So, I was practicing TLOC extension at my SD-WAN lab on EVE-NG and I spent around 4 hour to troubleshoot this strange issue. The issue is directly connected subinterface cannot ping each other. They are both connected to GigabitEthernet4 physical int...
Hello,I came across a Cisco lab where the following ACL needed to be configured to protect SRV:Applied ACL at R3:!interface Ethernet0/2ip address 192.168.3.3 255.255.255.0ip access-group out-to-srv outip access-list extended out-to-srvpermit tcp host...
We have a MX85 HA pair,WAN1, is set as primary for all VLAN's besides Guest4 times now we have had an issue where the network goes 100% lights out besides the VLAN hard set on WAN2.At first, we thought it was the switch, which is ruled out, but lead ...
Cant get SDWAN to push a template. I get the error "Ping to Validator 192.168.12.171 from GigabitEthernet1 FAIL" Edge11 has vbond ip configured as 192.168.255.171. I have also added static routers in the feature template...
Hello Cisco Community,We currently have a DMVPN deployment where the IPv4 subnet assigned to the tunnel interfaces is approaching exhaustion. We need to increase the number of available tunnel IP addresses to support additional spokes. We are open to...
All, I'm trying to understand what is causing only ASR9k (not 8201 or N540) to fail to onboard to NSO during a ZTP process.The ZTP Script pulls down a day 0 config that moves the mgmt interface into a newly configured VRF.Once that config gets applie...
Hi,for along time, i was using group policy with L7 rule to accept outgoing traffic to a certain country. and to add a published server to this group policy. this way, the published port is only accessible from this country. which helps a lot against...
Does Meraki MX support VPN Hairpinning (U-Turn Routing)?I need to route HQ users' Internet traffic through a Non-Meraki Site-to-Site IPsec VPN to a remote firewall for inspection, then return the traffic through the same VPN tunnel to the Meraki MX a...
Does Cisco, or anyone else do a cable that will allow me to connect my USB only laptop to a console port on a Cisco device?Thanks
I'm trying to configure a HWIC-16A as a terminal server without success. I can get a telnet session to connect, but I simply get a blank screen, no data appears to be sent or received over the serial line.The only similar post I could find was https:...
Hello, Is there a difference between these two cables? A920-CONS-KIT-S, found on this page:https://www.cisco.com/c/en/us/td/docs/routers/asr920/hardware/installation/guide/b-asr920-ic-hig/b-asr920-ic-hig_chapter_0101.html A900-CONS-KIT-S, found on th...
When I try to push my configuration-group template on the SDWAN Cedge device from vManage. I am getting this error in the push logs:Failed to verify appids : dreoptDevice model : 8200-1N-4TCan anyone help resolve this issue?
Security appliances software versions MX 26.1.7 changelog Executive summaryMX 26.1.7 is the first Recommended release in the MX 26.1 release family.We recommend planned, phased production adoption in accordance with normal change-control and platform...
To build an HA setup for the MX appliances, what are the requirements from the ISP side? Specifically, is it mandatory for the ISP to provide at least three IP addresses per WAN circuit to support MX HA, or are there alternative deployment options wh...
Hi all, a few questions for an Auto VPN design reusing existing MX and C8111-G2-MX units:Can two C8111-G2-MXs run as a routed warm-spare pair acting as an Auto VPN hub? Does WAN Uplink Sharing (MX 26.2) support the C8111, and is 26.2 stable for produ...
