Hi,    I am configuring EVPN VPWS Preferred Path over SR-TE Policy on NCS 5501 routers, but after I commit config the l2vpn xconnect group did not shows neighbor IP address and state was down.    RP/0/RP0/CPU0:Leaf-A#sh l2vpn xconnect Thu Jan 10 13:40:34.596 UTC Legend: ST = State, UP = Up, DN = Down, AD = Admin Down, UR = Unresolved, SB = Standby, SR = Standby Ready, (PP) = Partially Programmed XConnect Segment 1 Segment 2 Group Name ST Description ST Description ST ------------------------ ----------------------------- ----------------------------- DeviceA-to-DeviceB 20922009-A DN Gi0/0/0/2.2 UP EVPN 1001,2,0.0.0.0 DN ---------------------------------------------------------------------------------------- RP/0/RP0/CPU0:Leaf-A# RP/0/RP0/CPU0:Leaf-A#sh segment-routing traffic-eng policy summary Thu Jan 10 13:40:10.966 UTC XTC policy database summary: ---------------------------- IPv4 source address: 10.3.3.3 Total configured policies: 2 Operational: up 2 down 0 RP/0/RP0/CPU0:Leaf-A#   Topology: Leaf-A ---> Core-A ---> Leaf-B Leaf-A ---> Core-B ---> Leaf-B   ... View more

I have some doubts regarding Service policy in ASA....   On ASA 5515, I have configured service policy rule with traffic match criteria as source and destination IP Address (Uses ACL) which allow http traffic from Host-A (Connected with OUTSIDE Interface) to Host-B (Connected with DMZ Interface). Is this above service policy rule enough to allow http traffic from Host-A (Outside Network) to Host-A (DMZ Network)  ? or I need to configure separate access-list rule which permit http traffic from outside network to dmz network...   Thanks in advance....   ... View more

In Cisco Web Security Virtual Appliance S100V Version 9.2.0(GD), sometimes when i try to write Custom EUN File "ERR_DNS_FAIL" on configuration/eun/en Directory through FTP protocol, I get the error message "553 could not open file for writing: 13" error....  But I able to write files on /configuration directory also configuration/eun/ directory....  After did some search and assume this has to do with permissions. But I am using admin user to access WSAv FTP Server...   Anyone, fix this  issue....     Thanks in advance....     ... View more

Hi,     what is the advantage of firepower2100 over asa 5500-X? what is the main difference between cisco security appliances such as firepower  4100,9300,2100,asa 5500-X?   Thanks in advance..... ... View more

I know in IOS XRv L2VPN only supports control plane but not the data plane. I just want to get clarification, why l2vpn not supported on IOS XRv and why the relase note of IOS XRv 6.2.25 does not gave any information about L2VPN (https://www.cisco.com/c/en/us/td/docs/routers/virtual-routers/xrv9k-62x/general/release/notes/b-release-notes-xrv9000-6225.html). Is their any possibility that future IOS XRv release supports L2VPN? Thanks in advance... ... View more

Hi, I want to build an point- to – point local E-line carrier Ethernet services between IOS XRv routers using the link bundles. Once the two local EFPs linked with a point-to-point cross connect, the state of the cross-connect becomes up. But still the ping between CEs failed. what could be the problem? Below are the output details of IOS XRv router confgiuration, PE1: RP/0/RP0/CPU0:PE1#sh run | begin xconnect Tue Jan 16 18:26:15.215 UTC Building configuration... xconnect group test p2p test1 interface Bundle-Ether100 interface Bundle-Ether101 ! ! ! RP/0/RP0/CPU0:PE1#sh run int bundle-ether 100 Tue Jan 16 18:28:23.989 UTC interface Bundle-Ether100 l2transport ! ! RP/0/RP0/CPU0:PE1#sh run int bundle-ether 101 Tue Jan 16 18:28:27.894 UTC interface Bundle-Ether101 l2transport ! ! CE1: interface Bundle-Ether100 ipv4 address 10.10.10.1 255.255.255.0 ! interface GigabitEthernet0/0/0/3 bundle id 100 mode on ! interface GigabitEthernet0/0/0/4 bundle id 100 mode on CE2: interface Bundle-Ether101 ipv4 address 10.10.10.2 255.255.255.0 ! interface GigabitEthernet0/0/0/5 bundle id 101 mode on ! interface GigabitEthernet0/0/0/6 bundle id 101 mode on ! ... View more