About Mister Cartwright

Mister Cartwright · 11-06-2019

Trying to get BVI working on a pair of Cisco NCS 5500 running version 7.0.1 but cannot ping the other end. There is a single link between the routers in a bundle. I can ping the far-end router using the directly-assigned IP on the BE, but cannot ping...

Mister Cartwright · 10-08-2015

Nessus scans shows that my switches are performing IP forwarding. Switches are IOS (4948E) and NXOS (9300). All of them are using the management or mgmtVRF VRFs for their management connections, and it's this IP that is forwarding. If I point one swi...

Mister Cartwright · 01-30-2015

Is VXLAN supported on the Nexus 5500 series? I am seeing conflicting information on the web, but cannot see any details in any of the configuration guides, or VXLAN listed on the data sheet for that series. There is a mention of VXLAN in the latest r...

Mister Cartwright · 02-03-2014

I recently enabled command authorization on my Nexus switches and RANCID could no longer run. The error rancid reported was:AAA_AUTHOR_STATUS_METHOD=16(0x10)It was weird because the commands RANCID was running, could be ran just fine manually by call...

Mister Cartwright · 01-29-2014

IOS has the command "login on-success log" to do this, but I cannot find something similiar for NX-OS. Is there a way in Nexus that I can generate a SYSLOG message whenever a user logs into the device?Ultimately I am trying to generate at least one l...

Mister Cartwright · 09-02-2020

If you did not run that command at install, how can you run it in the future?In my case, I have CSPC installed a VM - pretty sure I used the OVA. Apparently didn't run that command during install, or forgot the passwords, so am unable to SSH into the...

Mister Cartwright · 09-02-2020

I was able to work past this by disabling SSL inspection temporarily on the upstream firewall.

Mister Cartwright · 11-06-2019

I got this working. The catch is that BVI can't handle VLAN tags, and I don't see a way to strip them inside the bridge group configuration. So you have to pop the VLAN tag on every sub-interface that is part of the BVI. To solve you can add this com...

Mister Cartwright · 04-15-2016

No I never found a way, but I never looked after my initial post. I filed a report with security explaining why it ultimately was not a security concern for us. All management interfaces for our network devices are using dedicated VRFs which connect ...

Mister Cartwright · 06-20-2014

I have a 4900M with the same problem except I am running 15.2(1)E. The latest config guide I can find for the 15 train is 15.0 which does not list DNS as being supported for VRF. However, there are some commands that make it appear it is. Entering th...

Member Since	‎10-28-2012 08:48 PM
Date Last Visited	‎09-04-2020 12:05 AM
Posts	25
Total Helpful Votes Received	21

User Statistics

User Activity

NCS 5500 running 7.0.1 and BVI

How to disable IP forwarding in management VRF?

VXLAN support on Nexus 5500 (5548UP)

TACACS RANCID Nexus issue - AAA_AUTHOR_STATUS_METHOD=16(0x10)

Generate SYSLOG message on user login for Nexus

Re: CSPC v2.8.1.4 root password

Re: Unable to find valid certification path

Re: NCS 5500 running 7.0.1 and BVI

No I never found a way, but I

I have a 4900M with the same