Routing and SD-WAN

Security appliances software versions MX 26.2.2 changelog Executive summaryMX 26.2.2 is the second beta release for the MX 26.2 release family.This release adds custom intrusion policies, WAN Uplink Sharing, and organization-wide port profiles.It als...

Hello, everyone.I am reading the MPLS Fundamentals book which states that If a prefix is reachable via a mix of labeled and unlabeled (IP) paths, Cisco IOS does not consider the unlabeled paths for load-balancing labeled packets.This sort of counters...

We had an incident where our major subnet 10.10.0.0/16 became unreachable from our VPN Users when we had a power outage on Datacenter B. This route should still be available via the Data Center A. Their common entry point is either  the virtual MX (v...

Hi,As far as I have read, Meraki one-armed concentrator and routed mode are getting more and more similar (feature wise).Are there any specific uses cases when only one mode should be used in the light that nowadays are very similar?Are there any imp...

Dear team,I recently purchase LIC-MX68-SEC-1 YR  but what I needed is actually LIC-MX68W-SEC-1YR so it was a mixed up on SKUs Now in the dashboad am told I cannot use the lisence I need to get the correct on , can mearki change for me the licenses in...

We are upgrading from a C6807-XL to a  C9606R.   I use a route-map that calls out traffic to send default traffic to a default next hop.  I put it on my Vlans and then I can control what IPSEC tunnel I send traffic too.route-map DEFAULTTRAFFIC, permi...

Hi, I am deploying BGP RTBH on Nexus n9300. RTBH is triggered by remote server, which advertises victim's IP address to Nexus with a community, to blackhole the destination (victim IP).Context (optional): NX is connected to ISP and have eBGP peering ...

On one of my spokes the DMVPN tunnel has began to drop, and it does this on a regular basis, almost predictable:*Jul 14 02:58:19.632: %DUAL-5-NBRCHANGE: EIGRP-IPv4 30000: Neighbor 192.168.200.254 (Tunnel10) is up: new adjacency*Jul 14 03:10:50.546: %...

Hello, We have two ISPs, a Cisco 6509 core switch with multiple gigabit and 10G modules, two MX95s configured for HA. Our current setup looks something like this; MX & Switch - WAN Breakout Switch - Google SlidesWe may need to make some changes to ou...

We just started working with a new vendor and need to utilize their API from one subnet, the oddity is their API URL has the same IPs as their primary site, so api.site.com resolves to the same set of IPs as site.com. We have close to 100 locations t...

Quick honest note: I put this summary together with the help of an AI, because we ran a lot of advanced packet captures and low-level troubleshooting that's a bit beyond what I'd normally do on my own. So if some of the wording sounds very "clean", t...

This is regarding Cisco SD-WAN & have the below query.We have 4 sits say (Site-1,2,3 & 4) and they are all in different VPNs.Currently the VPNs are all established between all these sites (IPsec)Even though they are in different VPNs the IPsec are es...

Hi Folkshope you are doing good.If I am having a cisco ASR9000 router, can I use any port as Trunk or Access port to use for switching only.I want to use router as hub, is this possible.

We have a number of URLs included on internet breakouts in our MX devices. The ones which are mostly ASW hosted services, the DNS URLs generally resolve to a CNAME and then to an IP address. The IP addresses also appears to change dynamically from ti...