As I know, they will work. But Cisco does not support such configuration as a stable, and says that it was tested for a 30 minutes long. You may find a procedure description in Upgrade Guide here http://www.cisco.com/en/US/partner/docs/switches/datacenter/hw/nexus7000/installation/guide/n7k_replacing.html#wp1382904 Ensure that you have proper NX-OS version. ... View more

What speed does your Tandberg negotiate in VC? Consider that LLQ (priority queue) is policed and all traffic that exceeds 1024 kbps is to be dropped. I'm not sure that IP SLA will help you here. Another thing to consider is an overall delay, jitter and drops in channel. Here you may use IP SLA, of course. ... View more

You need something like this (I did only basic configs) ip access-list extended HTTP      permit tcp any any eq 80 route-map PBR permit 10      match ip access-group name HTTP      set ip next-hop route-map PBR permit 20 interface      ip policy route-map PBR But if your proxy supports WCCP, probably, better way is to use this protocol instead of PBR. ... View more

It's a good chance to study something new OER is a rather complex technology and is not too fast. If you need a solution that reacts to changes in a few seconds, probably better to start from scripting. It is more simple. Don't dig into TCL scripting. This feature will allow you become a Router God but it will be a little later. Start from EEM applets. ... View more

Yes, I agree with Joseph - it is really unexpected. May be IOS update will help?.. ... View more

Routed ports are in fact untagged, so there you will not have any troubles, of course. Using STP here may be tricky also in some other cases. You need to consider that RPVST in fact is not RSTP in every VLAN. It is a special protocol that uses special L2 multicast addresses and that is compatible with RSTP. For spanning-tree to be built in any VLAN you need to properly send traffic in VLAN 1. I do not know, of course, how your crypto box works and will it send L2 MCast properly... ... View more

Good luck You need to consider that for example RSTP automatically assigns P2P type to any port that is in full duplex state. This means that in multipoint environment it will be confused... It doesn't matter how many VLANs will you allow in trunks. So you are to turn STP off at all. ... View more

It is much like a situation when you are connecting a number of switches to a hub using trunk ports. 802.1Q itself will work. Why not? But, of course, you need to consider a number of additional things: - CDP, probably, will start crowding - VTP may be also... - DTP will not work (and you are right - it must be off) - STP... probably you will get a nightmare with it - LACP/PAGP - I do not know, it depends... There exist a number of technologies that allow span VLANs through a tunnel (OTV for example). Your crypto box, I think, implements one of such technologies. ... View more

OER is for Optimized Edge Routing, PfR is for Perfomance Routing, which are different names of the same technology. It is targeted to control perfomance of a particular routes and change them without changng or resetting all routing. This may be done automatically through BGP attributes (Local Preference) manipulation. EEM is for Embeeded Event Manager. It is a scripting tool that allows for doing whatever you want (execute IOS command, send syslog or even e-mail, ...) in response to any event. Here your event might be tracking event triggered by IP SLA. You also may use more tricky tools but they, probably, would be a combination of IP SLA, conditional routing etc. You may find info about OER/PfR here: http://www.cisco.com/en/US/products/ps6628/products_ios_protocol_option_home.html and about EEM here: http://www.cisco.com/en/US/products/ps6815/products_ios_protocol_group_home.html ... View more

You should use config like this parameter-map type inspect TCP_PARAMS      one-minute high 100      one-minute low 10 class-map type inspect TCP      match ... policy-map type inspetc TCP_POLICY      class type inspect TCP           inspect tcp TCP_PARAMS and apply it to zone-pair. It will not work per host, but you may restrict an overall number of connections per minute for a group of hosts (configuring match statement in class-map). ... View more

Yes, probably this will solve your problem. But also look at Giuseppe's post. May be really it is better use EIGRP for default? ... View more

Yes, it's an idea. But David wanted to get two defaults on each of 65s - one from upstream ASR, another from second 65, which in turn got it from upstream. ... View more

Please, let me know why do not you simply put match ACL set ip next-hop in your route-maps (it is 20th permits in your current route-maps)? ... View more