Hi, I m trying to filter the generic snmp trap using custom nbar protocol i have created the following protocol in NBAR ip nbar custom TRAP 26 hex 4 destination udp 162 Which checks the hex value 4 at 26th Byte in udp payload. It seems that it filters all trap traffic. Any idea at what byte (offset) the generic trap is located in snmp pdu. TIA Hitesh
... View more
hi, Its true that GRE packets are process switched in 4500 series switches running with any codes i.e Switched in software. I think it will give you performance between 5 to 15 Mbps at max. It may also lead to high CPU utilization during the specified data rates. HTH Hitesh Vinzoda
... View more
Thanks Jon, In my case, my 2 vlans, vlan 10 belongs to GRT and vlan 11 belongs to vrf. So if they want to get route they will not use msfc rather it will go to firewall and based on policy they will have access to each other. plese advice... on this hypothesis Regards Hitesh Vinzoda
... View more
Hi, i have a setup in which i had msfc svi configured on 6509 which is also configured on fwsm with the same subnet ip address to setup communication between msfc and firewall. its working fine. Now we had requirement of configuring second interface with new subnet on 6509 which should be also present on fwsm with the same new subnet on fwsm. The problem is newly created SVI's remain administratively down on 6509. do i have to use "firewall multiple-vlan-interfaces" command on 6509..to create multiple svi interfaces between msfc and fwsm ? If yes, when i introduce this command, does it hamper the existing traffic going from msfc to fwsm...? Thanks in advance Hitesh Vinzoda
... View more
Hello, I want to extend a vlan across a mutihop ip network. what are my options apart from L2TPv3 as the vlans will be extended from 6509 (12.2(33)SXI) to 4507(12.2(50)SG). 4507 doesnt support it and 6509 doesnt have any other encapsulation type other than MPLS and my network is not mpls enable. I m thinking of transparent bridging over GRE tunnel ... will it work ? any other options if any available.. Please advice Hitesh
... View more
Hi, I m trying to create a psuedowire between 6509 and 3845 which are connected by means of IPV4 network. 6509 is running with code as 12.33SXI and i found that the encapsulation method under pseudowire class is only mpls not the l2tp.. If i configure the psuedowire class with encapsulation with mpls and network between 6509 and 3845 is not mpls enabled...will it work..?? is there any way to set the encapsulation to l2tp instead of mpls ? if not any workaround .. Regards Hitesh
... View more
Hi, The config looks good to me. It seems that it is not allowing to manage the dynamically learned Vlan. I think there may be bug in the firmware that you are using. See this topic, It could be helpful http://forums.linksysbycisco.com/linksys/board/message?board.id=Switches&thread.id=3228 I ll Suggest you to confirm it from Linksys Support team. Regards Hitesh Vinzoda
... View more
Hi, I dont have any linksys switches in my network as of now but once upon a time i had Cabletron with GVRP which messed up my network when connected with Cisco switches with redundant links. Can you please post the config of switches on which you are trying your hand, coz i can see that you have configured all ports on SW4 as trunk in first post and than you are trying to configure it as access. Also confirm the mode you are running for GVRP ? make sure links between switches are 802.1q trunk. Regards Hitesh Vinzoda
... View more
Hello, In my opinion on SPS224G4 switches you need to configure following things for GVRP to work. GVRP Enable on device GVRP state on device (enabled/disabled) Dynamic VLan creating enabled on interface GVRP registration enabled on device. See this doc, should help.. http://www.cisco.com/en/US/docs/switches/metro/csbpgss/sps/administration/guide/Cisco_SPS208G224G4_UG_OL-18486-01.pdf Regards Hitesh Vinzoda
... View more
I have few 1242 AP's which are in DCR of LMS3.1, I have Virtual-Dot11Radio0 showing up in all AP's and for this interfaces, I have Interface status as up and line protocol as down. due to this i m seeing alarms from these radios in DFM alerts and activities. I tried to unmanaged ie. "FALSE" for this interfaces and after that i applied the changes in DFM. For a time there status is unmanaged i.e FALSE but after sometime they are again showing up as managed and TRUE. and thus resulting in generation of alerts and events in DFM, Moreover when i telnet the AP and change the status of Virtual radio to shutdown, it doesnt allow. AP's are running on c1240-k9w7-mx.123-8.JA2 DFM version is 3.1.3 TIA Hitesh Vinzoda
... View more
Hi, I think of multicast addresses not as IP addresses but rather as Group addresses. Fundamentally Multicast and Broadcast are different things. There is no concept of broadcast within a multicast as such. Multicast addresses are group addresses referred as destination. anyone who wants to receive the Multicast will join the certain group, you can also use 239.255.255.255 as your group address for multicast. As far as subnet address is concerned 239.0.0.0/8 just represents the ip addresse range to be used for private administrative purposes. Moreover, you never assign multicast addresses on interfaces of network devices, this addresses are always used as destinations. Regards Hitesh Vinzoda
... View more
Ok, Say if you on a telnet session to a device and you want to get the loggin messages on the terminal screen. you can use it for an instance of telnet's connected session, once you get disconnect and connect again, terminal monitor is gone.. its specific to terminal sessions.. If you permanently want the logging events of messages to be displayed in telnet sessions on all lines use logging monitored. Regards Hitesh Vinzoda
... View more
Hi Sairam, The DR election in OSPF is non-preemptive. This means the when the DR is down or not reachable for some reason. the BDR takes the role of DR. When the DR comes up it will not take back the role of DR, thus creating the problem. Even if you give the ospf priority of interface to 100, It will not preempt. It is normal problem. In your case if the FR is partial mesh than i suggest that you configure priority of zero (0) on the spoke's ospf interfaces ( if you want the network to be a BROADCAST network). This will make sure that Spokes never will be DR. Or else change the Ospf network type to prevent the election of DR/BDR. Regards Hitesh Vinzoda
... View more
terminal monitor is used to display debug command output and system error messages for the current terminal and session. While, logging monitor command is used to enable system message logging to all the terminal lines (monitor connections). Different severity levels can also be defined. Regards Hitesh Vinzoda
... View more