About pehi030670

pehi030670 · 04-28-2019

Hello all, I need to propose a design to a customer that is demanding segregation of LAN traffic into compartments that contain several VLANs that are then policed by a firewall before traffic is permitted to enter/leave that compartment. VRFs seem t...

pehi030670 · 08-17-2017

Hi, I'm trying to design a DMZ and security architecture that will incorporate a distributed deployment of ISE. Assuming that each network segment will have a PSN deployed locally within it, is there any way to configure an individual PSN to consul...

pehi030670 · 12-21-2009

Hello all, I have configured an RSPAN monitoring session on a 2950 switch. I have configured a remote-span VLAN from the VTP server switch, and checked on my monitoring source switch (VTP client in the domain) that the VLAN shows up as a remote-span ...

pehi030670 · 12-18-2009

Hello all,I have configured an RSPAN monitoring session on a 2950 switch. I have configured a remote-span VLAN from the VTP server switch, and checked on my monitoring source switch (VTP client in the domain) that the VLAN shows up as a remote-span V...

pehi030670 · 08-25-2017

That's good to know - thanks

pehi030670 · 08-25-2017

Thanks - As per the correct answer, location awareness via AD should give a predictable pattern to build an ACL on. For info's sake - the Microsoft registry hacks to turn a Windows server into an NTP server have worked pretty well for me.

pehi030670 · 12-23-2009

OK, buried in one of the 2950 IOS release notes:RSPAN LimitationIn a Remote Switched Port Analyzer (RSPAN) session, if at least one Catalyst 2950 switch is used as anintermediate or destination switchand if traffic for a port is monitored in both dir...

pehi030670 · 12-22-2009

Many thanks for replying Giuseppe - I have tried on 2950's running EI.What is of note, is that if I configure a new trunk, while runnign a constant ping against a target on the monitored source port, I get a single solitary Unicast packet through whe...

Member Since	‎08-26-2007 05:43 AM
Date Last Visited	‎05-03-2019 01:42 AM
Posts	11
Total Helpful Votes Received	10

User Statistics

User Activity

Uplinks on Catalyst 9000 series to multiple VRFs

Distributed ISE deployment, localised Identity source

RSPAN only forwards broadcast traffic to destination port

RSPAN only forwards broadcast traffic to destination port

Re: Distributed ISE deployment, localised Identity source

Re: Distributed ISE deployment, localised Identity source

Re: RSPAN only forwards broadcast traffic to destination port

Re: RSPAN only forwards broadcast traffic to destination port