Hello everyone, I would like a clarification. If on the untrusted ports I configure dhcp snooping and go on, I impose that for example on the access ports no more than 5 dhcp packets must arrive in 1 minute, so as for dhcp starvation the problem seem...
Hi everyone, I want to know before buy. Thanks a lot!
I am trying to implement HMAC SHA1 algorithm and used open source libraries for the same.But it is generating 17 bytes digest with 3 bytes 00s added. But it is expected to generate 20 bytes digest.we are providing input of 14 bytes key string. any id...
Hello everyone. Im new here, so I hope to be able to do this correctly. I have two Cisco 5516-x ASAs that I was told need to be setup in HA mode. I was looking at the licensing, and Im trying to determine if I can do HA with these two with what is...
Hi everyoneI noticed that there is a bit of confusion regarding the address spoofing attack. On the modules of the new ccna certification it is written that it is difficult to mitigate Iaddress spoofing but there is a tool called IPSG that allows you...
Hello,Sorry for this off topic question, but I couldn't find any part of the forum where this question would fit.I'm working for a Cisco Partner and I've always used my Cisco partner account to access cisco.com and also this community.For some reason...
Hello everyoneI wanted to ask you why it was not possible to implement a protection system similar to "Dynamic arp inspection" even against "ip / mac address spoofing?There is "Ip source guard" but it is not as effective as the DAI used for arp spoof...
I've been asked to configure an ASA 9.x routed mode with two DMZs. An APP server currently sitting on the internet with two outside interfaces, and one inside interface should span (bridge) these two DMZs Inside on on DMZ, outside on another. The cur...
Hello, I am planning on taking SCOR exam. I've been thinking of buying official cisco course for 500$, however I am not sure whether this course is worth the money of not.Has anyone used this course and would you recommend it?
Hi, I'm having this annoying problem with a non-FMC managed FTD device of ours (based on ASA5516X platform). The unit is cabled via the recommended setup documentation whereby the management and internal interfaces are connected via L2 switch to e...
Hi all, I have a question.From A server, I am unable to access the cisco device via SSH. The TCP session is open for port 22. I am to telnet the device via port number 22 from the server. When I tried to ssh the device below output I get.SW1#sh sshCo...
Hi,I’ve got two Cisco 4331 as my border routers participating in eBGP and iBGP. I’ve got an extended IP ACL as anti-spoofing configured to block incoming RFC 1918, APIPA and our prefix. With my syslog and netflow analyser we’ve notice connectivity th...
Hello Cisco Community I have a issue regarding the license on a firepower 1010. After i installed the backup file, the firewall dropped its registered license which i expected, but it also dropped its Base License, which means that im no longer allow...
Hi, We want to implement a security on router and want to block all incoming traffic to router (from outside) but want to allow all traffic from inside. Please let us know how can we do this. Please let me know if need any more info. Thanks,Amit
Dear,I want to permit the SCP protocol on my Cisco Devices (routers, switches, wap, ...) for one host (a server which backup the configuration by SCP).But if I'm not wrong, the SCP protocol pass by the SSH protocol.So, do you know if it is possible t...
