About onibala

onibala · 04-04-2024

I am using the new SISF with device tracking, and it does not prevent duplicate IP address.I setup a policy for user port with the following configuration:security-level guarddevice-role nodelimit address-count 1Global: device-tracking tracking auto-...

onibala · 11-09-2023

Good Morning Cisco Experts,Anyone knows the hardware list that support Ordinary Clock (OC) or client configuration? Would all hardware and VM's be able to query GMC?We are planning to buy the Catalyst 9300 as the GMC, and I want to know whether any C...

onibala · 10-19-2023

Does Cisco have tool to identify what type of traffics within IPsec ESP encrypted packet?FlowPic: Encrypted Internet Traffic Classification is as Easy as Image Recognition | IEEE Conference Publication | IEEE XploreThanks,Audie

onibala · 10-12-2023

Can IOS, IOS-XE, or IOS-XR support server functioning as RPKI Validator? This is similar of PKI CA server configuration in any IOS platform.I want to test it in our Lab without connecting to any RPKI servers in the Internet.Thanks,Audie

onibala · 04-26-2023

Hello Cisco Expert,Anyone has PCAP file that captured malicious malformed IPSec packet (IKEv2, ESP, etc)? I need it for CCNP Security cert.I will try also generating IKEv2 malformed packet using bogus negotiation parameters. Any advise?Thank You,Audi...

onibala · 04-08-2024

Silvana Melazzini of Cisco TAC gave the solution:Global: device-tracking logging theftUpdate: Sorry..it DID not stop the Duplicate IP

onibala · 04-08-2024

IP Source Binding from the older IP Source Guard is still in place:ip source binding 10.5.22.1 xxxx.xxxx.xxxx vlan 100 interface Gi1/0/22The switch is Layer-2, and no SVI.

onibala · 04-04-2024

I am using the new SISF with device tracking, and it does not prevent duplicate IP address.I setup a policy for user port with the following configuration:security-level guarddevice-role nodelimit address-count 1Global: device-tracking tracking auto-...

onibala · 03-14-2024

Hello Ashirkar,Does Cisco DHCPv6 Guard prevent IPv4 roque DHCP Server also? Thanks,AudieUpdate: Yes, using SISF will block IPv4 and IPv6 rogue DHCP servers

onibala · 11-09-2023

Albert,What I am looking for is the "consolidated datasheet". I need to buy non-industrial grade routers and switches that can query/receive PTP updates. Usually when Cisco introduce a feature, it would provide list of what hardware and software plat...

Member Since	‎03-02-2023 11:14 AM
Date Last Visited	‎07-04-2024 01:23 AM
Posts	39
Total Helpful Votes Received	3

User Statistics

User Activity

SISF Device-Tracking Does Not Prevent Duplicate IP

Precision Time Protocol (PTP) Ordinary Clock Hardware Supported List

IPSec Traffic Classification

RPKI Validator Server Configuration

IPSec Malformed PCAP Sample

Re: SISF Device-Tracking Does Not Prevent Duplicate IP

Re: SISF Device-Tracking Does Not Prevent Duplicate IP

Re: Prevent Duplicate ip address

Re: Understanding DHCPv6 Guard

Re: Precision Time Protocol (PTP) Ordinary Clock Hardware Supported Li