Switching

Using ACL to restrict VPN access from a Subnet

Hello all I am trying to restrict VPN access from a couple of subnets on a Cisco Router. The following is the config I have put in but it still allows VPN to establish. Cisco AnyConnect is being used as a VPN ClientRTR# sh run | section ip access-lis...

MAC Flapping on 2960-24TC-L - Netlab POD

Hello,I am exp MAC Flapping on a 2960-24-TC-L switch between multiple ports (flapping ports move as I shutdown interfaces). The only way to stop the flapping is to shutdown all unused ports. This is a Netlab POD setup for student labs. The flap doe...

Resolved! Preventing Typos

Hi all We recently had an incident where a Live system was brought down due to an engineer typing an IP address incorrectly. Whereas he meant to write x.x.x.50 he put x.x.x.51. Does the community have a quick easy way of preventing these types of iss...

When and Why do we decrease MSS instead of MTU.

Here is the question.When and Why do we decrease MSS instead of MTU.In the router that we can configure both of them separately.Suppose I have kept MSS as 1260.I have not made any changes to the MTU. Now if the TCP and the IP header do not have any ...

MTU mismatch - video problem

Hi guys.I have a lot of brocade MLX connected in MPLS with BGP and I have video traffic traveling. Connected to one MLX I have a 3750 stack and here some DVR and pc that can view the video coming from the various camera, and here with have the follow...

Resolved! Why VLAN Tag is inserted at trunk port in frames that will be carried over TRUNK link?

I was trying to understand the need of VLAN Tag in frames over the TRUNK link ?My understanding: Example two switches i.e. switch#1 & switch#2 are connected through TRUNK link.PC#1 ------Connected through switch#1 via access port(under VLAN#1)PC#2 --...

EIGRP OTP with GETVPN - KOOP Key Servers crashes

In my homelab, I have created a scenario which include EIGRP OTP and GETVPN.I have made this work, with only one Key Server.That means I was able to ping between the routers that were configured as GETVPN Group Members. Then afterwards I tried to cre...

Resolved! Can I make an SVI OSPF active, yet via an ACL allow only one device to form an adjacency?

This is on a Nexus 7700 version 6.2(10) For security reasons we have some L3 OSPF SVIs configured as passive interfaces. However, I have a network tool (it maps and analyzes the OSPF routing world) that must form an OSPF neighbor adjacency with anot...

stacked switch and default gateway

we have two layer 3 switch, stacked together, switch 1 port from g1/0/1--G1/0/48, switch 2 port from g2/0/1--g2/0/48switch 1 is active, how can we manually change switch 2 to be active? if switch 1 fails, all port shut down, the user originally conne...

no ip arp gratuitous

Quick question:If I issue the command no ip arp gratiutous, will this impact any trafficflow in my network?Can I do this during work hour or do I need a maintenance windows? BRGeir

Resolved! 2960 monitor session: cannot access pc on monitor destination port

Trying to monitor traffic on vlan 772, destination port Fa0/7.Seeing traffic from 772 on pc with wireshark, but cannot access pc remotely on vlan 234. Source: monitor session 1 source vlan 772 Have tried these variations for the destination: monito...

Unable to access 1941 router after reload

Hi everyone,I am learning cisco devices for this past years and a little familiar on device command. But this time, i was trying to configure a cisco 1941 router until such time I decided to erase my configuration inputted. I erase the configuration ...

Resolved! BFD between 6500 and Nexus 5K

I'm trying to run BFD for OSPF between 6500E running version 12.2.33 SXH and Nexus 5596UP running Version 6.02. The Nexus 5596 has L3 cards and the correct licence. Here are the config6500:_________!interface GigabitEthernet7/17 ip address 30.30.30.1...

ip nat log translations with NVI enabled

Hello everyone,I faced with a strange problem. I'm trying to enable translations logging for NAT NVI, but it doesn't work at all.The scheme is very simple: R1-R2-R3Config R1:interface FastEthernet0/0 ip address 10.0.0.1 255.255.255.252router ospf 1 n...