Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Aliaksandr Tratseuski
08-07-2019
Stats
Member since
09-29-2011
56
Posts
0
Helpful
0
Solutions
Created by
Aliaksandr Tratseuski
in Server Networking
in Server Networking
08-06-2019
06:33 AM
08-06-2019
06:33 AM
You didn't provided the config. If ASR is in sync with NTP server (somehow, GRT or some VRF), it can serve as an NTP source for clients: ntp
! configure the box to act as a server for downstream clients ! you can use any stratum lower than the box
master 8
! configure source interface for reply packets
source vrf <vrf_name> <interface>
... View more
Created by
Aliaksandr Tratseuski
in DevNet Sandbox
in DevNet Sandbox
06-05-2019
06:41 AM
06-05-2019
06:41 AM
Can't connect to the sandbox using the provided credentials: "Login failed". User/pass are copy-pasted. Any other instructions I've missed?
... View more
Created by
Aliaksandr Tratseuski
in Application Networking
in Application Networking
01-03-2017
01:17 AM
01-03-2017
01:17 AM
Hi folks,
We're using Nexus 3000 high-speed traffic filtering for analysis. There are a couple of input ports (inbound traffic - only one fiber in a single port) and a single output.
It was noticed that the switch complains on MAC bouncing between the input ports. Here is the example:
%FWM-2-STM_LOOP_DETECT: Loops detected in the network for mac aaaa.bbbb.cccc among ports Eth1/5 and Eth1/3 on vlan X - Disabling dynamic learning notifications for a period between 120 and 240 seconds on vlan X.
But for our application it is a normal situation - load-balanced links are monitored. Could this message just be turned off? I suppose it consumes lots of CPU resources because it appears for each monitored VLAN.
... View more
Labels:
05-06-2016
06:30 AM
Guys,
thanks for your replies.
Actually it apeared the only solution for this case. Since every VLAN is by definition a separate ip subnet, then in the provided ACL I should permit traffic from this subnet ( not permit any , but, e.g.
permit udp 192.168.1.0 0.0.0.255 eq 5060 any
and so on). Then everithing works as expected.
The rest of provided config is fine.
... View more
04-25-2016
10:34 PM
Hi Mohammed,
I can't share another parts of the config right now. Anyway I suppose that there is no use of it. I'll try to clarify the initial question:
We have a trunk switchport with configured service-policy input command (as shown above). How can I configure another service-policy which will work on a single vlan from that trunk ?
... View more
Created by
Aliaksandr Tratseuski
in IP Telephony and Phones
in IP Telephony and Phones
04-22-2016
03:05 AM
04-22-2016
03:05 AM
Folks, are there some ideas regarding this issue?
... View more
Created by
Aliaksandr Tratseuski
in IP Telephony and Phones
in IP Telephony and Phones
03-21-2016
10:55 PM
03-21-2016
10:55 PM
Here is the config for this policy:
ip access-list extended mark-SIP permit udp any eq 5060 any permit udp any any eq 5060 class-map match-all mark-SIP match access-group name mark-SIP policy-map mark-SIP class mark-SIP set dscp cs3
... View more
Created by
Aliaksandr Tratseuski
in IP Telephony and Phones
in IP Telephony and Phones
03-21-2016
12:26 AM
03-21-2016
12:26 AM
Hi,
I have a 7600 Series router with a trunk switchport on it. The trunk port has a bunch of vlans allowed and a service-policy on it. Here is the config:
interface GigabitEthernet1/1 description -- Voice -- switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 100-200,500 switchport mode trunk switchport nonegotiate load-interval 30 speed 1000 duplex full no wrr-queue random-detect 2 no wrr-queue random-detect 3 wrr-queue cos-map 3 1 4 wrr-queue cos-map 3 2 6 7 priority-queue cos-map 1 3 5 storm-control broadcast level 10.00 storm-control multicast level 10.00 no cdp enable service-policy input mark-SIP end
I added a new vlan 500 interface and need to mark inbound SIP and RTP traffic on it. The config is below:
interface Vlan500 description -- TEST -- ip vrf forwarding TEST_VRF ip address 192.168.1.1 255.255.255.0 service-policy input mark-SIP-and-RTP end
The problem is that on the other end of the link I see only SIP marked packets but not RTP . It seems that service-policy on Vlan interface does not work properly.
Could there be some conflict between service-policy on the physical interface and the "child" policy on Vlan interface? Is there any dependence between them? Could you advise any materials to read to solve this question?
Thanks!
... View more
Labels:
Created by
Aliaksandr Tratseuski
in Networking Documents
in Networking Documents
12-22-2015
10:35 PM
12-22-2015
10:35 PM
Debug must be disabled after the reboot but... have you tried this one?
Router# undebug all
... View more
10-07-2015
05:43 AM
10-05-2015
04:21 AM
As I've told in the beginning, the aim is to realize FTP server in passive mode. Accord ing to the picture below I nee d to open port 21 (in case of no ACL there is just a single static NAT translation) and perform NAT from the server from any high port: I have an ACL, which selects traffic for being translated: ip access-list extended NAT_SELECTOR permit ip object-group GRP_DMZ_HOSTS_ALL any deny ip any any where: object-group network GRP_DMZ_HOSTS_ALL description #all hosts in DMZ# host 192.168.1.2 As you can see from the diagram, there is a need to find out which data port will the server use in every single connection. So there is a need in some inspection (IMHO), am I right? If yes, how to implement it?
... View more
Created by
Aliaksandr Tratseuski
in Routing
in Routing
10-02-2015
07:47 AM
10-02-2015
07:47 AM
Hi, the problem is to make an FTP server in an internal network to be available from the outside (see picture below). Router (ISR 2921 G2) is configured with NAT. There is a static translation mapping: ip nat inside source static tcp 192.168.1.2 21 1.1.1.1 21 extendable But connection from the outside could not be established: users get a timeout message. I've examined these forums and found some similar topics, but the suggested solutions did not work for me. I believe that it's not enough just to make a static translation and there is a need of traffic inspection, but I'm not sure how to configure it. Let's assume there are no any ACL on both interfaces. What should be configured to allow external access to FTP (passive mode)? Thanks beforehand!
... View more
- Tags:
- #isr #nat #ftp
Labels:
07-07-2015
10:34 PM
Jon, thanks for your help. Everything works fine now. I added a route-map for static nat configuration for the service in question. It excludes outbound server traffic to branch from NAT process. -- Best regards, Aliaksandr
... View more
Created by
Aliaksandr Tratseuski
in Server Networking
08-06-2019
08-06-2019
You didn't provided the config.If ASR is in sync with NTP server
(somehow, GRT or some VRF), it can ...
Created by
Aliaksandr Tratseuski
in DevNet Sandbox
06-05-2019
06-05-2019
Can't connect to the sandbox using the provided credentials: "Login
failed". User/pass are copy-past...
Created by
Aliaksandr Tratseuski
in Application Networking
01-03-2017
01-03-2017
Hi folks, We're using Nexus 3000 high-speed traffic filtering for
analysis. There are a couple of in...
05-06-2016
Guys, thanks for your replies. Actually it apeared the only solution for
this case. Since every VLAN...
04-25-2016
Hi Mohammed, I can't share another parts of the config right now. Anyway
I suppose that there is no ...
03-21-2016
Here is the config for this policy: ip access-list extended mark-SIP
permit udp any eq 5060 any perm...
03-21-2016
Hi, I have a 7600 Series router with a trunk switchport on it. The trunk
port has a bunch of vlans a...
12-22-2015
Debug must be disabled after the reboot but... have you tried this one?
Router# undebug all
10-05-2015
As I've told in the beginning, the aim is to realize FTP server in
passive mode.According to the pic...
10-02-2015
Hi,the problem is to make an FTP server in an internal network to be
available from the outside (see...
Public Statistics
| Date Registered | 09-29-2011 04:07 AM |
| Date Last Visited | 08-07-2019 12:17 AM |
| Total Messages Posted | 56 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 10 | |
| 11 | |
| 2 | |
| 4 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
