About Anton Pestov

Anton Pestov · 01-17-2017

Where to apply policy-map when GRE Tunnel Interface have "tunnel source Loopback" ? - to Physical interface (corresponds to a routing table for GRE IP header DestIP)? or - to Loopback interface? Example. Where to apply policy-qos-test-parent: polic...

Anton Pestov · 12-30-2016

Sample config below: System image file is "bootflash:asr1000rp1-adventerprisek9.03.15.00.S.155-2.S-std.bin" ip access-list extended to-Tunnel1 permit ip host 10.0.0.1 any permit icmp host 10.0.0.1 any ! class-map match-all to-Tunnel1 match access...

Anton Pestov · 04-15-2015

How to configure NAT load-balancing over two ISPs on Cisco 2851.System image file is "flash:c2800nm-adventerprisek9-mz.151-4.M.bin"My config (users behind the router/PAT unable to acccess to Internet, I don't known why?!!): interface FastEthernet0/1/...

Anton Pestov · 06-27-2014

It is necessary to setup ZBF to forbid UDP of the traffics which contents of a packet corresponds to RegEx expression, for example Mikrotik Rules (see rule No.2): /ip firewall filteradd action=drop chain=forward disabled=no p2p=all-p2padd action=drop...

Anton Pestov · 11-21-2013

Idea such, There are policies of prioritization of RDP for operation with the virtual machines (VM). Some users use disk-mapping over RDP for downloading of files from the VM to themselves on the external disk connected to port of the thin client. As...

Anton Pestov · 06-27-2017

There is best solutions: - If you use AAA based on LDAP, then use: nat-assigned-to-public-ip {interface} - If you use AAA based on RADIUS, then use: NAS-Port-ID (RADIUS attribute 87) NAS-Port-ID = Public IP in AnyConnect VPN. Details: https://netcon...

Anton Pestov · 01-17-2017

If to apply policy on the Physical interface, then also it is necessary to specify actual 'bandwidth ...' parameter, that parent policy shaper correctly worked?

Anton Pestov · 01-09-2017

anybody will help? Physically Tunnel binds to Port-channel (Po1) ASR1006#sh etherchannel summaryFlags: D - down P/bndl - bundled in port-channel I - stand-alone s/susp - suspended H - Hot-standby (LACP only) R - Layer3 ...

Anton Pestov · 01-03-2017

Hi, no, in logs silence

Anton Pestov · 12-08-2015

for completely block torrents see... http://netconfigure.net/index.php/ru/forum/12-konfiguratsiya-setevogo-oborudovaniya/174-cisco-zbf-fpm-vs-mikrotik-firewall-kak-zablokirovat-p2p-torrent-torrents-trekery-dht-pex

Member Since	‎05-26-2011 06:48 AM
Date Last Visited	‎04-29-2019 09:59 PM
Posts	125

User Statistics

User Activity

QoS for Tunnel source loopback

ASR1006 - the 'service-policy output' on the tunnel interface isn't applied

Cisco 2851 NAT Load Balancing Problem (is solved!)

Cisco ZBF: How completely to block torrents (solved!)

There are ideas how to mark traffic incapsulated in RDP?

There is one best solution

If to apply policy on the

anybody will help?

Hi, no, in logs silence

for completely block torrents