Routing and SD-WAN

Hello, We have two ISPs, a Cisco 6509 core switch with multiple gigabit and 10G modules, two MX95s configured for HA. Our current setup looks something like this; MX & Switch - WAN Breakout Switch - Google SlidesWe may need to make some changes to ou...

Security appliances software versions MX 26.2.2 changelog Executive summaryMX 26.2.2 is the second beta release for the MX 26.2 release family.This release adds custom intrusion policies, WAN Uplink Sharing, and organization-wide port profiles.It als...

We just started working with a new vendor and need to utilize their API from one subnet, the oddity is their API URL has the same IPs as their primary site, so api.site.com resolves to the same set of IPs as site.com. We have close to 100 locations t...

Quick honest note: I put this summary together with the help of an AI, because we ran a lot of advanced packet captures and low-level troubleshooting that's a bit beyond what I'd normally do on my own. So if some of the wording sounds very "clean", t...

This is regarding Cisco SD-WAN & have the below query.We have 4 sits say (Site-1,2,3 & 4) and they are all in different VPNs.Currently the VPNs are all established between all these sites (IPsec)Even though they are in different VPNs the IPsec are es...

Hi Folkshope you are doing good.If I am having a cisco ASR9000 router, can I use any port as Trunk or Access port to use for switching only.I want to use router as hub, is this possible.

We have a number of URLs included on internet breakouts in our MX devices. The ones which are mostly ASW hosted services, the DNS URLs generally resolve to a CNAME and then to an IP address. The IP addresses also appears to change dynamically from ti...

Is there an option to clone an existing feature within a configuration group in Cisco SD-WAN, similar to how we can directly clone a configuration group?

HelloI'm giving support to one of my customers. He has an MX68CW but he doesn't want to use the integrated cellular gateway.Thus, there's no any sim card inserted to the device. But, it's showing all the time "connecting" at the cellular information ...

We are upgrading from a C6807-XL to a  C9606R.   I use a route-map that calls out traffic to send default traffic to a default next hop.  I put it on my Vlans and then I can control what IPSEC tunnel I send traffic too.route-map DEFAULTTRAFFIC, permi...

Hi everyone,I'm testing the Primary and Secondary IPsec VPN Tunnels feature (MX 19.x, non-Meraki peers terminating on two Zscaler/SSE PoPs) and I'm trying to pin down the exact failover trigger condition.From the official doc I can see:Probe interval...

I have obtained a secondhand ASR-920-4SZ-A and wanted to wipe the configuration clean.Used:write erase delete /force /recursive flash: reloadBut that wiped even the IOS-XE.Where can I obtain TFTP_FILE=asr920-universalk9_npe.16.09.03.SPA.bin as I am u...