Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello everybody!I am experiencing an unusual behavior in our network. Unfortunetely I have no idea what could cause this problem. We are using Dyamic ARP Inspection on most of our VLANs. Since 7 days there are several clients (on different sites) whi...
Hi community, I am a little bit confused about configuring HSRP on two sites (two different buildings). We have two core switches placed in two different buildings, which are connected through a layer 2 MPLS connection.We have to realize a scenario,...
Hi there!We are facing some issues when trying to implement 802.1X on our Cisco IP phones.The authentication of the phone is successful, an authentication session is created on the switch, everything seems fine.Unfortunetaly the phone isn't able to r...
Hi community, I am facing some problems understanding some aspects of ACLs. Question 1Our infrastructure is routed via SVIs on a layer 3 switch. I have already configured an ACL to prevent users from using telnet & ssh. Extended IP access list DENY_T...
Hi there, I am facing some problems when implementing 802.1X in my environment (Catalyst 2960x). 802.1X is working fine so far and the config should be right. But sometimes, the switch is trying to authenticate the Cisco Phone and not the windows cli...
@balaji.bandi the problem appears on different models. Our most used devices are C2960X running on 15.2.(7)E4.But e.g. also on an old Catalyst 4506-E. I could try to capture the ARP packets, but it will be a little bit tricky since this doesnt occur ...
@Rob Ingram no, I haven't. I have read about this, but thought this was only needed when using the multi domain mode.Unfortunately we are not using ISE as radius server, so I'm not sure how to configure the RADIUS to include the string, but I will do...
@Rickey526 Which issue do you mean exactly? The ACLs are working the way they should be ... I am just having a hard time understanding the reason for placing the ACL outbound in the server-vlan.
@Rob Ingram That doesn't solve the problem, because I want to authenticate the phone via MAB and the PC via 802.1X.When configuing authentication host-mode multi-domain, the phone is also authenticated via 802.1X. I tried to configure the following n...