)->(DEST_IP:Port) (unknown)

This is what the SNMP trap looks like:

Trap: [Trap Number] (translated from v2c)
Mon Apr 5 08:38:45 2021
Src IP: (Redacted)
Agent: (Redacted)
Trap Type: Vendor Specific
Specific Type: XX
Enterprise: [Version]
Timestamp: 3746566981
Object:1.3.6.1.4.1.14223.1.1.29 Value: (IP Address_FTD Device)
Object:1.3.6.1.4.1.14223.1.1.1 Value: (0123456789ABCDEF)
Object:1.3.6.1.4.1.14223.1.1.115 Value:Global
Object:1.3.6.1.4.1.14223.1.1.32 Value:XX
Object:1.3.6.1.4.1.14223.1.1.43 Value:Vulnerable
Object:1.3.6.1.4.1.14223.1.1.13 Value: (Intrusion_SOURCE_IP)

How can I get the SNMP trap to be more descriptive? Is there something about that 16 digit value in the SNMP trap that is related to the intrusion description? If so, what needs to be done on our end to translate the SNMP trap? Any assistance would be greatly appreciated. Thank you.

Webex Meetings, Side by Side view, Resizing of webcam thumbnails

allamore — Tue, 20 Apr 2021 17:26:29 GMT

Webex Meetings automatically upgraded to 41.4.4.10 on Monday, and now when I am in Side by Side view, or any view actually, I cannot resize the participants webcam thumbnails anymore. Everyone is locked at postage stamp size.

Sometimes, if I switch between full screen and back, I can resize again, but then it is only between original and 2x.

A secondary issue is not being able to scroll through the list of participant webcams. I only see the first 5 or 6.

I see other people having resizing issues, but not this particular workflow.

Thank You.

How will I get certificate for CCNA exam

rajesharihant — Tue, 20 Apr 2021 17:13:33 GMT

Hello everyone.

I appeared for CCNA exam at Pearson Vue center. the Center did gave me a preliminary report, which says I passed.

When and how will I get the certificate from CISCO?

Also, If I need hard copy certificate, then how can I get the same.

Regards,

Rajesh Kothari.

Enabling unicast reverse path forwarding ASA

patrick.hurley — Tue, 20 Apr 2021 17:11:01 GMT

I am getting this message when using the Cisco CLI Analyzer on my ASA5505.

Cisco ASA Unicast Reverse Path Forwarding (uRPF) Bypass Vulnerability- CSCuv60724.

Should I remove these commands on the outside interface?

What about inside?

Sending WebEx invites to 999 participants

dwighthicks — Tue, 20 Apr 2021 16:30:30 GMT

When sending WebEx invites to a large nested distribution list, will WebEx kick out duplicate entries or will it try to send multiple invites?

cisco Find IT

michaelhenriquez — Tue, 20 Apr 2021 16:23:44 GMT

Como puedo ingresar a cisco FindIT, que usuario y contraseñas requiere ?

Saludos.

5516 Migration to FPR1140

scoutt — Tue, 20 Apr 2021 16:17:49 GMT

We are starting to configure new firewalls to replace our old 5516x. I'm trying to find the easiest way to accomplish this. My plan was going to migrate ACL/Rules to FMC from the 5516x (Done) and then hook up the new firewalls so FMC can at least talk and they can get licensed. These new firewalls won't be used for access control until they are all configured with the correct interfaces and rules. Then when configuration is done, we just move the cable from the old 5516 to the 1140's? Of course the Firepower IPs will be different. Can this be done this way? Is there a better way? Trying to limit downtime of course.

Our current setup with the old 5516 is FMC is not controlling the access, its just monitoring.

SNR - redirected calling number

ajuanan123 — Tue, 20 Apr 2021 16:17:49 GMT

HI,

We have a scenario where user ask to display the original calling number on his mobile which is configured as SNR destination. I see in cisco community portal that, SNR is different from CallForwd and redirection number won't beIP Telephony and Phones, CUC displayed. Its noted that calling party displayed depends on ISP, but if ISP allows a Non-DID, whether its possible to display original calling number on mobile.

For example -> External User A call from his mobile to a Cisco deskphone(123) where SNR is enabled. Call reach to SNR destination mobile, but the caller-ID displayed is 123(cisco deskphone). Is that possible to display the original calling number of USER A on SNR destination mobile.

Unable to enroll training course "WebEx Contact Center sale" on golearn.webex.com site

trotpany — Tue, 20 Apr 2021 15:57:52 GMT

I’m a Cisco new hire. I've tried to enroll this "WebEx Contact Center sale" from this follow link

https://golearn.webex.com/lms/index.php?r=course/deeplink&course_id=432&hash=d7484cc9dc77641ba037a5edb8da696ee4dd91fb&generated_by=80761

Initially It was prompt me for payment then I was accidently close the browser when I login back to “golearn.webex.com” site again. I unable to enroll this training course any more.

WLC - AP LOG - wl1: fatal error, reinitializing, total count of reinit's

Peter Setaffy — Tue, 20 Apr 2021 15:50:38 GMT

Dear team,
Can you please help me with identify logs from AP?
I have some APs where can I find this logs on syslog.On this AP had also problem one client but he was connected on Dot11Radio 1 - 5Ghz radio.

Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8100] wl1: fatal error, reinitializing, total count of reinit's[8393]
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8650] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8650] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8790] version: 3
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8790] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8790] 0x1006 0 0 0 0 39 0 1 0 0 311 0 -47 1 -1616109324
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8800] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880]
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] OFDM desense (dB) = 7
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] BPHY desense (dB) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna1 tbl desense (ticks) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna2 tbl desense (ticks) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna1 pktgain limit (ticks) = 2
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] lna2 pktgain limit (ticks) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] elna bypass = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] forced (dB) = 0
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880] jammer_cnt = 0, txop = 1
Apr 20 08:19:57 172.17.13.10 kernel: [*04/20/2021 09:19:57.8880]
Apr 20 08:20:06 172.17.13.10 kernel: [*04/20/2021 09:20:06.9670] DOT11_DRV[0]: Beacons stuck on Radio 0 for 80 sec
Apr 20 08:20:07 172.17.13.10 kernel: [*04/20/2021 09:20:07.0070] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:20:27 172.17.13.10 kernel: [*04/20/2021 09:20:27.0110] DOT11_DRV[0]: Beacons stuck on Radio 0 for 100 sec
Apr 20 08:20:27 172.17.13.10 kernel: [*04/20/2021 09:20:27.0550] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:20:29 172.17.13.10 kernel: [*04/20/2021 09:20:29.1040] CLSM[AE:FC:5F:D8:B9:A0]: PMK cache was found (11r or 11i)
Apr 20 08:20:47 172.17.13.10 kernel: [*04/20/2021 09:20:47.0590] DOT11_DRV[0]: Beacons stuck on Radio 0 for 120 sec
Apr 20 08:20:47 172.17.13.10 kernel: [*04/20/2021 09:20:47.1000] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:20:47 172.17.13.10 kernel: [*04/20/2021 09:20:47.1000] DOT11_DRV[0]: slot 0 tx_beacon=202533814 tx_data_pkts=3455569
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.0860] wl1: fatal error, reinitializing, total count of reinit's[8394]
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1400] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1400] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1550] version: 3
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1550] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1550] 0x1006 0 0 0 0 37 0 1 0 0 5114 0 -47 1 -1616053048
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1560] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640]
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] OFDM desense (dB) = 7
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] BPHY desense (dB) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna1 tbl desense (ticks) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna2 tbl desense (ticks) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna1 pktgain limit (ticks) = 2
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] lna2 pktgain limit (ticks) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] elna bypass = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] forced (dB) = 0
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640] jammer_cnt = 0, txop = 1
Apr 20 08:20:54 172.17.13.10 kernel: [*04/20/2021 09:20:54.1640]
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.1940] wl1: fatal error, reinitializing, total count of reinit's[8395]
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2520] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2520] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] version: 3
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] 0x1006 0 0 3 1 36 0 1 0 0 3851 0 -47 1 -1616038940
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2680] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760]
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] OFDM desense (dB) = 7
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] BPHY desense (dB) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna1 tbl desense (ticks) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna2 tbl desense (ticks) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna1 pktgain limit (ticks) = 2
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] lna2 pktgain limit (ticks) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] elna bypass = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] forced (dB) = 0
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760] jammer_cnt = 0, txop = 1
Apr 20 08:21:08 172.17.13.10 kernel: [*04/20/2021 09:21:08.2760]
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.3620] wl1: fatal error, reinitializing, total count of reinit's[8396]
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4150] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4150] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] version: 3
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] 0x1006 0 0 0 0 36 0 1 0 0 5375 0 -47 1 -1616010772
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4310] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390]
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] OFDM desense (dB) = 7
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] BPHY desense (dB) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna1 tbl desense (ticks) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna2 tbl desense (ticks) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna1 pktgain limit (ticks) = 2
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] lna2 pktgain limit (ticks) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] elna bypass = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] forced (dB) = 0
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390] jammer_cnt = 0, txop = 1
Apr 20 08:21:36 172.17.13.10 kernel: [*04/20/2021 09:21:36.4390]
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4230] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4230] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4300] version: 3
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4300] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4300] 0x1006 0 0 0 0 36 0 1 0 0 3663 0 -47 1 -1616008712
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4310] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390]
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] OFDM desense (dB) = 7
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] BPHY desense (dB) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna1 tbl desense (ticks) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna2 tbl desense (ticks) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna1 pktgain limit (ticks) = 2
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] lna2 pktgain limit (ticks) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] elna bypass = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] forced (dB) = 0
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390] jammer_cnt = 0, txop = 1
Apr 20 08:21:38 172.17.13.10 kernel: [*04/20/2021 09:21:38.4390]
Apr 20 08:21:57 172.17.13.10 kernel: [*04/20/2021 09:21:57.0950] CLSM[AC:BC:32:C4:72:03]: PMK cache was found (11r or 11i)
Apr 20 08:22:42 172.17.13.10 kernel: [*04/20/2021 09:22:42.1650] DOT11_DRV[0]: Beacons stuck on Radio 0 for 80 sec
Apr 20 08:22:42 172.17.13.10 kernel: [*04/20/2021 09:22:42.2070] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:23:02 172.17.13.10 kernel: [*04/20/2021 09:23:02.2370] DOT11_DRV[0]: Beacons stuck on Radio 0 for 100 sec
Apr 20 08:23:02 172.17.13.10 kernel: [*04/20/2021 09:23:02.2780] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:24:16 172.17.13.10 kernel: [*04/20/2021 09:24:16.9760] wl1: fatal error, reinitializing, total count of reinit's[8397]
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0290] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0290] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] version: 3
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] 0x1006 0 0 0 0 38 0 1 0 0 1192 0 -47 1 -1615850080
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0450] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530]
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] OFDM desense (dB) = 7
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] BPHY desense (dB) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna1 tbl desense (ticks) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna2 tbl desense (ticks) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna1 pktgain limit (ticks) = 2
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] lna2 pktgain limit (ticks) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] elna bypass = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] forced (dB) = 0
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530] jammer_cnt = 0, txop = 1
Apr 20 08:24:17 172.17.13.10 kernel: [*04/20/2021 09:24:17.0530]
Apr 20 08:24:37 172.17.13.10 kernel: [*04/20/2021 09:24:37.2950] DOT11_DRV[0]: Beacons stuck on Radio 0 for 80 sec
Apr 20 08:24:37 172.17.13.10 kernel: [*04/20/2021 09:24:37.3610] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:24:57 172.17.13.10 kernel: [*04/20/2021 09:24:57.3880] DOT11_DRV[0]: Beacons stuck on Radio 0 for 100 sec
Apr 20 08:24:57 172.17.13.10 kernel: [*04/20/2021 09:24:57.4290] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:17 172.17.13.10 kernel: [*04/20/2021 09:25:17.4320] DOT11_DRV[0]: Beacons stuck on Radio 0 for 120 sec
Apr 20 08:25:17 172.17.13.10 kernel: [*04/20/2021 09:25:17.4730] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:17 172.17.13.10 kernel: [*04/20/2021 09:25:17.4730] DOT11_DRV[0]: slot 0 tx_beacon=202533817 tx_data_pkts=3455569
Apr 20 08:25:37 172.17.13.10 kernel: [*04/20/2021 09:25:37.5200] DOT11_DRV[0]: Beacons stuck on Radio 0 for 140 sec
Apr 20 08:25:37 172.17.13.10 kernel: [*04/20/2021 09:25:37.5620] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4290] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4290] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] version: 3
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] 0x1006 0 0 1 0 38 0 0 0 0 245 0 -47 0 -1615749628
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4380] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470]
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] OFDM desense (dB) = 7
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] BPHY desense (dB) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna1 tbl desense (ticks) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna2 tbl desense (ticks) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna1 pktgain limit (ticks) = 2
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] lna2 pktgain limit (ticks) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] elna bypass = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] forced (dB) = 0
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470] jammer_cnt = 0, txop = 1
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.4470]
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.5660] DOT11_DRV[0]: Beacons stuck on Radio 0 for 160 sec
Apr 20 08:25:57 172.17.13.10 kernel: [*04/20/2021 09:25:57.6300] DOT11_DRV[0]: WCP radiomode:flex; prev_mode:flex; change_reason:4, click radiomode:flex, FW radiomode:N/A, ssid_count:3, radio_wsa_sensor:no, radio-type:flex, fra-mode:flex, last modes:[flex,flex]
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4330] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4330] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] version: 3
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] 0x1006 0 0 0 0 38 0 1 0 0 298 0 -47 1 -1615748624
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4410] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490]
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] OFDM desense (dB) = 7
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] BPHY desense (dB) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna1 tbl desense (ticks) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna2 tbl desense (ticks) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna1 pktgain limit (ticks) = 2
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] lna2 pktgain limit (ticks) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] elna bypass = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] forced (dB) = 0
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490] jammer_cnt = 0, txop = 1
Apr 20 08:25:58 172.17.13.10 kernel: [*04/20/2021 09:25:58.4490]
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4370] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4370] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4440] version: 3
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4440] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4440] 0x1006 0 0 0 0 38 0 0 0 0 365 0 -47 0 -1615747620
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4450] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530]
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] OFDM desense (dB) = 7
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] BPHY desense (dB) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna1 tbl desense (ticks) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna2 tbl desense (ticks) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna1 pktgain limit (ticks) = 2
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] lna2 pktgain limit (ticks) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] elna bypass = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] forced (dB) = 0
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530] jammer_cnt = 0, txop = 1
Apr 20 08:25:59 172.17.13.10 kernel: [*04/20/2021 09:25:59.4530]
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4410] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4410] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] version: 3
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] 0x1006 0 0 0 0 38 0 1 0 0 761 0 -47 1 -1615746616
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4490] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:26:00 172.17.13.10 kernel: [*04/20/2021 09:26:00.4570] Scanning is in progress. Can't dump aci mitigation info.
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4450] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4450] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] version: 3
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] 0x1006 0 0 0 0 38 0 0 0 0 301 0 -47 0 -1615745612
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4530] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610]
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] OFDM desense (dB) = 7
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] BPHY desense (dB) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna1 tbl desense (ticks) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna2 tbl desense (ticks) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna1 pktgain limit (ticks) = 2
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] lna2 pktgain limit (ticks) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] elna bypass = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] forced (dB) = 0
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610] jammer_cnt = 0, txop = 1
Apr 20 08:26:01 172.17.13.10 kernel: [*04/20/2021 09:26:01.4610]
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4490] wcp/RadDrv0 :: Dot11BaseDriver: Printing chaim_stats and phy stats for Slot 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4490] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 chaim_stats
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4580] version: 3
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4580] chanspec tx inbss obss nocat nopkt doze txop goodtx badtx glitch badplcp knoise idle timestamp
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4580] 0x1006 0 0 0 0 38 0 1 0 0 664 0 -47 1 -1615744608
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4590] wcp/RadDrv0 :: Dot11BaseDriver: Slot 0 phy stats
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670]
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] *** Channel = 6(20 mhz), Weakest RSSI = 0, Associated = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] OFDM desense (dB) = 7
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] BPHY desense (dB) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna1 tbl desense (ticks) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna2 tbl desense (ticks) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna1 pktgain limit (ticks) = 2
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] lna2 pktgain limit (ticks) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] elna bypass = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] forced (dB) = 0
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670] jammer_cnt = 0, txop = 1
Apr 20 08:26:02 172.17.13.10 kernel: [*04/20/2021 09:26:02.4670]

Its AP: C9120AXI-E

WLC: 5520

AireOS: 8.10.142.0

Mode: FlexConnect

Uptime about 81 days

Have you some experience with this msgs please?

Thank you

Peter

Be An Early Adopter! Check out these EXCLUSIVE ACI Ask the expert sessions...

Brooke Hammer — Tue, 20 Apr 2021 15:49:06 GMT

Join Cisco experts for the exclusive look into Cisco #ACI capabilities with the NEW series of #ACI Ask the Experts sessions: http://cs.co/9009HL0PV
Adapting to Changes: DevOps Trends and Cisco ACI April 26
Troubleshooting Best Practices: Multi-Site for Cisco ACI April 27
Operations Planning and Best Practices: Cisco ACI Multi-Site April 29
Troubleshooting Best Practices: Cisco ACI April 30
Component Integration: Kubernetes VMM for Cisco ACI May 3
Migration Strategies and Best Practices: Multi-Site and Multi-Pod for Cisco ACI May 4
Feature Overview: Security and Segmentation for Cisco ACI using ACI Virtual Edge May 10

transfer call without return

akram.root — Tue, 20 Apr 2021 15:33:58 GMT

hello all,

I need your help please .

I have a cucm 12.5 installed with cisco Ip phones 7821 and 8851.

My costomer would like when the IP phone who make the transfer with another IP phone can retrieve the call if has no answer after the call transfered .

Is that possible ? and how can i do that ?

Best reagards

Akram

"Mandatory TLS" header tag in Cisco ESA

Stephen Hogan — Tue, 20 Apr 2021 15:25:01 GMT

I have enforced TLS on select domains on my ESA. I'd like to add a custom header tag on that says something like "Enforced TLS" to make it easier to see if an email came or went via enforced TLS vs. opportunistic. Is there a way to do it, preferably via the GUI?

Webex Teams not sending activation code

AGuerra — Tue, 20 Apr 2021 15:14:54 GMT

Hi,

I am trying to access to Cisco Webex Teams, but when I log in, a message appears saying that a code will be sent to my email, but it never arrives, so I a unable to join Webex.

How can I solve this? I have tried to do it a lot of times and the email with the code never arrives.

Finesse 11.6 upgrade to 12.0

Mr Brightside — Tue, 20 Apr 2021 15:07:35 GMT

Hello everyone!

I am planning Finesse upgrade from 11.6 to 12.0 in my UCCE environment.

I wonder if I need to open any additional ports on the Firewall for Finesse clients, that are mandatory for 12.0, on top of what we already have for Finesse 11.6 (we have 443 and 7443)

Thx!

WIFI 6 solution - Controller - licensing and support

LovejitSingh130013 — Tue, 20 Apr 2021 14:55:16 GMT

Hello Experts

I am looking to add Cisco Catalyst 9120 APs to 3 different sites and got few questions?

Does Cisco Provide any cloud management for Wireless APs which eliminate the need of physical controller?

In case Physical Controller is only choice, Do i need one for each site ? or it will be one fine for all sites (Considering all sites are connected by IPSec)?

How does licensing work with it ? Is it just one time buy and then annual support ?

Thanks,

Lovejit Singh

FMC Permissions question

ChristopherCraddock66504 — Tue, 20 Apr 2021 15:18:34 GMT

Community,

I have 4 total domains, 1 Global Domain and 3 Leaf domains under the Global. I have external authentication configured in the Global Domain on the FMC via LDAP integration and it is working great. However, I have 2 new users who I only want to have access to leaf domain 3 that is under the global domain when they log in. I was able to create a local user under the Global domain and only allow that local user access to the leaf domain 3 in the User Control Configuration; however, I was wondering if there is a way to accomplish the same thing via an LDAP account? I can control what Role an LDAP user gets, but have not been able to figure out how to control what tenant the user is dropped into after they log in (using LDAP accounts). So far all LDAP users get dropped into the Global Domain with their respective user role. Is this possible to drop an LDAP user into a specific leaf domain after logging in?

Thank you.

CSM stopped working

kostasthedelegate — Tue, 20 Apr 2021 14:31:10 GMT

Hello,

we have CSM 4.19

To day it stopped working and we could not login

We had to restart it and after approx 20 minutes we logged in.

What could the issue be?

Thanks and regards,

Konstantinos

Consulta sobre routers ISR4331

rodrdanj — Tue, 20 Apr 2021 14:23:14 GMT

El escenario es establecer VPN Site to Site, basada en IPSec (aplicando Virtual Tunnel interface) utilizando un arreglo HSRP, adicionalmente se debe emplear la estrategia router on stick (es decir usar una interfaz del router para todas las acciones). Los equipos que tenemos disponibles son los siguientes:

• PID VID: ISR4331/K9 V05
Las consultas concretas son:
• ¿Son compatibles estos equipos con lo que se necesita?.
• ¿Es necesario aplicarles una licencia adicional?.
• ¿Se requiere una versión firmware especifica?.

Sandbox Broken - Cisco Intersight Service for HashiCorp Terraform

Brian Morrissey — Tue, 20 Apr 2021 14:21:31 GMT

Looks like the Devnet Sandbox for "Cisco Intersight Service for HashiCorp Terraform" is broken. The plans stayed stuck in queued in Terraform Cloud forever and when checking in Intersight it looks like the Assist Appliance is offline for the past 8 days.

Centralized Reporting for TrustSec SGACLs

brentpavlovich — Tue, 20 Apr 2021 14:15:55 GMT

Is anyone familiar with a way to centralize the reporting of TrustSec events on switches and routers? Specifically SGACL drop messages. Our network topology consists of around 150 switches (mostly 9200/9300s) and 100 routers (all 4331s or 4431s). Right now the only way we have to tell if traffic is being blocked because of TrustSec is to individually log into each router and switch and look at the log messages. Not only is this not a feasible solution for 250 devices, it doesn't provide long term historical records to look back upon when issues are reported.

Since the log messages are type 6 they dont make it to our logging server so running reports off that isn't an option (unless there is a way to change the message type so the router/switch send it to our remote syslog server???)

Netflow doesn't seem to contain any useful information in it that can distinguish normal traffic from blocked traffic caused by SGACL drops. I've read a few articles about being able to use netflow to determine this, but seems its only available on 6500 switches.

Just wondering if anyone out there has a good solution for this problem. I single pane of glass sort of speak into TrustSec enforcement.

DNA Center Topology - Add unmanaged devices/links

pinglis — Tue, 20 Apr 2021 14:08:40 GMT

Is there any way to add an unmanaged device device to topology diagram in DNA Center and manually add a link.

For example I have an Anchor wireless LAN controller connected to a DMZ switch behind a firewall connected to the core switch. Currently the Anchor WLC and DMZ switch are showing separated from the rest of the LAN so I would like to add a device to represent the firewall with links to the DMZ and Core switches.

It is was possible to do this Prime and on the links configured the source port on the switch end of the link.

Another example would be a WAN provider router.

关于思科AIR-CAP1552E-N-K9室外AP的console调试问题

iliaodong — Tue, 20 Apr 2021 14:04:25 GMT

大家好，最近遇到了一个思科的室外APAIR-CAP1552E-N-K9，着手调试时发现这个AP没有console口。

请问下这个AP是需要特殊的console调试线吗，还是没有console调试接口，只能靠AC来进行调试。

因为连AC是要对应的软件版本，没有console线如何知道这个AP的版本呢？

AP的接口和指示灯见下图：思科1552接口

Site2SIte VPN Overlapping Network

sahara101 — Tue, 20 Apr 2021 13:57:56 GMT

Hello community,

I have a question for which I googled but still do not understand it quite well.

Would it be possible to create a site2site connection, with both sides having the same subnet? What I have found is the use of XLATED.

https://www.petenetlive.com/KB/Article/0001446

But what I do not understand is how this works. If I have Site A 10.10.1.0 and Site B 10.10.1.0 I need to create a masquerade subnet for bothe, so Site A 10.10.2.0 and Site B 10.10.3.0

Then I need to ping 10.10.3.0 from Site A in order for SIte B to provide a response over 10.10.1.0.

But does this not mean that all communication needs to be made over the new addresses? If there are Services that depend on each other how will they communicate without changing any IPs? Let's say I migrate DC from Site A to Site B. How will the Clients on Site A communicate with it?

What I am trying to achive, if possible, is to leave the network as is, create the same netowork at Site B and let them communicate via VPN.

Thank you!

VPN and NAT

gcook0001 — Tue, 20 Apr 2021 13:55:42 GMT

I am fairly new with the Firepower firewalls. I was wondering if this is possible.

I want one profile to use split tunneling. So I have nat(inside,outside) after-auto source static inside inside destination inside inside

I want one profile to send all traffic over the VPN. So from what I understand I need to add the following nat(outside, outside) after-auto source static outside outside destination outside outside

I don't have a way to test this except on production so I am hoping for some feedback.

Is the second nat correct

Can I have both nats or will they interfere with each other.

Question about Q-in-Q Configuration

petehummon — Tue, 20 Apr 2021 13:55:35 GMT

Hi Cisco Folks,

I’m a L3 guy who is struggling to understand a L2 configuration. I need a sanity check to make sure I understand how my devices are configured.

I have two Cisco switches (running IOS XR 6.6.12) connected by a Bundle-Ethernet interface identically configured on both sides. When I look at a switch’s configuration, I see this:

interface Bundle-Ether3
 description "Bundle to remote switch"
 mtu 9192
!
interface Bundle-Ether3.1234 l2transport
 description vlan 1234 to remote switch
 encapsulation dot1q 1234 second-dot1q 500
!

So after doing a little research and posting on this forum, I believe that Bundle-Ethernet3.1234 is configured with Q-in-Q VLAN traffic.

Let me see if I have this correct: As configured, both switches accept my customer’s traffic on VLAN 1234. But to forward traffic across the bundle, we have to double-tag, perhaps because my customer might someday want to include VLANs 1235, 1236, 1237, etc. So my two switches double-tag, using VLAN 500 as the inner VLAN.

VLAN 500 exists only between the two switches on either end of the bundle. When traffic on VLAN 1234 arrives at Switch A, the switch adds the double tag of VLAN 500 before forwarding the frame across the bundle to Switch B. Switch B removes the VLAN 500 double tag and forwards the frame on VLAN 1234. All other switches in the network are oblivious to VLAN 500’s existence.

…do I have this right? Thank you.

Problema con la configuración bridge ASA 5506 X, y como poder quitarla

DavidGustavoSanabriaRocha3330 — Tue, 20 Apr 2021 13:45:27 GMT

Buenas recientemente adquirí el ASA5506X y al momento de configurarlo vi que esta configurado en modo bridge en el grupo BVI1 y deseo quitarla ya que en la configuración que necesito implantar no tendría que estar configurada de esta manera, intente ya quitar esa configuración con la que creo que viene predeterminada.

Si alguien sabe como quitar esa configuración y cambiarla a modo normal le agradecería mucho.

Gracias

Automate personal room creation?

MC900 — Tue, 20 Apr 2021 13:29:59 GMT

Is there a way to automate the creation of personal rooms for new users as they are given Webex accounts?

How update License Catalyst 9300 and 9200

LincolnR — Tue, 20 Apr 2021 13:24:31 GMT

Hi,

I have some Catalyst 9300 and 9200 switches in my park that need to update the license that has the provisional license. When we buy the equipment, we also acquire the licenses. I would like to know how do I update these licenses on these devices.

Has anyone been through this, can you give me the step by step?

Thanks in advance.

Question about the use of firewall in the SD-Access factory

khalilsoltani47714 — Tue, 20 Apr 2021 13:20:21 GMT

When creating SD-Access Fabric we use the transit-IP
I used switch nodes borders Cisco Catalyst 9500 and fusion (you can used Firewall to share the VRF)
either the firewall is not recommended as a fusion ???
for the wireless which recommended in the factory to use wirelless embedded in the border node or in the Edge node.

connect 1GB SFP on Catalyst 3750 to Mellanox SN 2100

jsd281180 — Tue, 20 Apr 2021 13:11:16 GMT

I’m trying to connect a 1GB SFP port on a catalyst 3750 to a Mellanox sn2100 switch.
The ports on the Mellanox switch are all QSFP, so I’ve got a QSFP to SFP adapter module in there as below:
https://www.fs.com/uk/products/75320.html
So then into that I’ve got the following optic:
https://www.fs.com/uk/products/75332.html?attribute=947&id=214720

Then in the port on the cisco 3750 I’ve got the following optic:
https://www.fs.com/uk/products/11774.html

And finally the following fibre between them:
https://www.fs.com/uk/products/43142.html?attribute=240&id=99291

The ports at both ends are configured as 1GB.

The issue I’ve got is that the cisco switch doesn’t seem to recognize that anything is connected to it whereas the Mellanox things that is connected. See below output for the port status, note it has detected the SFP but says line protocol is down:

#show interface gi1/0/26
GigabitEthernet1/0/26 is down, line protocol is down (notconnect)
Hardware is Gigabit Ethernet, address is 001f.caf7.f59a (bia 001f.caf7.f59a)
Description: "Trunk to fsw01-port 7"
MTU 1522 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not set
Auto-duplex, Auto-speed, link type is auto, media type is 1000BaseSX SFP
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
168 packets input, 50240 bytes, 0 no buffer
Received 168 broadcasts (168 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 168 multicast, 0 pause input
0 input packets with dribble condition detected
480706 packets output, 77019048 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out

If I then do the equivalent on the Mellanox switch, it thinks it is connected:

net show interface swp7
Name MAC Speed MTU Mode
-- ---- ----------------- ----- ---- ----------
UP swp7 04:3f:72:30:90:04 1G 1500 BondMember

Alias
-----
core3-port26

cl-netstat counters
-------------------
RX_OK RX_ERR RX_DRP RX_OVR TX_OK TX_ERR TX_DRP TX_OVR
----- ------ ------ ------ ----- ------ ------ ------
0 0 0 0 4028 0 0 0

Routing
-------
Interface swp7 is up, line protocol is up
Link ups: 2 last: 2021/04/19 21:02:23.20
Link downs: 14 last: 2021/04/19 21:01:39.11
PTM status: disabled
vrf: default
OS Description: mer-c3750-core3-port26
index 46 metric 0 mtu 1500 speed 1000
flags: <UP,BROADCAST,RUNNING,MULTICAST>
Type: Unknown
HWaddr: 04:3f:72:30:90:04
Interface Type Other
Master interface: bond0

Does anyone have any thoughts on why the catalyst switch won’t recognise that something is connected to the port?
I have enabled the use of non-cisco SFPs with the command “service unsupported-transceiver" but this hasn’t helped.
It’s been suggested that I would need to reboot the switch in order for the “service unsupported-transceiver" to take effect. I can’t reboot the switch at the moment so I’ve arranged a maintenance window next week to try this but in the mean time can anyone advise on anything else that could be causing this issue?

Many thanks

2X sg550 and 1X3750

mark.stewart1 — Tue, 20 Apr 2021 12:58:51 GMT

Hi, I have this current setup, two sg550 switches connected to a 3750 which is in turn has an external connection to the internet.

from the 3750, i can ping both sg550 and also 8.8.8.8 over the internet.

what i want to be able to do is ping 8.8.8.8 from the sg550's, currently doing a traceroute it gets as far as the 3750 and that is it.

below are the configs for one of the sg550 (both very similar) and the 3750.

the 2 sg550's and plugged into ports 2 and 3 of the 3750 from port 3 on the sg550's.

---------------------------------------------------------------------------------------------------------

3750
Building configuration...

Current configuration : 1883 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SwitchB
!
enable secret 5 XXXXXXXXX
enable password XXXXXXXXX
!
ip subnet-zero
ip routing
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
interface GigabitEthernet2/0/1
switchport access vlan 99
switchport mode access
!
interface GigabitEthernet2/0/2
switchport access vlan 66
switchport mode access
!
interface GigabitEthernet2/0/3
switchport access vlan 66
switchport mode access
!
interface GigabitEthernet2/0/4
!
interface GigabitEthernet2/0/5
!
interface GigabitEthernet2/0/6
!
interface GigabitEthernet2/0/7
!
interface GigabitEthernet2/0/8
!
interface GigabitEthernet2/0/9
!
interface GigabitEthernet2/0/10
!
interface GigabitEthernet2/0/11
!
interface GigabitEthernet2/0/12
!
interface GigabitEthernet2/0/13
!
interface GigabitEthernet2/0/14
!
interface GigabitEthernet2/0/15
!
interface GigabitEthernet2/0/16
!
interface GigabitEthernet2/0/17
!
interface GigabitEthernet2/0/18
!
interface GigabitEthernet2/0/19
!
interface GigabitEthernet2/0/20
!
interface GigabitEthernet2/0/21
!
interface GigabitEthernet2/0/22
!
interface GigabitEthernet2/0/23
!
interface GigabitEthernet2/0/24
!
interface Vlan1
no ip address
shutdown
!
interface Vlan666
ip address 80.0.0.11 255.255.255.240
!
interface Vlan999
ip address 192.168.0.5 255.255.255.0
!
ip default-gateway 10.50.1.145
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 80.0.0.0 255.255.255.240 80.0.0.12
ip route 80.0.0.0 255.255.255.240 80.0.0.13
ip http server
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password XXXXXX
login
line vty 5 15
password XXXXXX
login
!
end

---------------------------------------------------------------------------------------------------------

SG550

config-file-header
-----
v2.4.0.91 / RTESLA2.4_930_181_042
CLI v1.0
file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
!
unit-type-control-start
unit-type unit 1 network gi uplink te
unit-type unit 2 network gi uplink te
unit-type unit 3 network gi uplink te
unit-type unit 4 network gi uplink te
unit-type unit 5 network gi uplink te
unit-type unit 6 network gi uplink te
unit-type unit 7 network gi uplink te
unit-type unit 8 network gi uplink te
unit-type-control-end
!
vlan database
vlan 665-668
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
bonjour interface range vlan 1
hostname -----
aaa authentication login authorization SSH local
aaa authentication enable authorization SSH enable
line ssh
login authentication SSH
enable authentication SSH
password XXXX encrypted
exit
username admin password encrypted XXXX privilege 15
ip ssh server
ip ssh-client source-interface vlan 65
ip ssh-client server authentication
!
interface vlan 65
name abc
ip address 10.50.1.145 255.255.255.240
!
interface vlan 66
name def
ip address 80.0.0.12 255.255.255.240
!
interface GigabitEthernet1/0/1
switchport mode trunk
!
interface GigabitEthernet1/0/2
switchport mode trunk
switchport access vlan 65
!
interface GigabitEthernet1/0/3
spanning-tree link-type point-to-point
switchport access vlan 66
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch
!
interface TengigabitEthernet1/0/1
spanning-tree link-type point-to-point
switchport mode trunk
macro description "switch "
!next command is internal.
macro auto smartport dynamic_type switch
!
exit
ip default-gateway 80.0.0.11

Cannot access any of my old sites

SchwenieDCCC — Tue, 20 Apr 2021 12:52:28 GMT

I neglected to change over to an email address for signing in to my sites so I guess these errors are payback. I do not have any data in My Devices page either and that one was really important to me.

I'm hoping we can merge my old user account into the new email format.

CSPC 2.9 configuring your CSPC appliance failed

jeroenm17 — Tue, 20 Apr 2021 12:49:55 GMT

when configuring the new CSPC 2.9 collector, it failed when configuring a static ip or a ip via DHCP.

------------------------------------------------------------------------------------

Please select from the below options:

1. Get IPv4 Address automatically (Use DHCP)

2. Enter IPv4 Address manually (static IP Address)

3. Main Menu

Enter your choice : 2

Enter IP Address : xxx.xxx.xxx.xxx

Enter Net Mask : xxx.xxx.xxx.xxx
Enter Default Gateway : xxx.xxx.xxx.xxx

Configuring your CSPC appliance...

Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/Activeconnection/2)

Failed!

Press [Enter] key to continue

----------------------------------------------------------------------------------------------

When we use option 1 we only see;

Configuring your CSPC appliance...

Failed!

Press [Enter] key to continue

----------------------------------------------------------------------------------------------

Does anyone have seen this error before? we already had a CSPC running in the environment.

copy IOS from router to tftp : Error

Dhikra Marghli — Tue, 20 Apr 2021 12:18:14 GMT

Hello

I have switch layer 3 : 3750 cisco , so i want to copy ios from this switch to PC with TFTP

so i have a error !!!

Switch-federateur#copy flash: tftp:
Source filename [c3750e-universalk9-mz.122-55.SE3]?
Address or name of remote host []? 192.168.7.189
Destination filename [c3750e-universalk9-mz.122-55.SE3]?
%Error reading flash:c3750e-universalk9-mz.122-55.SE3 (Is a directory)
Switch-federateur#

So how i can copy IOS from cisco to TFTP and i wait a reply from expert switch layer 3

thanks in advance

Can't hide floating toolbar with keyboard shortcut since update

Jill.Robinson — Tue, 20 Apr 2021 12:14:02 GMT

Yesterday I updated the Webex app on both my desktop PC and Windows tablet. Since then, the keyboard shortcuts (ctrl + shift + q and ctrl + shift + alt + h) to hide the floating toolbar when sharing is no longer working on either device. Anyone finding this to be an issue? Since updating, I am on version 41.4.4.10

I work in a school using Webex for hybrid learning so this feature is heavily used by all the teachers.

forwarding message with attachment

Bjoern Schonhoff — Tue, 20 Apr 2021 12:11:07 GMT

Hi community,

we are using Webex App currently in a Poc and later in a larger environment. What has never worked is that messages with attachments (e.g. pictures) can be forwarded to spaces and contacts but the Target sees that only the a file has been shared with you: 10cda999-a10f-4f14-a05c-345703fb6558.PNG but the file itself is not showing. I assume forwarding of an attachment (pic, doc. gif, etc...) should be part of the basic features and everybody who is using Webex App is expecting this.

Am i wrong to believe that this is a must or is it just an error?

Thanks

Bjoern

Catalyst 3560-CX - IGMP Querier commands does not work as in the reference guide

JarnoValkonen38927 — Tue, 20 Apr 2021 11:58:25 GMT

Hi!

I have problem with IGMP querier config. I would like to change version 2, what 3560 uses default, to version 3. Reference guide says that go interfaces config and then type command ”ip igmp version 3”. After that I could config other parameters, but I don’t get anywhere, because that command does not work. And ? mark does not give suggestion that would work etc. Any suggestion?

CUCM SAN Certificate

oosters-mario — Tue, 20 Apr 2021 11:44:40 GMT

Hi,

I am in the process of creating a new Multi-Server (SAN) certificate for our Collaboration Cluster.

This automatically includes my Publisher, 2 Subscribers as well as my 2 Presence Nodes.

My question is, as I need to renew my 2 * Unity Connection and 2 * UCCX as well, could I add there FQDN's (using other domains) in this CSR and create one certificate that would contain all of them for tomcat and tomcat-trust off course. Is this a good or bad idea ??

I suppose I would need to upload the same certificate once for the Unity Connection Cluster as well for the UCCX cluster.

If this is ok, this would seriously reduce the number/complexity of certificates needed.

Also my Internal Signing CA is a Sub CA. Off course I need to add it everywhere in tomcat-trust. But what about it's root. Do I need to add this one as well to tomcat-trust. It seems logic to me, but the previous consultant, didn't do it. And all is still working.

Expressway- Monitoring active calls

mazlumaltuntas — Tue, 20 Apr 2021 11:22:36 GMT

I want to monitor how many calls are passed daily on expressway. What is the way to do this? Can it be monitored on NMS Solarwinds with SNMP?

Expressway C&E X12.6.4

CUCM 11.5

IMP 11.5

WS-C2960XR Failover Timeout

NguyenHung2238 — Tue, 20 Apr 2021 11:32:32 GMT

Hi,

When I do WS-C2960XR Stack Switch Failover Test,

My RDP from thin client to server disconnect.

Teaming both thin client side and server side. And log detail below.

Any Idea what happing with this switch:

Apr 20 10:38:09.985: %STACKMGR-5-SWITCH_READY: Switch 1 is READY
Apr 20 10:38:11.544: %PHY-5-TRANSCEIVERINSERTED: Slot=1 Port=25: Transceiver has been inserted
Apr 20 10:38:11.673: %PNP-6-PNP_BEST_UDI_UPDATE: Best UDI [PID:WS-C2960XR-24TS-I,VID:V06,SN:] identified via (platform-registry)
Apr 20 10:38:11.673: %PNP-6-PNP_CDP_UPDATE: Device UDI [PID:WS-C2960XR-24TS-I,VID:V06,SN:] identified for CDP
Apr 20 10:38:11.676: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Startup Config Present)
Apr 20 10:38:13.176: %USB_CONSOLE-6-MEDIA_RJ45: Console media-type is RJ45.
Apr 20 10:38:15.025: %CFGMGR-4-SLAVE_WRITING_STARTUP_CFG: only master can do that
Apr 20 10:38:15.025: %CFGMGR-4-SLAVE_WRITING_STARTUP_CFG: only master can do that
Apr 20 10:39:18.300: %STACKMGR-4-SWITCH_REMOVED: Switch 2 has been REMOVED from the stack
Apr 20 10:39:18.307: license_init_config_queue: initializing the license_switch_boot_config_q
Apr 20 10:39:18.310: %STACKMGR-4-MASTER_ELECTED: Switch 1 has been elected as MASTER of the stack
Apr 20 10:39:18.489: %CFGMGR-6-APPLYING_RUNNING_CFG: as new master
Apr 20 10:39:18.583: %SSH-5-ENABLED: SSH 1.99 has been enabled
Apr 20 10:39:18.625: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.628: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.628: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.632: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration using a type 7 password. However, type 7 passwords will soon be deprecated. Migrate to a supported password type
Apr 20 10:39:18.999: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 0 CLI Request Triggered
Apr 20 10:39:18.999: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.130.1.10 port 0 CLI Request Triggered
Apr 20 10:39:19.002: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 0 CLI Request Triggered
Apr 20 10:39:19.369: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 514 started - CLI initiated
Apr 20 10:39:19.369: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.130.1.10 port 514 started - CLI initiated
Apr 20 10:39:19.369: %STACKMGR-5-MASTER_READY: Master Switch 1 is READY
Apr 20 10:39:19.394: %COMMON_FIB-4-FIBIDB: No fibidb found for Virtual1 during address change
Apr 20 10:39:20.341: %LINK-3-UPDOWN: Interface Port-channel9, changed state to up
Apr 20 10:39:20.348: %LINK-3-UPDOWN: Interface Port-channel11, changed state to up
Apr 20 10:39:20.348: %LINK-3-UPDOWN: Interface Port-channel12, changed state to up
Apr 20 10:39:20.348: %LINK-5-CHANGED: Interface Vlan1, changed state to administratively down
Apr 20 10:39:20.355: %LINK-3-UPDOWN: Interface Vlan351, changed state to up
Apr 20 10:39:20.355: %LINK-3-UPDOWN: Interface Vlan352, changed state to up
Apr 20 10:39:20.359: %LINK-5-CHANGED: Interface FastEthernet0, changed state to administratively down
Apr 20 10:39:20.359: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan351, changed state to up
Apr 20 10:39:20.359: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan352, changed state to up
Apr 20 10:39:20.369: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host x.x.x.x port 514 started - CLI initiated
Apr 20 10:39:21.344: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel9, changed state to up
Apr 20 10:39:21.351: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel11, changed state to up
Apr 20 10:39:21.351: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel12, changed state to up
Apr 20 10:39:21.362: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down

ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good

JohnB5468 — Tue, 20 Apr 2021 10:54:41 GMT

Cisco 2960X with IOS version 15.2(7)E3 shows PoE requests on several ports of the switch.

To be clear: Port 8, 11 and 28 show the request.

Port 8 has no device connected.

Port 11 and 28 have client computers connected which were OFF at the time I created below debug log:

I activated 'debug cdp packets' and 'debug cdp ilp' for this.

And I started looking at this because port 2 had an AP connected which was not booting not even powering on through the PoE of the switch.

I upgraded to the mentioned IOS to test if this helped but it is still the same and the former IOS 15.2(4)E7 is used globally on all my 2960x switches without any problem. Upgrading IOS now, but the old IOS served me well for a long time.

Please help me in finding the reason why this happens...

Apr 20 09:36:11.935: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:36:14.734: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:36:17.614: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:36:19.656: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:36:20.040: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:36:22.473: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:36:24.161: CDP-PA: Packet received from PAKASW001.stahl.com on interface GigabitEthernet1/0/1
Apr 20 09:36:24.161: **Entry found in cache**
Apr 20 09:36:27.080: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/41
Apr 20 09:36:27.621: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/4
Apr 20 09:36:31.833: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/5
Apr 20 09:36:32.057: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:36:32.693: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/36
Apr 20 09:36:34.717: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:36:39.774: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:36:42.172: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/26
Apr 20 09:36:42.301: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:36:45.814: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:36:48.673: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:36:55.216: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:36:56.940: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/39
Apr 20 09:36:57.390: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/1
Apr 20 09:36:57.719: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:36:59.897: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:37:02.696: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:37:06.296: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:37:08.278: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/9
Apr 20 09:37:09.037: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:37:09.460: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/18
Apr 20 09:37:12.277: CDP-PA: Packet received from PAKASW001.stahl.com on interface GigabitEthernet1/0/1
Apr 20 09:37:12.277: **Entry found in cache**
Apr 20 09:37:15.017: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:37:15.898: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/41
Apr 20 09:37:17.719: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:37:17.995: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/4
Apr 20 09:37:20.054: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:37:22.693: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:37:27.065: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/5
Apr 20 09:37:29.110: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/36
Apr 20 09:37:30.096: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:37:32.797: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:37:35.663: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/26
Apr 20 09:37:38.135: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:37:40.176: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:37:40.938: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:37:43.035: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:37:46.999: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/39
Apr 20 09:37:54.255: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: Cisco PD
Apr 20 09:37:54.492: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/1
Apr 20 09:37:56.981: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/28: Power given, but Power Controller does not report Power Good
Apr 20 09:37:58.697: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/9
Apr 20 09:38:00.616: %ILPOWER-7-DETECT: Interface Gi1/0/8: Power Device detected: Cisco PD
Apr 20 09:38:00.854: CDP-PA: Packet received from PAKASW001.stahl.com on interface GigabitEthernet1/0/1
Apr 20 09:38:00.854: **Entry found in cache**
Apr 20 09:38:03.517: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/8: Power given, but Power Controller does not report Power Good
Apr 20 09:38:05.017: %ILPOWER-7-DETECT: Interface Gi1/0/11: Power Device detected: Cisco PD
Apr 20 09:38:05.307: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/18
Apr 20 09:38:06.600: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/4
Apr 20 09:38:07.914: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/11: Power given, but Power Controller does not report Power Good
Apr 20 09:38:08.292: CDP-PA: version 2 packet sent out on GigabitEthernet1/0/41

i want to add mac based VLAN in Switch CBS250-24P-4X - switch422fb2

MehdiGhazi12826 — Tue, 20 Apr 2021 10:43:25 GMT

I want to make mac based VLAN by webinterface or ssh sisco commands how can i do that

my swith model is CBS250-24P-4X - switch422fb2

UNABLE TO LOG ON TO CISCO FINESSE AFTER SECURE LDAP CONFIG

ugwuugochukwukizito — Tue, 20 Apr 2021 10:43:21 GMT

Hello, my client mentioned they need to configure secure LDAP on the CUCM, I researched and used the link below to do the configuration

Configure CUCM for Secure LDAP Directory and Authentication with AD - Cisco

After the configuration, the Call center agents could not log on to Cisco Finesse. I had to revert to the default port 389 for both LDAP directory and LDAP authentication.

After reverting, the agents were able to login.

Is there a way i can configure Secure LDAP or a port number I can use so the Agents can login to cisco finesse afterwards.

How to block outgoing traffic when VPN goes down?

Whoops — Tue, 20 Apr 2021 11:11:43 GMT

Hello
We have an ASA5510 v9.1.(7)32 at branch with configured IKEv2 site-to-site VPN to Head office.

All traffic goes through VPN.

ISP give an ip-address by DHCP with 4 gateways (yes, multiple), that randomly changes. Some of them reachable via ICMP, some no.

Via security reasons we have to block all outgoing traffic when VPN goes down. At routers there was VTI, so config be like: ip route 0.0.0.0 0.0.0.0 Tunnel0, but in this version of ASA we have no VTI, EEM.
I tried to block outgoing traffic by acl outside-out, but it also block traffic through VPN.

Here is parts of config:

interface Ethernet0/0
 nameif outside
 security-level 0
 ip address dhcp setroute 
!
interface Ethernet0/1
 no nameif
 no security-level
 no ip address
!
interface Ethernet0/1.9
 vlan 9
 nameif inside
 security-level 100
 ip address 192.168.3.1 255.255.255.0
!
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
!
object-group network obj-nat-inside
 network-object 10.1.1.0 255.255.255.0
 network-object 10.1.2.0 255.255.255.0
 network-object 192.168.3.0 255.255.255.0
!
access-list outside_cryptomap_1 extended permit ip object-group obj-nat-inside any4 
!
logging host inside 192.168.2.2
!
icmp permit host 192.168.2.2 inside
!
route inside 10.1.1.0 255.255.255.0 192.168.3.2 1
route inside 10.1.2.0 255.255.255.0 192.168.3.2 1
!
http 192.168.2.0 255.255.255.0 inside
snmp-server host inside 192.168.2.2 community 8 encr version 2c
snmp-server community 8 encr
!
crypto map outside_map 1 match address outside_cryptomap_1
crypto map outside_map 1 set peer 2.2.2.2
crypto map outside_map interface outside
!
ssh 192.168.2.0 255.255.255.0 inside
!
management-access inside
!
ntp server 192.168.2.2 source inside
!
group-policy GroupPolicy_2.2.2.2 internal
group-policy GroupPolicy_2.2.2.2 attributes
 vpn-tunnel-protocol ikev2 
 default-domain value corp.domain
tunnel-group 2.2.2.2 type ipsec-l2l
tunnel-group 2.2.2.2 general-attributes
 default-group-policy GroupPolicy_2.2.2.2
tunnel-group 2.2.2.2 ipsec-attributes
 ikev2 remote-authentication pre-shared-key 8 encr
 ikev2 local-authentication pre-shared-key 8  encr

I can't add static route with track, cause multiple gateways from ISP.

Can't add static route to via VPN GW (2.2.2.2), cause in that case there is no icmp, snmp, logging, ntp to ASA (SSH, ASDM works):

route outside 10.0.0.0 255.0.0.0 2.2.2.2 1 track 1
route outside 172.16.0.0 255.240.0.0 2.2.2.2 1 track 1
route outside 192.168.0.0 255.255.0.0 2.2.2.2 1 track 1
route inside 10.0.0.0 255.0.0.0 192.168.3.0 50 !fake routes to blocking
route inside 172.16.0.0 255.240.0.0 192.168.3.0 50 
route inside 192.168.0.0 255.255.0.0 192.168.3.0 50 
!
sla monitor 1
 type echo protocol ipIcmpEcho 2.2.2.2 interface outside
 num-packets 2
 timeout 2000
 threshold 2000
 frequency 5
sla monitor schedule 1 life forever start-time now
!
track 1 rtr 1 reachability

Also I tried to add dhcp client route track 1 in e0/0, but in that case VPN goes down, cause have no route to peer.

# sh ip address outside dhcp lease
Temp default-gateway addr: 1.1.1.251
...
# sh ip address outside dhcp lease
Temp default-gateway addr: 1.1.1.254
...
# sh ip address outside dhcp lease
Temp default-gateway addr: 1.1.1.252

So... how to block outgoing traffic if VPN goes down with multiple gateways via DHCP?

C1117 SD-WAN - request platform software package clean

Xividar — Tue, 20 Apr 2021 10:18:53 GMT

Hi Guys,

"request platform software package clean" is not supported on the SD-WAN code - how do we clean-up flash and remove redundant .PCK files?

Thank you.

DHCP issue After upgrade 1830

Hasan AL-Madani — Tue, 20 Apr 2021 10:14:00 GMT

Hi,

I'm facing an issue in cisco aironet 1830, after upgrade imag of AP to 8.10* depend on cisco guide.

AP didn't send any IP address from dhcp server " External"

any help.

WLC 9800 new PKI Certs

OJ_Magellan — Tue, 20 Apr 2021 10:13:40 GMT

Hi,

We have a new WLC 9800 in our network, and I'm required to install the CA-Server Certs on the controller to have secure connection to the WLC GUI through the browser, how do I perfom this task? does it work like ISE and Stealthwatch in a similar fashion to trust the CA?

Normally I'd:

1)Upload the Root-CA in Cert Store

2)Upload the Sub-CA (Intermediate) in Cert Store

3) Generate a CSR

4) Get it signed by the CA-Server

5) Upload the Signed CSR

Does it work like that as well in the 9800 WLC ?

Regards,

Jabber grabs bluetooth profile of headset that does not work

t.ham — Tue, 20 Apr 2021 10:01:13 GMT

Using a Logitech H800 headset there are two profiles available. A standard one and a stereo one. Other apps work fine with both profiles but Jabber does not work using the stereo profile. This stereo profile is used every time I work with jabber so everyday I have to manually change from stereo to standard bluetooth profile.

How could this be solved?

Best regards

t.ham

Alarms in prime 3.9 do not get auto cleared

Ditter — Tue, 20 Apr 2021 09:49:08 GMT

Hi to all,

I have noticed an old problem in Prime which is still not resolved , unless i am doing something wrong.

That is, Alarms that are not getting cleared automatically when the reason that created the alarm stops.

For example , during a power outage i got a critical alarm for "redundant power supply failure".

This critical alarm was in category switches and routers and the condition was " Environmental Monitor Redundant Issue"

However this alarm appeared 4 days ago and the alarm was cleared after 1 hour in the same day.

But after 4 days i am still having this alarm active.

Shouldn't it be auto cleared by itself?

Thanks,

Ditter.

Management Port Catalyst 9500

Damon M. — Tue, 20 Apr 2021 09:47:54 GMT

Hi guys,

Recently we've added a Catalyst 9500 switch in our production network and i wanted to configure remote access to this switch for monitoring and config purposes.

Now, all of our switches are connected to one management switch (Catalyst 2960X) from were we get access to all the switches.

Every switch has a Vlan configured for this (Vlan 13), each with an interface on that vlan and with an IP.

All the ports on the 2960X are configured as :

interface GigabitEthernet1/0/1

switchport access vlan 13

switchport mode access

Now, i have been reading into the Ethernet Management port that the 9500 has but i am all confused of how i can and or want to implement this in our current environment.

I configured a static ip on Interface GigabitEthernet0/0

10.32.13.59/24

Also made a static route to the 2960X

ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.32.13.2

Now, could you guys help me out?

What am i missing about the Ethernet management port, i'm also not quite sure i understand what out of bound means with those ports. Did i forget or do something wrong with the config?

Thanks in advance!

Greetings

Damon

EDIT : normally i would just connect a cable to one of the other ports, create vlan and add an IP but in this case with this switch (9500) we're occupying all of the ports for use so thats why i would like to use the Management port.

Multiple VPN Users

cpraneshwar — Tue, 20 Apr 2021 09:07:34 GMT

I require 2 additional VPN users for the CUCM sandbox.
Reservation ID: 0445080d-a3c9-4434-bd00-07d779d085ae

ibgp

DragosMariusAvram66611 — Tue, 20 Apr 2021 08:58:51 GMT

Hello everyone,

How do i overcome the ibgp rule not to advertise a BGP advertisement learnt from one iBGP neighbor to another iBGP neighbor?

as in my topology i need router loopbacks advertised via ibgp.

all routers have ospf enabled and conectivity

all routers have ibgp peering

r2 and r3 cant see each other loopbacks

for every router config is as follow

r1:

neigh 10.1.12.2 remote-as 65000

neigh 10.1.14.4 remote-as 65000

neigh 10.1.13.3 remote-as 65000

network 1.1.1.1 mask 255.255.255.255

etc...

all the config is correct but i need to evercome the advertisment rule.

Thank you

Reports missing for specific dates on CUIC 11.5.1

Charles@Cisco-Collaboration — Tue, 20 Apr 2021 08:38:13 GMT

Hi All,

Could someone assist to resolve the aforementioned subject. We are not able to spool reports from date 16/04/2021 to 18/04/2021. This happened when the CUIC services restarted with no human intervention on the Primary UCCX 11.5.1.11001-34

unity connection import greetings from exchange 2016

shafeen — Tue, 20 Apr 2021 08:31:12 GMT

Hi All ,

I have a unified messaging integration(sip) between CUCM and exchange 2016 , is there any way to export the greetings/messages from exchange 2016 and import them into unity connection in bulk? . The exchange 2016 users are migrating to Office 365.

B200 M5 ordering information.

ShishirDash5204 — Tue, 20 Apr 2021 08:21:40 GMT

1.What are the question to be asked before creating BOM for UCS B200 M5 server?

2.Is it necessary to select operating system while ordering the B200 M5 server? Or is it optional?

What is part id for ESXi 7?

FMC: Security Zones and Interfaces on ASA Failover Pair

swscco001 — Tue, 20 Apr 2021 07:59:50 GMT

Hello everybody,

I have just setup my first FMC (6.6.1) for a ASA Failover Pair (9.8(2)20)
with Firepower modules (6.6.1).

At the moment still no traffic will be handled by the module (neither
"sfr fail-open" nor " sfr fail-open monitor-only" is currently configured
in the policy-map under "class sfr".

The are still no zones in the FMC and I want to know how you would proceed
with creating zones.

Attached you find the zones on the ASA.

Do you put the interfaces with the same security level in the same zone,
or is there a better model? For example the outside interfaces on primary
and secondary ASA in the outside zone (see attached)?

Every hint is welcome!

Thanks a lot!

Bye
R.

Cisco 5516x- after copy anyconnect-win-4.10.00093-webdeploy-k9.pkg INFO: No digital signature found

Alex Ribas — Tue, 20 Apr 2021 07:52:06 GMT

Hi All

After copied

Accessing tftp://1xxxxx/anyconnect-win-4.10.00093-webdeploy-k9.pkg...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Writing file disk0:/anyconnect-win-4.10.00093-webdeploy-k9.pkg...
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
INFO: No digital signature found <---- Message

Any ideia why?

thank you

cisco wlc 8.10.130.0

Anjana A — Tue, 20 Apr 2021 07:26:00 GMT

Hi Team,

We have recently upgraded the wlc (5520)to new code 8.10.130.

Post the upgrade users connecting to local mode AP's(3700) are not getting ip address.

After reloading the AP users are getting the ip address.

Regards,

Anjana

Monitoring iSCSI IO/s on Nexus 5k

hermytion — Tue, 20 Apr 2021 07:25:01 GMT

Hi,

we are experiencing issues in our iSCSI environment and i got asked if we can monitor the iSCSI IO/s on the Nexus 5k interfaces.

I looked at the interface counters but could not find a fitting counter.

Have i overlooked something or is there a other way?

Regards,

hermytion

CiscoSG350 switch - No syslog messages found

Yasmeen — Tue, 20 Apr 2021 07:17:28 GMT

Hi,

I have configured below commands in cisco SG350 switch for DOS prevention, but after get SYN Attack in switch ports i am not getting SYSlog messages like below one

01-Jan-2012 05:29:46: A TCP SYN Attack was identified on port gi1

01-Jan-2012 05:29:46: A TCP SYN Attack was identified on port gi1. TCP SYN
traffic destined to the local system is automatically blocked for 100
seconds.

the above logs are not found also when i check the show commands there also not showing SYN blocked Ports,

DOS#show security-suite syn protection
Protection Mode: Block
Threshold: 80
Recovery: 60

Interface Operational Last Attack
Name Status
----------- ------------- ---------------------------------------------

Attacked port not showing,

The below commands i configured for DOS Prevention,

DOS(config)#security-suite enable

DOS(config)#security-suite dos protection mode block

DOS(config)#interface range GigabitEthernet1 - 48

DOS(config-if-range)#switchport mode access

DOS(config-if-range)#switchport access vlan 3

DOS(config-if-range)#security-suite syn protection mode Block

DOS(config-if-range)#security-suite dos syn-attack 199 any

How do i get the Logs that my port Attacked by SYN ?

Pls share me the Commands.

Thanks,

Regards,

Yasmeen Shaul Hameed.

Shared Line phones do not receive external calls simultaneously

APC-Shaban — Tue, 20 Apr 2021 07:13:28 GMT

Hi,

I have 3 Phones 8865 on one shard line, the phones do not receive external calls simultaneously (when the external caller dial the land line then dial the shared extension) , one of them ringing only (Randomly).

Can you help in this ?

【原创】请别再把深度学习与机器学习混为一谈了！（2）

julianchen — Tue, 20 Apr 2021 06:58:39 GMT

分割数据

监督式机器学习的通常做法是：将数据集分成各个子集进行训练、验证和测试。其中的一种工作方式是：将80%的数据分配给训练数据集，而将其他的10%分配给验证和测试数据集。目前，大部分训练都是针对数据集进行的。在每一个epoch结束时，我们将针对验证数据集进行预测。

那些验证数据集中的错误，不但可以被用于识别停止的条件，并驱动超级参数的调优，而且可以帮助您确定目标模型是否对训练数据进行了过度的拟合。

对于测试数据集的预测通常是在最终模型上完成的。如果某个测试数据集从未被用于训练，我们有时则称之为holdout数据集。

作为其他常见的分割数据方案，交叉验证能够重复地将整个数据集分割成一套训练数据集，以及一套验证数据集。

机器学习库

在Python中，Spark MLlib（https://www.infoworld.com/article/3141605/review-spark-lights-up-machine-learning.html）和Scikit-learn（https://www.infoworld.com/article/3158509/review-scikit-learn-shines-for-simpler-machine-learning.html）都是机器学习库的最佳选择。在R语言中，常见的机器学习包有CARAT、randomForest、e1071和KernLab。而在Java中，您可以用到Java-ML、RapidMiner和Weka。

细说深度学习

作为机器学习的一种应用形式，深度学习在被训练模型的输入和输出之间存在着不止一个隐藏层。在大多数讨论场合中，深度学习意味着使用深度技术的神经网络。当然，除了神经网络，深度学习还会使用一些算法来实现其他类型的隐藏层。

“人工”神经网络的概念由来已久，它是由相互连接的阈值开关，构成了人工神经元网络，可以像动物大脑和神经系统(如：视网膜)那样学习识别模式。

Backprop

当两个神经元在训练中同时活跃（active）时，学习基本上是通过加强两个神经元之间的连接来实现的。在当前的神经网络软件中，最常见的方法是：使用一种称为误差反向传播(或称backprop、BP)的规则，来增加神经元之间连接的权值。

人工神经网络中的神经元

每一个神经元都拥有一个传播函数。该函数可通过加权来转换连接神经元的输出。传播函数将输出传递给激活函数，激活函数在输入超过阈值时就会被触发。

神经网络中的激活函数

在上个世纪40、50年代，人工神经元普遍使用的是被称为感知器（perceptrons）的一步式激活函数。如今的神经网络引入了诸如：逻辑函数、s形函数（sigmoid function）、双曲正切函数、修正线性单元(ReLU)等平滑激活函数。其中，ReLU虽然存在着“在学习率设置过高时，神经元会在训练中‘死亡’”的问题，但是它仍然是快速收敛的最佳选择。

激活函数的输出可以传递给某个输出函数，进行附加整形。不过，输出函数通常是恒等函数，因此激活函数的输出会直接被传递给连接在下游的神经元中。

神经网络拓扑结构

常见的神经网络拓扑结构是：

在前馈网络中，神经元可分为:一个输入层、n个隐藏处理层和一个输出层。每一层的输出都只会输入到下一层。
在具有快捷连接的前馈网络中，一些连接可以跳过一到多个中间层。
在递归神经网络中，神经元可以直接或间接地通过下一层来影响自己。

训练神经网络

神经网络的监督学习和其他机器学习类似:我们用一组训练数据来表示网络，将网络输出与期望的输出进行比较，以生成错误向量，接着根据错误向量再对网络进行修正。在应用纠正之前，那些共同运行的批量训练数据被称为epoch。

在实现细节上，相对于模型的权值和偏差方面的梯度，反向传播使用误差(或成本)函数，来发现正确的方向，从而最小化误差。因此，应用的正确性取决于优化算法和学习速率的变量。正如前面提到的，该变量通常需要足够的小，以保证收敛性，并避免造成ReLU神经元“死亡”。

神经网络的优化器

通常，神经网络的优化器会使用某种形式的梯度下降算法，来驱动反向传播。同时，它会用到一种避免陷入局部极小值的机制，例如：只优化那些随机选择的小批量(随机梯度下降)，以及对梯度使用动量修正的方式。另外，一些优化算法(如：AdaGrad、RMSProp和Adam)还会通过查看梯度的历史，来调整模型参数的学习率。

与所有的机器学习类似，您需要根据一个单独的验证数据集，来检查神经网络的预测。如果不这样做的话，您所创建的神经网络可能只能记住输入的信息，而无法学习并成为广义的预测器。

深入学习的各种算法

一个针对真实问题的深度神经网络，可能由十多个隐藏层所组成，其拓扑结构也可能繁简不同。一般而言，网络中的层级越多，其优势是能够识别的特征就越多，而劣势则为计算所需的时间就越长，训练也就越困难。

卷积神经网络(CNN)常被用于机器视觉等应用之中。该网络通常使用卷积、池化、ReLU、全连接、以及丢失层来模拟视觉的皮层。其中，卷积层主要是对于许多小的重叠区域进行积分。池化层执行的是一种非线性的下采样（down-sampling）形式。ReLU层用到了非饱和激活函数f(x) = max(0,x)。在一个完全连接的层级中，神经元与前一层的所有激活都有联系。丢失层主要负责计算网络训练如何“惩罚”那些预测标签和真实标签之间的偏差，使用Softmax或交叉熵（cross-entropy）损失函数来进行分类，或使用欧式（Euclidean）损失函数进行回归。

递归神经网络常被用于自然语言处理(NLP)、序列处理、长短时记忆(LSTM)网络、基于注意力的神经网络。在前馈神经网络中，信息通过隐藏层从输入流向输出。这有效地限制了该网络一次性只能处理一个状态。

在递归神经网络（RNN）中，信息通过反复循环，让网络只记住最近的一次输出，以便对序列和时序进行分析。当然，RNN存在着两个常见的问题:爆炸性的渐变(我们很容易通过夹持来修复)和消失的渐变(不太容易修复)。

在LSTMs中，该网络能够用forgetting和gating来修改以前信息的权重，并记住它们。通过此类长、短期记忆，该网络解决了梯度消失的问题。同时，LSTMs也可以处理数百个过去输入的序列。

注意力模块是一些将权重应用到输入向量上的通用门。它的分层神经注意编码器（hierarchical neural attention encoder）使用多层注意模块，来处理成千上万的过去的输入。

虽然不属于神经网络，但是随机决策森林(RDF)对于一系列分类和回归问题也十分有用。由多个层级构成的RDF，能够输出单个树的预测统计平均值(一般为分类模式或回归平均值)。在随机方面，RDF对单个树使用引导聚合(也称为bagging)，并针对树的特性进行随机取子集。

同样不属于深度神经网络的XGBoost (eXtreme Gradient boost)，是一个可扩展的端到端树状增强系统。它在许多机器学习的挑战中都取得了先进的成果。不同于RDF，它的梯度树增强是从单个决策树或回归树开始的。通过优化，其后续的树是基于前续树的残留而构建的。

目前，业界公认最好的Python深度学习框架包括：TensorFlow、Keras、PyTorch和MXNet。Deeplearning4j是最好的Java深度学习框架之一。而ONNX和TensorRT则是用于深度学习模型的运行时（runtime）。

深度学习与机器学习的比较

一般而言，经典(非深度)机器学习算法的训练和预测速度，要比深度学习算法快得多。一到多个CPU足以训练一个经典的模型。而深度学习模型通常需要硬件加速器，如GPU、TPU或FPGA来进行训练，以及大规模的部署。如果没有它们，此类模型可能需要几个月的训练时间。

自然语言处理是深度学习的一个分支，它包括语言翻译、自动化摘要、协同参考解析、语篇分析（discourse analysis）、形态分割（morphological segmentation）、命名实体识别、自然语言生成、自然语言理解、词性标注、情感分析和语音识别等。

深度学习的另一个主要应用领域是图像分类。它包括：带定位的图像分类、目标检测、目标分割、图像风格转换、图像着色、图像重建、图像超分辨率和图像合成等。

此外，深度学习已经被成功地用于预测分子之间的相互作用，以帮助制药公司设计新药，搜索亚原子粒子，并将自动解析用于构建人脑三维显微镜图像等方面。

【原标题】Deep learning vs. machine learning: Understand the differences (作者: Martin Heller )

原文链接：https://www.infoworld.com/article/3512245/deep-learning-vs-machine-learning-understand-the-differences.html

N9K 开启log功能并传送至指定服务器命令

nexusNXOS57758 — Tue, 20 Apr 2021 06:56:54 GMT

旧3750 是logging on

N9K没这个命令

【原创】请别再把深度学习与机器学习混为一谈了！（1）

julianchen — Tue, 20 Apr 2021 06:56:52 GMT

引言：虽说机器学习和深度学习都能发现数据中的模式与特征，但是它们所涉及到的技术和具体的应用场景却截然不同。

众所周知，虽然同属于人工智能的范畴，但是深度学习是一种特殊的机器学习形式。从流程上说，机器学习和深度学习都是从运用测试数据来训练某个模型开始，通过一系列的优化过程，进而找到最适合模型的数据权重。显然，这两种方法都可以处理数值(回归)和非数值(分类)的问题，只是在对象识别和语言翻译等应用领域，深度学习模型往往比机器学习模型更加适用。

细说机器学习

机器学习算法通常分为：监督(用各种答案来标注训练数据)和非监督(任何可能存在的标签都不会被显示在训练算法中)两种。

监督式机器学习又可以进一步被分为：分类(预测诸如：抵押贷款支付逾期的概率等非数字性的答案)和回归(预测诸如：某种网红商品的销售量等数字性的答案)。

无监督学习则可以进一步分为：聚类(查找相似对象组，如：跑步鞋、步行鞋和礼服鞋)、关联(查找对象的共同逻辑，如：咖啡和奶油)、以及降维(进行投射、特征选择与提取)。

分类算法

分类问题属于监督式学习范畴。它需要在两个或多个类之间进行选择，并最终为每一个类分配概率。最常见的算法包括：朴素贝叶斯、决策树、逻辑回归、k近邻和支持向量机(SVM)。您还可以使用诸如：随机森林等其他集成方法(模型的组合)，以及AdaBoost和XGBoost之类的增强方法。

回归算法

回归问题也属于监督式学习范畴。它要求模型能够预测出一个数字。其中最简单且最快的算法是线性(最小二乘)回归。不过它通常只能给出一个不够准确的结果。其他常见的机器学习回归算法(除了神经网络)还包括：朴素贝叶斯、决策树、k近邻、LVQ(学习矢量量化)、LARS（最小角回归）、Lasso、弹性网络、随机森林、AdaBoost和XGBoost等。显然，在回归和分类的机器学习算法之间有一定的重叠度。

聚类算法

聚类问题属于无监督式学习范畴。它要求模型找出相似的数据点组。其中最流行的算法是K-Means聚类。其他常见的算法还包括：均值漂移聚类、DBSCAN(基于密度的带噪声应用空间聚类)、GMM(高斯混合模型)和HAC(凝聚层级聚类)。

降维算法

降维问题也属于无监督式学习范畴。它要求模型删除或合并那些对结果影响很小或没有影响的变量。它通常与分类或回归结合起来使用。常见降维算法包括：删除缺失值较多的变量、删除低方差的变量、决策树、随机森林、删除或合并高相关性的变量、后向特征消除、前向特征选择、因子分析、PCA（主成分分析）等。

各种优化方法

我们需要通过训练和评估，优化参数的权重，来找到一组最接近真实情况的数值，进而将监督式学习算法最终转化为恰当的模型。在实际应用中，这些算法的优化常常依赖于那些陡降的变体，例如：随机梯度下降，它本质上是在随机起点上执行多次陡降（steepest descent）。

而对于随机梯度下降法的常见改进包括：根据动量修正梯度的方向因素，或调整从一个数据(或称为epoch或batch)到下一个数据学习率的进展。

数据清理

为了让杂乱无章的数据能够为机器学习所用，我们必须对数据进行全面的过滤，其中包括:

1.初次查看数据，排除那些有大量丢失数据的列。

2.再次查看数据，选择需要进行预测的列(即，特征选择)。这也是您在迭代时可能希望更改的内容。

3.在其余列中排除那些缺少数据的行。

4.纠正明显的拼写错误，合并相应的答案。例如：U.S.、US、USA和America都应该被合并为一个类别。

5.排除具有超出范围数据的行。例如：如果您正在分析纽约市内出租车的出行情况，那么您需要过滤掉那些开到该城市区域边界之外的地理坐标行。

当然，您也可以酌情增加其他步骤，这主要取决于您收集到的数据类型。您甚至可以在机器学习管道（请参见-https://www.infoworld.com/article/3198252/data-in-intelligence-out-machine-learning-pipelines-demystified.html）中设置一些数据清理的步骤，以便按需进行修改与复用。

数据编码和标准化

为了对数据进行分类，您需要将文本标签编码为另一种形式。常见的有如下两种：

一种是label编码，它将每一个文本标签值都替换为一个数字。另一种是one-hot编码，它将每一个文本标签值都替换为带有二进制值(1或0)的列。一般来说，由于label编码有时会使机器学习算法误认为：被编码的列已经是一个有序列了，因此我们首选采用one-hot编码。

为了让数值数据适用于机器回归，我们通常需要对数据进行规范化。否则，更大范围的数字可能会主导特征向量之间的欧氏距离（Euclidian distance，它是在m维空间中两个点之间的真实距离），而该影响可能会以其他字段为代价被放大，进而导致陡降的优化难以收敛。目前，针对机器学习的数据规范化与标准化有着多种方法，其中包括：最小值标准化、均值标准化、以及按单位长度扩展等。有时该过程也被称为特性扩展（https://en.wikipedia.org/wiki/Feature_scaling）。

特征工程

特征是指被观察到的现象的可测量特性。“特征”的概念通常与解释变量相关。此处的解释变量，经常被用于诸如线性回归之类的统计技术。而特征向量则会将单行的所有特征，组合成一个数值型的向量。

选择特征的巧妙之处在于是否能选出解释问题的最小独立变量集。如果两个变量高度相关，则要么将它们合并成为一个单独的特征，要么去掉其中的一个。有时候，我们在进行主成分分析时，可以把相关的变量转换成一组线性无关的变量。

在实际应用中，我们能够通过简单的方式，来构造新的特征或减少特征向量的维数。例如，用死亡年份减去出生年份，就得到了死亡年龄，这是针对寿命和死亡率分析的主要自变量。当然，在其他情况下，特性的构建并非如此浅显。

UCCX 11.6 have 2 CSQ with the same name

rieda — Tue, 20 Apr 2021 07:03:13 GMT

Hello all,

I faced an issue which should blocked by the system - I thought.

Customer run UCCX 11.6 and reported issues with call distribution at a specific CSQ.

Now I see, there are 2 CSQ´s which have exact the same name - please see attached screenshot.

How can this happen and how could this be solved the best way, without effecting the reporting.

Regards

Alex

Cisco WSA S695 The daemon is not responding

Raymond_1707 — Tue, 20 Apr 2021 06:53:09 GMT

Hi all,

I was performing a firmware upgrade for WSA S695 to version 12.5.0-678. after the upgrade completed. And when I try to resetconfig. I got the following error Failed to reset the configuration. The error was: The daemon is not responding.

Any advice on how we can troubleshoot this daemon issue? Thank you.

Best Regards

Raymond

Cisco AP 每一个月定期重启命令如何设定

bozhouxfcc — Tue, 20 Apr 2021 06:45:43 GMT

Switch 製品における外部より Syslog を監視する方法について

ykai — Tue, 20 Apr 2021 06:07:31 GMT

はじめに

トラブルシューティングを行う際、Switch 製品では不具合が発生するタイミングを検知し、必要なログなどを取得する必要があります。Logging buffer によって Switch では保存される logging 情報が限られているため、外部から Switch の Syslog を簡単に監視する方法を紹介します。

本ドキュメントでは以下の 2 つを紹介します。

1. Syslog を SNMP Trap 経由で SNMP サーバへ送付する
2. Syslog を外部の Syslog サーバへ送付する

Syslog を SNMP Trap 経由で SNMP サーバへ送付する方法

設定例：IP アドレスが 10.1.1.2 の SNMP サーバへ Syslog の Trap を送信する場合

※ 前提条件として、Switch と Syslog サーバへの疎通が必須です。

Switch では下記の内容を設定してください。

Switch(config)#snmp-server community xxx ro
# 読み取り用のコミュニティ名を「xxx」として設定します。

Switch(config)#logging history informational 
# Syslog を SNMP trap で送信する際のログレベルを定義します。

Switch(config)#snmp-server enable traps syslog 
# Syslog を SNMP Trap で転送するため。

Switch(config)#snmp-server host 10.1.1.2 xxx syslog
# SNMP サーバ宛先アドレスと上記設定したコミニケション名「xxx」指定します。

※ ログのレベルは以下通りです。
<0-7> Logging severity level
alerts            Immediate action needed (severity=1)
critical            Critical conditions (severity=2)
debugging            Debugging messages (severity=7)
emergencies        System is unusable (severity=0)
errors                 Error conditions (severity=3)
informational         Informational messages (severity=6)
notifications          Normal but significant conditions (severity=5)
warnings              Warning conditions (severity=4)

上記各ログレベルの説明は以下通りです。

キーワード	レベル	説明
emergencies	0	システムが不安定
alerts	1	即時処理が必要
critical	2	クリティカルな状態
errors	3	エラー状態
warnings	4	警告状態
notifications	5	正常だが注意を要する状態
informational	6	情報メッセージ
debugging	7	デバッグメッセージ

上記のように設定した場合、Switch では informational レベル、及びそれ以上レベルの Syslog が記録されると、SNMP サーバへ該当 Syslog が送付されます。

Syslog を外部の Syslog サーバへ送付する方法

Switch では生成した Syslog を Syslog サーバへ送付し、監視することも可能です。

設定例：IP アドレス 10.1.1.2 の Syslog サーバへ Syslog を送信する場合
※ 前提条件として、Switch と Syslog サーバへの疎通が必須です。

Switch では下記の内容を設定してください。

Switch(config)#logging host 10.1.1.2
Switch(config)#logging trap informational
# syslog サーバに送信する際のログレベルを定義します。各レベルの定義は、上述と同じです。

上記のように設定した場合、Syslog サーバでは下記のように Switch から送付された Syslog が確認できます。

参考資料

Cisco IOS SNMP Support Command Reference
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/command/nm-snmp-cr-book/nm-snmp-cr-s3.html#wp9344214870

Cisco IOS Embedded Syslog Manager Command Reference
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/command/esm-cr-book/esm-cr-a1.html#wp2558875863

Nexus 93180 some interfaces has "output error" on "Store and Forward" Mode.

idc000002 — Tue, 20 Apr 2021 06:14:17 GMT

Nexus 93180 some interfaces has "output error" on "Store and Forward" Mode.

I remember “Cut-Through Mode” will be "output error" if interface has "input error".

but My Nexus 93180 is "Store and Forward" Mode.

interface does not have "input error".

cant create static NAT in cisco RV340 router

ThuvarageshRajagopal56285 — Tue, 20 Apr 2021 05:59:11 GMT

In the static NAT under firewall I am trying to create NAT rule where when I give the static IP in public IP range tab I am getting error as it is the WAN IP of WAN2. How can I create NAT then. Please help.

Help with B-ACD configuration setup

lisandro — Tue, 20 Apr 2021 05:56:57 GMT

Dear I hope you are well, I would like you to help me with what I want to do if it is possible.

I currently have a Cisco 1861 router with the following configuration:

application

service queue flash:/aa/app-b-acd-3.0.0.2.tcl
param queue-len 30
param aa-hunt10 7200
param number-of-hunt-grps 1
param queue-manager-debugs 1
!
service aa flash:/aa/app-b-acd-aa-3.0.0.2.tcl
param number-of-hunt-grps 1
paramspace english index 1
param menu-timeout 0
param dial-by-extension-option 1
param handoff-string aa
paramspace english language en
param max-time-vm-retry 1
param max-extension-length 4
param aa-pilot 7200
paramspace english location flash:/aa/
param second-greeting-time 60
param call-retry-timer 10
param voice-mail 7500
param max-time-call-retry 180
param service-name queue

This works very well for me when I call I listen to the audios and the options (1 to dial the intern and 0 to speak to the operator). But what I need is only to use an audio (which I already have) the audio says "you have a communication with the company X wait and it will be attended". That is, I do not need to mark options, I need to be referred with my operator directly, which will be the search group that I already have created.

My question is if it is possible to configure or change that script to only use an audio with the features that I mention ??

Thank you so much

C9120上怎么安装docker？然后怎么安装APP？

cker — Tue, 20 Apr 2021 05:32:13 GMT

C9120上怎么安装docker？然后怎么安装APP？没有DNA C，这个需要怎么实现？需要fogdir？或者

Wrong External Phone Number Mask

ChrisbJensen1 — Tue, 20 Apr 2021 05:27:41 GMT

I Know that some telco providers manipulate the digits they send to the destination. I will enable the debugs on the gateway which routes these calls and verify what actual digits we are sending to the Telco provider. But I don't know the debug to see it... Can anybody help

/Chris

ARP MAC is all Fs or all 0s.

network_geek — Tue, 20 Apr 2021 05:06:27 GMT

Hi All,

So I had captured an ARP packet and can see that Ethernet header has all FFs for an arp broadcast request while all 0s for Target MAC in the ARP header. Can someone shed light on this?

Regards.

How to configure a Router-on-a-Stick?

MasonCa — Tue, 20 Apr 2021 04:55:03 GMT

I am a student, and learning Switching, Routing, and Wireless Essentials

I have a question about configure a Router-on-a-Stick routing

As we can see, We have 5vlans and 3 switch. I configure etherchannel between S1 and S2.

How can I configure the Router-on-a-Stick in S1 S2 and S3?

(The address table may miss some ip, We can give an ip.)