Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About sansari
08-18-2017
sansari
Beginner
UUNET
MCI / World Com
Nextel Sprint
SAIC
Recent Badges
Stats
Member since
11-14-2002
57
Posts
0
Helpful
0
Solutions
10-04-2011
07:21 AM
This link does not seem to work any longer. Would anyone kow how to find the content?
... View more
09-30-2011
10:55 AM
Greetings I am trying to do mac filtering on 3750, and here is the config I have... ! mac access-list extended ARP_Packet permit host mac1 any 0x806 0x0 permit host mac2 any 0x806 0x0 permit host mac3 any 0x806 0x0 permit any mac1 0x806 0x0 permit any mac2 0x806 0x0 permit any mac3 0x806 0x0 spanning-tree mode pvst spanning-tree extend system-id ! ! vlan access-map block_arp 10 match mac address ARP_Packet action forward vlan access-map block_arp 20 action drop ! When I apply the command vlan filter block_arp vlan-list all, I lose connectivity to the hosts that are supposed to have connectivity and I have put in my access-list. My goal is to only allow the hosts that I previously know the MAC address for. What seems to be the problem with my config?
... View more
Labels:
09-30-2011
07:57 AM
Greetings- The issue was the native vlan. Thanks to a knowledgeable CCIE friend. Appreciate the feedback from this group also.
... View more
09-30-2011
07:22 AM
Here is what I have in the ASA now.. interface Ethernet0/1 switchport trunk native vlan 11 switchport mode trunk ciscoasa(config-if)# show run interface vlan ciscoasa(config-if)# show run interface vlan 11 ! interface Vlan11 nameif inside security-level 100 ip address 10.1.1.254 255.255.255.0 ciscoasa(config-if)# show int eth ciscoasa(config-if)# show int ethernet 0/1 Interface Ethernet0/1 "", is up, line protocol is up Hardware is 88E6095, BW 100 Mbps Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps) Available but not configured via nameif MAC address 0027.0d35.ad55, MTU not set IP address unassigned 2559469 packets input, 1245515455 bytes, 0 no buffer Received 32039 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 L2 decode drops 21474852760 switch ingress policy drops 2057559 packets output, 796341243 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier 0 rate limit drops 0 switch egress policy drops ciscoasa(config-if)# show int vlan11 Interface Vlan11 "inside", is up, line protocol is up Hardware is EtherSVI MAC address 0027.0d35.ad5c, MTU 1500 IP address 10.1.1.254, subnet mask 255.255.255.0 Traffic Statistics for "inside": 2215503 packets input, 1173507560 bytes 2054385 packets output, 755628198 bytes 38388 packets dropped 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 2 pkts/sec, 224 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 4 pkts/sec, 3390 bytes/sec 5 minute output rate 3 pkts/sec, 642 bytes/sec 5 minute drop rate, 0 pkts/sec Here is what I have in the switch... Current configuration : 99 bytes ! interface GigabitEthernet2/0/1 switchport trunk encapsulation dot1q switchport mode trunk end ! interface Vlan11 no ip address end ! Switch(config-if)#do show int GigabitEthernet2/0/1 GigabitEthernet2/0/1 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is ec30.91dd.e981 (bia ec30.91dd.e981) MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 9 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 1000 bits/sec, 1 packets/sec 5 minute output rate 1000 bits/sec, 2 packets/sec 693818 packets input, 207178762 bytes, 0 no buffer Received 3018 broadcasts (1114 multicasts) 449 runts, 0 giants, 0 throttles 449 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 1114 multicast, 0 pause input 0 input packets with dribble condition detected 1270324 packets output, 770436396 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out Switch(config-if)#do show int vln Switch(config-if)#do show int vlan Switch(config-if)#do show int vlan11 Vlan11 is up, line protocol is up Hardware is EtherSVI, address is ec30.91dd.e9c2 (bia ec30.91dd.e9c2) MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive not supported ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:02:57, output 00:17:32, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 2846 packets input, 193668 bytes, 0 no buffer Received 0 broadcasts (0 IP multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 67 packets output, 4288 bytes, 0 underruns 0 output errors, 4 interface resets 0 unknown protocol drops 0 output buffer failures, 0 output buffers swapped out Switch(config-if)# But I still can not ping the vlan 11 ip address on the ASA from the switch, and I am not able to ping the server that is directly connected to the switch
... View more
09-29-2011
01:39 PM
Greetings I am trying to configure a trunk between the above two devices. I like to have vlan11 on ASA. Then I like to connect a host to my switch, and have it communicate with other devices in VLAN 11 or other vlans that reside on the ASA. Below is the config that I currently have. Would you please advise what I am missing? ASA: ciscoasa# show run interface Ethernet0/1 ! interface Ethernet0/1 switchport access vlan 11 switchport trunk allowed vlan 10,12,101-103 switchport mode trunk ciscoasa# show int vlan 11 Interface Vlan11 "inside", is down, line protocol is down Hardware is EtherSVI MAC address 0027.0d35.ad5c, MTU 1500 IP address 10.1.1.254, subnet mask 255.255.255.0 Traffic Statistics for "inside": 2214171 packets input, 1172490074 bytes 2051690 packets output, 755288140 bytes 38384 packets dropped 1 minute input rate 0 pkts/sec, 0 bytes/sec 1 minute output rate 0 pkts/sec, 0 bytes/sec 1 minute drop rate, 0 pkts/sec 5 minute input rate 0 pkts/sec, 0 bytes/sec 5 minute output rate 0 pkts/sec, 0 bytes/sec 5 minute drop rate, 0 pkts/sec ciscoasa# show run int vlan 11 ! interface Vlan11 nameif inside security-level 100 ip address 10.1.1.254 255.255.255.0 ! On the 3750 I have: interface GigabitEthernet2/0/1 switchport trunk encapsulation dot1q end As you can see vlan11 on the 5505 is down.
... View more
Labels:
08-31-2011
12:34 PM
I want to bundle two interfaces together. I configured Etherchannel on ASA. User the following procedure to configure it on VMware: http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1001938 My interface does not come up. Is this the only way to bundle two interfaces as one and directly connect it to a VMware server? Here is my show int and configuration: Interface Port-channel47 "CAG-side", is down, line protocol is down Hardware is EtherChannel/LACP, BW 1000 Mbps, DLY 10 usec Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps) Input flow control is unsupported, output flow control is off MAC address e8b7.48fd.6c1a, MTU 1500 IP address 10.131.2.254, subnet mask 255.255.255.0 Members in this channel: Inactive: Et0/0 Et0/1 Interface Port-channel47.101 "", is down, line protocol is down Hardware is EtherChannel/LACP, BW 1000 Mbps, DLY 10 usec VLAN identifier 101 Available but not configured via nameif Interface Port-channel47.102 "", is down, line protocol is down Hardware is EtherChannel/LACP, BW 1000 Mbps, DLY 10 usec VLAN identifier 102 Available but not configured via nameif interface Port-channel47 nameif ... security-level 0 ip address 192.168.1.1 255.255.255.0 ! interface Port-channel47.101 vlan 101 no nameif security-level 0 ip address 192.168.2.1 255.255.255.0 ! interface Port-channel47.102 vlan 102 no nameif security-level 0 ip address 192.168.3.1 255.255.255.0 ! I checked the support page, and did not find any sample configurations. Can anyone provide a sample?
... View more
Labels:
08-25-2011
03:16 AM
I checked on the JAVA version. I am using version 6. I did notice that I get a different error message when I try to connect to the firewall's inside interface with ASDM vs. the management interface. I prefer the management interface.
... View more
08-25-2011
03:15 AM
I did not have the 2nd command you mentioned. I added it, but my issue was something else. I just figured it out. I am behind a proxy server. Once I added the ip address of the http proxy to the http access list with the http command, I am able to log in. Thanks for your responses.
... View more
08-24-2011
11:45 AM
I have not worked with ASDM in a while. I have a 5510, with asdm-645.bin in the flash. The device runs version 8.4(2). I can download ASDM from the http interface of the firewall from the management interface. But I can not log in. I have used blank username and password, no username and enable password, blank username with enable password and a few other permutations:-). I then tried to connect to the asdm interface from inside also. But I can not connect. Needless to say, I have enabled http, and updated the http access-list. The only logging I have enabled is buffered. Is there any configuration that I am missing? Shall I cut and past the config? Everything is ok on my pc, as I can use the same asdm client to connect to a 5505. Please help.
... View more
Labels:
Created by
sansari
in VPN and AnyConnect
in VPN and AnyConnect
08-10-2011
10:59 AM
08-10-2011
10:59 AM
Do I need radius service for user authentication, or does it work with AD also? I am looking at the procedures here: http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807213a7.shtml which mentione radius.
... View more
Labels:
05-31-2011
10:07 AM
Greetings I am curious about the same thing. Can I speciffy permited or denied mac address in ASA if I have implemented it in transparent mode?
... View more
Created by
sansari
in Unified Computing System Discussions
in Unified Computing System Discussions
05-17-2011
07:24 AM
05-17-2011
07:24 AM
Thanks for the reply. Would you have another look at what I just posted? I appreciate the feedback. My greater interest is in comparing solutions.
... View more
Created by
sansari
in Unified Computing System Discussions
in Unified Computing System Discussions
05-17-2011
07:23 AM
05-17-2011
07:23 AM
Thanks for the reply. It was very helpful. I should have asked my question differently though as my greater interest is in comparing UCS solution with other private cloud solutions such as CloudBurst, Dell VIS, Oracle Exadata or Exalogic ( I am still learning the names ), and I believe Brocade has a solution also. Question 2: Do you think Cisco will support other vendor devices in future release of UCS? I would be curious to know if Vendor Lock-in has been a concern for potential clients. How can this be justified to a potential client? I think Cisco has priced UCS to offset any value of leveraging existing equipment. Am I correct? Any supporting documents you could share with me would be greatly appreciated.
... View more
05-11-2011
12:15 PM
Looking for some information on UCS vs. other solutions. I am looking at IBM System Director and it seems that I can manage some storage devices through its support of Storage Management Initiative. And I wonder if the same functionality exists in the UCS solution. I am new to UCS, and appreicate your advice.
... View more
Labels:
09-30-2011
GreetingsI am trying to do mac filtering on 3750, and here is the config
I have...!mac access-list e...
09-30-2011
Here is what I have in the ASA now..interface Ethernet0/1 switchport
trunk native vlan 11 switchport...
09-29-2011
GreetingsI am trying to configure a trunk between the above two devices.
I like to have vlan11 on AS...
08-31-2011
I want to bundle two interfaces together. I configured Etherchannel on
ASA. User the following proce...
08-25-2011
I checked on the JAVA version. I am using version 6. I did notice that I
get a different error messa...
08-25-2011
I did not have the 2nd command you mentioned. I added it, but my issue
was something else. I just fi...
08-24-2011
I have not worked with ASDM in a while. I have a 5510, with asdm-645.bin
in the flash. The device ru...
Created by
sansari
in VPN and AnyConnect
08-10-2011
08-10-2011
Do I need radius service for user authentication, or does it work with
AD also? I am looking at the ...
05-31-2011
Greetings I am curious about the same thing. Can I speciffy permited or
denied mac address in ASA if...
05-17-2011
Thanks for the reply. Would you have another look at what I just posted?
I appreciate the feedback. ...
05-17-2011
/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table
Normal"; mso-tstyle-rowband-size...
Public Statistics
| Date Registered | 11-14-2002 01:51 PM |
| Date Last Visited | 08-18-2017 03:54 AM |
| Total Messages Posted | 57 |
