Hi,I'm trying to read up for (and take) the CCNA, so that's the level of depth and understanding i'm seeking. I (hopefully) understand root guard and BPDU guard to some extend. Please correct me if i'm wrong and provide me with the proper knowledge. ...
Hi I got this NAT that works great. ip nat inside source static tcp 192.168.38.50 9100 interface GigabitEthernet8 9100 I need to limit this to accepting prints from just one IP, if I understand it rigt I have to set up an ACL to achive that? access-l...
Hello,I need to have data encrypted between two switches (Nexus 9K) and the encrypted data needs to be FIPS-140-2 certified.Is enabling MACsec on the switch enough to have FIPS-140-2 certified or do I need to only put the switch into FIPS mode - or d...
Hi There- We have received ssh vulnerability scanned by Rapid7 and I can't see that encryption in switch configuration as we already using SSH version2 SSH Birthday attacks on 64-bit block ciphers (SWEET32) (Recommendation is to disable 3DES)
WHY AM I NOT ABLE TO CONFIGURE BGP/OSPF in multilayer switch ws-c3650 ,how to do it Switch(config)#Switch(config)#router bgp 10IP routing not enabledSwitch(config)#help^% Invalid input detected at '^' marker.Switch(config)#help ?% Unrecognized comma...
Hi, I've changing the communication method for the Smart Licensing to use cisco transport gateway.For most of the devices it was working fine after changing the transport method to the address provided in the cisco transport gateway. config that was ...
Is it possible to create MACsec between a Cisco 7K and 9K if the hardware supports MACsec or do the switches need to be of the same model\version?Thanks.
My understanding is that ASDM is available free without a current contract but when I try to download the program I am advised I need a contract. Is there any way to get the current ASDM without a current license?
I have a host PC, DLS2-PC top right side of topology below. It belongs to secondary isolated VLAN 151, for the main vlan 150. Switch DLS1 in the VTP primary whereas switch DLS2 is VTP server version 3. From host PC DLS2-PC2 can ping interface vlan 15...
Hello,If I have two layer 3 switches on a campus LAN connected to each other with a routed interface on each switch, can I still enable MACsec on both switches and the traffic between the switches would be encrypted?Being that the switches are connec...
Hello,I have some Nexus9000 93180YC-EX chassis" switches and couldn't determine if they were MacSec capable? I checked under the feature set and MacSec isn't an option.Is it a limitation on the hardware or software only, or both?Thanks.
We have two 3750Gs setup with HSRP that we're seeing the below message on. Pretty sure it's because HSRP messages are not getting shared correctly between the two but don't know why. 105331: May 11 16:29:48: %HSRP-6-STATECHANGE: Vlan114 Grp 1 state ...
iOS 16.3.6 Denali, with ISE 3.6 patch 6 (in monitor mode)#sh license feature-versionFeature Name Version----------------------------ipservices 1.0ipservices eval 1.0ipbase 1.0ipbase eval 1.0lanbase 1.0 I have created a PACL to block all multicast, an...
We are currently installing a vPC pair of nexus 9K switches as TOR switches for a VDI environment. These switches will be vPC paired and connect to the core 4500-x VSS pair in another CER. How would I configure a port channel from the TOR nexus pair ...
Hi, Please take a look at my basic diagram. I have (2) layer 2 circuits form 2 different carriers connecting my catalyst 9000's in two different datacenters. Currently, one is active and the other is in standby mode via being blocked by STP. I am ...
