Hi all,I am having a terrible time trying to figure out how to get ISE to restrict commands that user groups can execute on network switches via TACACS. I have no problem setting users with access level 1 or 15--that works great. But if I try to ut...
Forum Posts
I'm replacing two 2901 routers with newer 4331 routers both running IOS-XE 17.12.07b. The two routers are at two different sites with two different internet service providers. On both routers, I have the "ip address dhcp" on my WAN interface, ...
SSH Access Segmentation Challenge on ISR4300/IOS-XE 17.12.4a Platform Hardware: ISR4331, ISR4321 (ISR4300 series) Software: IOS-XE 17.12.04a Objective Implement SSH access with two different security policies based on authentication method: Public ke...
Resolved! Command to Change a Password
The following password is configured on the Catalyst switch.Is my understanding of the command to change this password correct?<Current Configuration>enable secret 8 *********username admin secret 8 *********<Command to Change>enable algorithm-type s...
I have posted a similar issue before but I failed to give all of the needed details. In short, I have ATAs that work in one client office but not another. I have an IT company that says a firewall cannot cause any errors on an ata. Everywhere I l...
A discussion point I wanted to raise with the network architecture community around how enterprise network designs should account for browser based social media utility tools that marketing and content teams use regularly as part of their workflow. T...
Resolved! IOS XRV9000 netconf
Hi,I have been following the steps in this document (Cisco IOS XR Programmability Configuration Guide for ASR 9000 Series Router - Using Data Models [Cisco ASR 9000 Series Aggregation Services Routers] - Cisco)I copied and pasted configuration I push...
Hello,we've monitored our devices via CheckMK and the Meraki special agent and recently updated our Meraki MS390 and C9300L switches to IOS-XE 17.15.5.Since the update we are not able to monitor/get the interfaces, status, utilization, or anything be...
We are using BGP on the WAN interfaces of R1 and R2.I would like to create an EEM that executes commands on R2 in the event of a WAN failure or a hardware failure on R1.I believe the best approach is to use IP-SLA on R1 to monitor ICMP traffic to the...
Resolved! EEM: Multiple Syslog Patterns
Is it possible to configure EEM to execute an action whenever any one of multiple syslog messages matches a pattern? I would like to know if it is possible to write syslog patterns using an "OR" condition.
I’m looking for some guidance and shared experience from the community regarding improving network performance in a small business environment.We are using a standard business router setup with multiple devices connected throughout the day (laptops, ...
Please release my ip Your current IP is 95.164.67.146.It attached to an email i don't know which one. Probably randomly generated.
Hello everyone,I'm currently continuing my Extended ACL lab, and I have a question.How can I allow a specific IP address within a VLAN 30 (IP address: 192.168.30.10) to access another VLAN without allowing that other VLAN to access the specific IP in...
Hi,Has anyone tried to design network , hardware , software redundancy between 2 Core Switches and 3 access switches in standalone in separate network rack with no possibility of stacking.
We are not using camera and sensors in our environment. Organization->Firmware upgrades->Schedule upgrades-Any status (critical).I am getting all are related to camera and Sensors. I dont wish to see this details in the path Organization->Firmware up...
