About s-daly

s-daly · 07-08-2020

Take a look at the attached FirePower Access Control rule. Does the attached rule mean:FirePower, Access Control1) Block outbound connections for all SQL apps only on destination port 1433 or 2) Block outbound connection for all SQL apps on any port ...

s-daly · 05-01-2019

Hello: I'm running ISE 2.6 and need to change the timezone on my 2-node deployment. Both the admin and CLI command reference guides for 2.6 suggest that this can be changed with a restart of the application, but this does not seem to be correct: ise-...

s-daly · 09-25-2018

I'm building out a new office LAN of about 600 people, and I'm using a pair of C9500's for my core switches. My plan is to run some sort of mutlichassis etherchannel solution for redundant/HA uplinks to my floor switches. I'm unsure if the C9500's ...

s-daly · 07-29-2017

Hello: I have a situation where I need to map DSCP values to COS on a dot1q trunk to my service provider, as the provider will only make QoS decisions based on COS dot1p instead of DSCP. The handoff port is on a 3650 switch. Ideally, I think it makes...

s-daly · 12-21-2015

Hello: I'm running wired dot1x authentication on a Catalyst 3650 stack, 3.6.3 code. Everything is working fine, and authenticating as expected, when the ISE servers are reachable on the network and available. However, if the ISE servers become unreac...

s-daly · 01-24-2020

According to bug CSCvo49755, there is a fix to v2.4 with patch 11, but it appears this is still not fixed yet for v2.6: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo49755/?rfs=iqvred

s-daly · 10-23-2018

I talked with my SE about this, and here's the info I received: Cat 9K's do not do VSS, but they do virtual stackwise instead: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/16-6/configuration_guide/b_166_ha_9500...

s-daly · 08-01-2017

Perhaps QoS Groups might work, but I don't see anything in your example that is actually mapping DSCP to COS? That said, I'll look into this further.

s-daly · 08-01-2017

My output queuing strategy isn't in question here, so whether or not I'm using a priority queue is not my concern at the moment. Further, why I'm marking these isn't the question, either. The question pertains to whether or not COS marking is happeni...

s-daly · 07-31-2017

I think you're thinking Cat 3560 & 3750 switches, because the Cat 3650 & 3850 switches do not have these commands.

Member Since	‎11-05-2004 08:03 AM
Date Last Visited	‎01-13-2022 03:24 PM
Posts	69
Total Helpful Votes Received	5

User Statistics

User Activity

Question on FirePower Access Control Logic

Changing timezone in ISE 2.6 after installation

mLACP deployment question

DSCP to COS mapping question on Catalyst 3650

dot1x "dead action authorize" not working as anticipated.

Re: Changing timezone in ISE 2.6 after installation

Re: mLACP deployment question

Perhaps QoS Groups might work

My output queuing strategy

I think you're thinking Cat