hi all quick qos question, if I have with the command bandwidth, class A 30%, class B 30% and class C 20%, the default will have 20% right? the question is, the default class can take up to the 100% of the BW if the other classes are not using it? ... View more

Hi experts, I just received a document with this vulnerability: "SSH Server CBC Mode Ciphers Enabled" for many cisco switches. the description says: "The SSH server is configured to support Cipher Block Chaining (CBC) encryption. This may allow an attacker to recover the plaintext message from the ciphertext. Note that this plugin only checks for the options of the SSH server and does not check for vulnerable software versions" and the solution says: "Contact the vendor or consult product documentation to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption." How can I fix that? Please let me know if you need some information. ... View more

Hi experts, I just received a document with this vulnerability: "SSH Server CBC Mode Ciphers Enabled" for many cisco switches. the description says: "The SSH server is configured to support Cipher Block Chaining (CBC) encryption. This may allow an attacker to recover the plaintext message from the ciphertext. Note that this plugin only checks for the options of the SSH server and does not check for vulnerable software versions" and the solution says: "Contact the vendor or consult product documentation to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption." How can I fix that? Please let me know if you need some information. ... View more

Hi experts, I have a question, how can we perform a load sharing between BGP and IGP? Lets say that we have a WAN link connected to the MPLS with BGP in siteA, and in the same way we have siteB (we a MPLS link). Apart of that we have a Point2Point link between siteA and siteB with EIGRP for example. What if we want to perform a load sharing between both circuits? Currently the preferred link is the MPLS since AD of eBGP is 20 vs 90 of EIGRP. Thanks in advance. ... View more

  Hi experts, The question is if a L3 switch is able to receive a WAN link which is Ethernet, at the same way than a router?   ... View more

Hi all, I am having issues with one circuit, it has a lot of line and path code violations, slip secs, line errors, etc E1 0/0/1 is up.   Applique type is Channelized E1 - balanced   No alarms detected.   alarm-trigger is not set   Version info Firmware: 20100222, FPGA: 13, spm_count = 0   Framing is NO-CRC4, Line Code is HDB3, Clock Source is Line.   Data in current interval (187 seconds elapsed):      3 Line Code Violations, 82 Path Code Violations      7 Slip Secs, 0 Fr Loss Secs, 2 Line Err Secs, 0 Degraded Mins      9 Errored Secs, 0 Bursty Err Secs, 0 Severely Err Secs, 0 Unavail Secs   Total Data (last 22 15 minute intervals):      3780 Line Code Violations, 9605 Path Code Violations,      718 Slip Secs, 5 Fr Loss Secs, 279 Line Err Secs, 4 Degraded Mins,      981 Errored Secs, 0 Bursty Err Secs, 5 Severely Err Secs, 31 Unavail Secs The Carrier said tha they have all correclty configured, all the parameters are correct and that the problem is on our side. we have this configuration: card type e1 0 0 interface Serial0/0/1:0 description **** bandwidth 512 ip address 172.31.227.217 255.255.255.252 no ip redirects encapsulation ppp no cdp enable service-policy output AVPN Controller E1 0/0/1 framing NO-CRC4 channel-group 0 timeslots 1-8 Could you guys please help to understand what is happening? Thanks in advance ... View more