I have not touched ISE or 802.1x auth for a while now but simply can not figure out how does access layer switch handles the DACLs OR even just a manually defined ACL for the port... Say I have a C9500 as the core and C9200 as the access layer and us...
Forum Posts
Resolved! Access layer - Loop prevention
Looking for some advice on what would be the best approach to prevent physical loops at the access layer. Our existing design is quite simple, it consists of several switches acting as layer 2 (around 6-7) and all of them are connected to a switch th...
Hi, fairly new to advanced networking. We have a two 9300 core L3 switches, and a new WLC 9800. We have a MOBILE SSID that we have apple devices connect to, but we do not want them clogging up our MPLS and instead go to a local internet breakout. A...
Today a coworker and I were working on showing a few new guys some spanning tree info and we disagreed on if pvst/rpvst treats access ports ad trunk ports differently. I know if you add commands like portfast or uplink fast that affects it but witho...
Resolved! Removing policy-map not possible
Hello,I try to remove a policy-map I don't need anymore.But I get an error messageswitch(config)#no policy-map type control subscriber MONITOR_MODE_MAB_POLICY%policy-map "MONITOR_MODE_MAB_POLICY" currently associated with at least one interface or te...
Hi everyone,I have got two vlans:VLAN1 and VLAN2I want to access only one pc(192.168.206.20) in VLAN2 from devices of VLAN1 and want to deny to other devices in VLAN2.I tried with access list as below:ip access list extended VLAN1permit ip any host 1...
Hello gods of tech!View pretty image attached. Issue: Meraki switch is CST root, and adjacent to MST cloud. P2P connection between (Meraki) CST root and MST switch root is STP flapping because superior BDPU conflict.Confirmed: Meraki switch technolog...
ear All, I wanted to check latency of Nexus 93180YC-FX as per data sheet it says latency is 1 microsecond. Our requirement is to reduce to the same to nano second is there any license available for the same? where we can install the license in the bo...
Resolved! Modify policy-map
I have a policy-map (type control subscriber) and bound it to an interface.policy-map type control subscriber DOT1X_MAB_FAIL10... event authentication-failure match-first ... 50 class always do-until-failure ... 30 authentication-restart 60...
Hello, I am doing a lab in Packet Tracer and I am trying to set up a Wireless LAN Controller. I have 4 VLANs, 10,20,30,40 and thus I believe the switch port to the WLC needs to set to trunking so it has access to every VLAN. However, when I do this n...
Hello Group,I have a formatted flash on a Cisco 3560G and connected via console cable connection and have a user switch prompt being displayed. I have tried everything I can think of to get an elevated privileged EXEC mode prompt. Starting out with a...
Resolved! Access List
Hi Friends,I need help regarding Access List,I have a switch where I have created VLANS and an access list.I have to create 4 VLANs : 1. Vlan 1 - Default. (N/W: 192.168.200.0/28)2. Vlan 2 - Production (N/W: 192.168.206.16/28)3. Vlan 3 - VOIP (N/W: 19...
We have a series of three C9200 switches joined into a logical stack in the back (I believe StackWise but it was done over at hq), but the names of the ports on them don't correspond with what we have designated the switches. For example the 1/0/1 an...
Resolved! VRRP Design - Multiple VRRP Instances
Hi Cisco Community, The best Community of the Internet Let me to open this link to know a bit more of the VRRP Designing topic. I have to develop an interesting project that consists of joining three ERPS rings. Each of these three ERPS rings must h...
Does THE WS-C2948G-L3 switch support configuration Layer 2 NAT (l2nat)?Is there a list of switches compatible with this configuration? Thanks in advance.
