Routing and SD-WAN

Hi, I am deploying BGP RTBH on Nexus n9300. RTBH is triggered by remote server, which advertises victim's IP address to Nexus with a community, to blackhole the destination (victim IP).Context (optional): NX is connected to ISP and have eBGP peering ...

Dear team,I recently purchase LIC-MX68-SEC-1 YR  but what I needed is actually LIC-MX68W-SEC-1YR so it was a mixed up on SKUs Now in the dashboad am told I cannot use the lisence I need to get the correct on , can mearki change for me the licenses in...

We are upgrading from a C6807-XL to a  C9606R.   I use a route-map that calls out traffic to send default traffic to a default next hop.  I put it on my Vlans and then I can control what IPSEC tunnel I send traffic too.route-map DEFAULTTRAFFIC, permi...

On one of my spokes the DMVPN tunnel has began to drop, and it does this on a regular basis, almost predictable:*Jul 14 02:58:19.632: %DUAL-5-NBRCHANGE: EIGRP-IPv4 30000: Neighbor 192.168.200.254 (Tunnel10) is up: new adjacency*Jul 14 03:10:50.546: %...

Hello, We have two ISPs, a Cisco 6509 core switch with multiple gigabit and 10G modules, two MX95s configured for HA. Our current setup looks something like this; MX & Switch - WAN Breakout Switch - Google SlidesWe may need to make some changes to ou...

Security appliances software versions MX 26.2.2 changelog Executive summaryMX 26.2.2 is the second beta release for the MX 26.2 release family.This release adds custom intrusion policies, WAN Uplink Sharing, and organization-wide port profiles.It als...

We just started working with a new vendor and need to utilize their API from one subnet, the oddity is their API URL has the same IPs as their primary site, so api.site.com resolves to the same set of IPs as site.com. We have close to 100 locations t...

Quick honest note: I put this summary together with the help of an AI, because we ran a lot of advanced packet captures and low-level troubleshooting that's a bit beyond what I'd normally do on my own. So if some of the wording sounds very "clean", t...

This is regarding Cisco SD-WAN & have the below query.We have 4 sits say (Site-1,2,3 & 4) and they are all in different VPNs.Currently the VPNs are all established between all these sites (IPsec)Even though they are in different VPNs the IPsec are es...

Hi Folkshope you are doing good.If I am having a cisco ASR9000 router, can I use any port as Trunk or Access port to use for switching only.I want to use router as hub, is this possible.

We have a number of URLs included on internet breakouts in our MX devices. The ones which are mostly ASW hosted services, the DNS URLs generally resolve to a CNAME and then to an IP address. The IP addresses also appears to change dynamically from ti...

Is there an option to clone an existing feature within a configuration group in Cisco SD-WAN, similar to how we can directly clone a configuration group?

HelloI'm giving support to one of my customers. He has an MX68CW but he doesn't want to use the integrated cellular gateway.Thus, there's no any sim card inserted to the device. But, it's showing all the time "connecting" at the cellular information ...