Hello, I am designing a new DC and considering using double-sided vPC between Spine (N9K-C9364C-GX) switches and Leaf (N9K-C93180YC-FX3) switches. I reviewed the Cisco vPC best practices but wasn't able to find how many vPC domains are supported in t...
It's been a while since i had to deal with STP But can someone refresh my memory? Given the topology where i would have two nx9ks setup as a vpc domain feeding single switches (That will never cross connect to another set of switches), So it would be...
Hello everyone,I received EoS and EoL announcements regarding the Cisco C9200 and C9300 series switches. Two are regarding the DNA licences but the one below is regarding the switch serie, as far as I understud. If I click on the link in the MyNotifi...
HiI have switch 3850 and open SSH My Audit scan ssh found Encryption Algorithms vulnerability Can I disable Weak Encryption Algorithms 3des-cbc ,aes128-cbc ,aes192-cbc ,aes256-cbc and disable message authentication code MD5 and 96-bit MAC algorithms...
VA Team found VA - SSH Weak Key Exchange Algorithms Enabled on WS-C3750X-24 IOS 15.2(4)E10.VA Description: The remote SSH server is configured to allow key exchange algorithms which are considered weak. This is based on the IETF draft document Key Ex...
We have three series of Cisco Catalyst switches (2960, 1000 and 9300). The 2960 and 1000 units don't appear to support TLS 1.3 (very annoying). On a recent scan, our 2960 and 1000 series switches show failing grades on the TLS 1.2 ciphers. However...
what is the purpose of switch cmd "ip tacacs source-interface vlan X(mgmt)"? Is it a must to configure or more secure ?
Hello,This case is urgent please.We have a stack of SWITCHESSome members of this stack are C9200-48PLThe others are C9200-48PXGThey all have the same current version 17.3.5The target version of the upgrade is 17.6.5 MDCould we go with the upgrade wit...
I have a broken C3650-STACK-KIT= module. Currently, the associated C3650 switches have SNT Smartnets. Question: Does my SNT Smartnet contract cover RMA replacement for my broken stacking module?
Hello Group-Members,it's really strange but since setting up new access-lists (I never used them before) I noted that the lists stops working after 24h after applying it on the interface. This happens on a C9200L with IOS XE 17.3.7 (and on an elder C...
Hello there,I'm starting to study for my CCNA and I'm working towards building a small home lab to practice (in addition to using packet tracer).I just got an old ME 3400 ts 24 and I wanted to play a bit with it while I'm in the market for another sw...
Hello,we have a stack of three C9200 switches.They are stacked in daisy-chain topology. We want upgrade the topology to ring topology.We need to install additional C9200-STACK-KIT (StackAdapter) to the first and last switch.Can it be done with stack ...
Hello,in this topology, configured HSRP + Ip helper-address to DHCP server in distribution switch. 1- when VPC10 send broadcast DHCP discover will go from access switch1 e1/2 and e1/0 to distribution switch 1 and 2.2- distribution switch 1,2 will sen...
Hello!Just I have upgraded some 2960S to IOS 15.0(2)SE from a IOS 15.0(1)SE3 and the catalyst don't switch any IPv6 traffic. Don't work any RA and also don't work any unicast IPv6 traffic from any interface. I can see some references to IPv6 changes ...
