Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About reynaldolopeza
07-24-2019
Stats
Member since
09-28-2016
24
Posts
0
Helpful
1
Solution
Created by
reynaldolopeza
in Firewalls
in Firewalls
11-26-2018
07:40 AM
11-26-2018
07:40 AM
Hi mk,
Thanks for the reply.
Would the commands you shared in the last reply apply to my ASAs version? Or there is another way to configure IP sla monitoring in earlier versions like mine?
Regards,
Reynaldo Lopez
... View more
11-26-2018
07:18 AM
Hi all,
I need to configure redundant paths with static routing. I have two ASA Firewalls 5505 with ASA version 8.2(5). I want to know if these Firewalls ASA versions support IP Sla monitor configuration to have redundant routes, in my case the primary route will be in outside interface and the backup in the inside interface.
Is this configuration guide applicable for my Firewalls?
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html
Regards,
Reynaldo Lopez
... View more
Labels:
Created by
reynaldolopeza
in Switching
in Switching
10-11-2018
05:49 AM
10-11-2018
05:49 AM
Hi,
Both switches have IP Base license. Can they support IP SLA monitor with static routes? Or what alternative do I have to accomplish the Backup route to Internet in the Catalyst Switches?
... View more
Created by
reynaldolopeza
in Switching
in Switching
10-10-2018
03:00 PM
10-10-2018
03:00 PM
Hi Georg,
I checked the IOS version:
- Switch 3560 IOS Version 12.2(50)SE5
- Switch 3650 IOS-XE Version 3.6.0E
What would be the minimum versions to support IP SLA?
Reynaldo
... View more
Created by
reynaldolopeza
in Switching
in Switching
10-10-2018
01:46 PM
10-10-2018
01:46 PM
Hi everyone, I have the following question:
We have Two Switches configured in HSRP (one 3650 and one 3560). The next hope towards Internet will be Two Firewalls ASA in failover, and there is another path from the Switches to other Firewall that is connected by fiber to a branch site that has Internet connection too. I attached the topology.
What we want to do, is to configure the Switches to redirect traffic destined to the Internet to the Firewall of the branch office if the ISP of the Central Office fails. We have configured Static routes all over our network. I used once Ip sla monitor to configure backup routes in Firewalls ASA, but I am not sure if it is possible in the Switches Catalyst for this case.
Please your help with this issue.
... View more
Labels:
Created by
reynaldolopeza
in Web Security
in Web Security
10-04-2018
09:32 AM
10-04-2018
09:32 AM
Hi Ken, thanks for your quick response.
I may have misunderstood the concepts of SSO and transparent authentication. So, what you say is that I don't have to configure browsers for SSO if I use CDA, but I do need to configure browsers to authenticate users to the WSA transparently? Please, give me more detail about these affirmations.
... View more
Created by
reynaldolopeza
in Web Security
in Web Security
10-04-2018
08:39 AM
10-04-2018
08:39 AM
Hi I have the next question.
We have implemented Two WSAs in HA and WCCP transparent mode and configured the rules with IP addresses, now we want to filter rules using AD users, and groups. I've read that in order to authenticate users transparently and without any prompts in the explorers we need to use TUI and a CDA agent.
I want to know if we need to configure every users' browser manually in order to have SSO and no prompts for users, if that it's true it would mean a huge workload for us.
And in this case, what Authentication scheme (Kerberos, NTLMSSP) is the recommended for HTTP and HTTPS traffic?
Please your help with this issue.
... View more
Labels:
Created by
reynaldolopeza
in Other Data Center Subjects
in Other Data Center Subjects
03-28-2018
09:11 AM
03-28-2018
09:11 AM
Hi Wes,
Thanks for your quick answer.
I couldn't find a similar QSFP that helps me breakout QSFP to 4 10G-SR and conect to a patch panel. If you know a QSFP module that would work in mi case I would really appreciate you letting me know.
Kind Regards,
Reynaldo Lopez
... View more
Created by
reynaldolopeza
in Other Data Center Subjects
in Other Data Center Subjects
03-28-2018
08:08 AM
03-28-2018
08:08 AM
We have a Switch N9K-C93108TC-EX and we want to have 10G fiber connections to a few servers, through a patch panel similar to the attached image. I found out that QSFPs can be break out to 10G, and we are choosing the QSFP-4X10G-LR-S module, but in the servers side we already have SFP-10G-SR modules.
I could not find compatibility information about those. One is LR and the other one SR, but there will any problems? The connection will be just for Ethernet (No FCoE needed) and in a distance <100m.
Thanks in advanced.
... View more
Labels:
Created by
reynaldolopeza
in VPN and AnyConnect
in VPN and AnyConnect
12-21-2017
07:42 AM
12-21-2017
07:42 AM
I resolve the issue. Testing the HA shutting down the MPLS link, the IPsec tunnel automatically turns on. And when the MPLS link is back, the traffic retake the EIGRP route configured. For the traffic to use the Ipsec tunnel we just configured a default static route (the same one that allows my users to go out to the internet).
It was a routing issue.
Regards.
... View more
Created by
reynaldolopeza
in Web Security
in Web Security
12-21-2017
07:31 AM
12-21-2017
07:31 AM
Hi community! Please your help with this issue.
We have WSA deployed in transparent mode for a few months, and MacOS users are complaining about very slow HTTPS browsing, and in some cases a time_out error message is shown. It only happens for HTTPS browsing for MacOS users, Windows users have no problems.
Any clue on how to solve this issue?
... View more
Labels:
Created by
reynaldolopeza
in VPN and AnyConnect
in VPN and AnyConnect
11-22-2017
06:43 AM
11-22-2017
06:43 AM
Hi everyone, please your help with this issue.
We have access to branch offices through a Service Provider MPLS network. We have configured EIGRP over GRE tunnels for routing to Branch offices. Now we need to configure a VPN Ipsec as a backup route. I am aware that Ipsec only supports unicast traffic and static routes (no EIGRP allowed there).
How can I configure my routes in order to keep the EIGRP through the WAN network as the primary route and the new VPN Ipsec as the backup? We need high availability there.
Is there a way to configure EIGRP through Ipsec so I can configure delay and bandwith to change metrics and get my HA?
It's worth to mention that at HQ I have a Firewall ASA for Internet access and VPN configuration, and a router 4331 to connect to the WAN (no security license), and in my branch offices I have 4321 routers with Security license ready for VPN Ipsec configuration. I am attaching the network diagram. Thanks in advanced.
... View more
Labels:
Created by
reynaldolopeza
in Switching
in Switching
09-25-2017
03:17 PM
09-25-2017
03:17 PM
Hi Leo, Let me see if I understood correctly. This Limited Lifetime Hardware Warranty that covers this Switch, let us get the replacement of the Switch without having a valid smarnet contract? Or we need to purchase the smarnet for the switch again, and then we have the rights of the Limited Lifetime Hardware Warranty that you mentioned?
... View more
Created by
reynaldolopeza
in Switching
in Switching
09-25-2017
12:27 PM
09-25-2017
12:27 PM
Hi everyone, I have this Switch Catalyst 2960-S that stopped working, I don't have console response. Leds SYST and STAT are solid green, and port Leds are blinking as trafficking but don't have any data traffic. I did some research and I found that It may be a memory issue, as these links describe. https://www.cisco.com/c/en/us/support/docs/field-notices/637/fn63744.html https://www.cisco.com/c/en/us/about/supplier-sustainability/memory.html#~overview I cannot open a TAC case, because the Smartnet of the Switch has expired years ago. Should I buy Smartnet again? Or what other option do I have now?
... View more
Labels:
Created by
reynaldolopeza
in Security Management
in Security Management
09-05-2017
05:52 AM
09-05-2017
05:52 AM
Thanks Marvin, Your answer was very accurate. Reynaldo
... View more
07-21-2019
Hi everyone,We've been struggling in this situation for a few days.We
have the following scenario fo...
11-26-2018
Hi mk, Thanks for the reply. Would the commands you shared in the last
reply apply to my ASAs versio...
11-26-2018
Hi all, I need to configure redundant paths with static routing. I have
two ASA Firewalls 5505 with ...
Created by
reynaldolopeza
in Switching
10-11-2018
10-11-2018
Hi, Both switches have IP Base license. Can they support IP SLA monitor
with static routes? Or what ...
Created by
reynaldolopeza
in Switching
10-10-2018
10-10-2018
Hi Georg, I checked the IOS version: - Switch 3560 IOS Version
12.2(50)SE5 - Switch 3650 IOS-XE Vers...
Created by
reynaldolopeza
in Switching
10-10-2018
10-10-2018
Hi everyone, I have the following question: We have Two Switches
configured in HSRP (one 3650 and on...
10-04-2018
Hi Ken, thanks for your quick response. I may have misunderstood the
concepts of SSO and transparent...
10-04-2018
Hi I have the next question. We have implemented Two WSAs in HA and WCCP
transparent mode and config...
Created by
reynaldolopeza
in Other Data Center Subjects
03-28-2018
03-28-2018
Hi Wes, Thanks for your quick answer. I couldn't find a similar QSFP
that helps me breakout QSFP to ...
Created by
reynaldolopeza
in Other Data Center Subjects
03-28-2018
03-28-2018
We have a Switch N9K-C93108TC-EX and we want to have 10G fiber
connections to a few servers, through...
12-21-2017
I resolve the issue. Testing the HA shutting down the MPLS link, the
IPsec tunnel automatically turn...
Created by
reynaldolopeza
in Web Security
12-21-2017
12-21-2017
Hi community! Please your help with this issue. We have WSA deployed in
transparent mode for a few m...
11-22-2017
Hi everyone, please your help with this issue. We have access to branch
offices through a Service Pr...
Created by
reynaldolopeza
in Switching
09-25-2017
09-25-2017
Hi Leo, Let me see if I understood correctly.This Limited Lifetime
Hardware Warranty that covers thi...
Created by
reynaldolopeza
in Switching
09-25-2017
09-25-2017
Hi everyone, I have this Switch Catalyst 2960-S that stopped working, I
don't have console response....
Public Statistics
| Date Registered | 09-28-2016 09:05 PM |
| Date Last Visited | 07-24-2019 02:49 AM |
| Total Messages Posted | 24 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 10 | |
| 5 | |
| 1 | |
| 4 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
