Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello all, I am trying to define FTD1150 using Firepower Device Manager and I want to permit deivces on any of my subnets with the same 4th octet at the host-portion of the address, so for example matching any from 10.1.1.250/24, 10.1.2.250/24, 10.1....
Hoping there's someone can help with a problem I have with packet classification for IPSLA traffic on C9500-24Y4C running version 17.6.4 where the egress QoS policy on Cat9500 running the IPSLA probe is not queuing these locally generated packets int...
Unfortunately I am not looking to match all hosts from all subnets, I only want the host with 4th octet=250 from all subnets and hence defining the network object with a /24 won't work and the host-object does not allow a mask to be configured.
Thanks, I'll take a look at the doc.
Yep, I realize that Cat9K and ISR4K have different queuing mechanisms. What I was trying to highlight by moving the IPSLA-Client onto the ISR4K is to show that the same IPSLA packet appears to be queued differ...
When you say that "the switches flood the network with these messages", do you mean that the source-mac address of these frames is from the switches, or just that the switches are forwarding these frames which are sourced from other devices connected...
I doubt it unless something has changed very recently (I used to test BNG scale with many thousands of sessions in my lab only last year and I was not using any BB-licences in there), post your config here and I'll see if I can spot anything in ther...
I have not looked at the licensing guide for ASR1K for a while now, but the BNG license remained a trust-based license and was not checked as part of the smart-licensing functions. There is no actual "BNG feature" as such because getting BNG working...
