In DMVPN, spokes cansend packets directly to another spoke, if the routing table and NHRP table are available. In order to create a spoke to spoke tunnel, a spoke must: Learn a routing entryto the destination network The next hop must be the remote spoke tunnel IP address The spoke must learn the NBMA addressof this next hop •The IPsec tunnel is only built afterthat The below URL demonstrates a configuration for static and dynamic LAN-to-LAN tunnels with spoke-to-spoke connectivity through the hub PIX Firewall. PIX version 7.0 improves support for spoke-to-spoke VPN communications as it provides the ability for encrypted traffic to enter and leave the same interface. http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00804675ac.shtml#intro ... View more

You may try investigating the channel/power setting to see if there was a misconfiguration that was causing your client roaming issue. ... View more

Users can configure the auxiliary VLAN feature on an 802.1x port and vice versa. When the switch recognizes a phone is attached to a port via CDP, it allows phone traffic on the auxiliary VLAN without 802.1x authentication. Then, the PC or Workstation connected (behind the phone) to the 802.1x port of the switch will use the port VLAN ID and authenticate following the dot1x protocol. ... View more

Users cannot attend a video conference via Cisco VT Advantage if they are using VPN software to access the network. Refer to the below URL for more info: http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/5_3/english/video/administration/guide/v530s4.html ... View more

The document below explains about the configuration that allows Cisco VPN Clients secure access to corporate resources via IPsec and still gives the client the ability to carry out activities like printing wherever the client is located. If it is permitted, traffic destined for the Internet is still tunneled to the ASA or PIX. http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080702992.shtml ... View more

There will not be any issue in configuring the loopback interfaces with GRE/IPSEC configuration. You can use the physical interface (or the loopback interface) IP addresses to identify Internet Key Exchange (IKE) peers. The below URL illustrates an IP Security (IPSec) configuration using a generic routing encapsulation (GRE) tunnel between two routers. IPSec can be used to encrypt GRE tunnels to provide network layer security for non-IP traffic, such as Novell Internetwork Packet Exchange (IPX), AppleTalk, and so forth. The GRE tunnel in this example is purely used for transporting non-IP traffic. Hence, the tunnel does not have any IP address configured. Here are some configuration considerations: http://www.cisco.com/en/US/tech/tk827/tk369/technologies_configuration_example09186a0080093f70.shtml ... View more

FPM allows customers to create their own filtering policies that can immediately detect and block new viruses and attacks. A filtering policy is defined via the following tasks: •Load a PHDF (for protocol header field matching) •Define a class map and define the protocol stack chain (traffic class) •Define a service policy (traffic policy) •Apply the service policy to an interface The below URL explains about the configuration: http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_flex_pack_match_ps9587_TSD_Products_Configuration_Guide_Chapter.html#wp1053784 ... View more

The below URL provides a sample configuration for Quality of Service (QoS) for Voice over IP (VoIP) traffic on VPN tunnels that terminate on the PIX/ASA Security Appliances. http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml#intro Refer the eblow URL which explains about VPN configuration between third party product and Cisco PIX: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008052c9d4.shtml ... View more

Most Nessus 2.2 plugins are supported and can be uploaded to the Clean Access Manager. You must register for Nessus 2.2 plugins from http://www.nessus.org/plugins/index.php?view=register. Once you register, you will be able to download the free plugins. Reference URL: http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/45/cam/m_netsca.html#wp1040253 ... View more

You may try the bug ID CSCse33323 ... View more

This can provide clues as to a fragmentation issue in the network. Consumer routers are particularly poor at packet fragmentation and reassembly. Try a scaling set of pings to see if it fails at a certain size. For example, ping -l 500, ping -l 1000, ping -l 1500, ping -l 2000. It is recommended that you configure a special group for users that experience fragmentation, and set the svc mtu for this group to 1200. This allows you to remediate users who experience this issue but not impact the broader user base. ... View more

When the operator transfers the call, the call is terminated on a CTI Port which inturn reaches the destination phone. Once the call reaches the phone, the CTI Port bridges the two call legs and CUCM updates both parties of the Connected Number. https://www.cisco.com/en/US/docs/voice_ip_comm/cucmac/arc/arcug20114.pdf ... View more

When a packet gets routed, it carries the source MAC address as that of the physical interface or VLAN interface, which performs the routing rather than the outgoing interface which is in switchport mode. In order to learn the MAC address of the directly connected interface or port, you can configure the port for native VLAN. When any untagged frames are sent out of this port, the source MAC address associated physical port is learned and added to the MAC address table in the remote device. http://www.cisco.com/en/US/products/hw/switches/ps663/products_tech_note09186a008011e6b4.shtml#interface_problems ... View more

If the number of CRC errors seems excessive, check the following: Check the Line of Sight (LOS) between the transmitter and the receiver. Try to ensure that the LOS is clear. Change the frequency to one which may have less interference. Ensure the antennae and cables are appropriate for the distance of the radio link. Download the Antenna Calculation Tool (Microsoft Excel format) and verify the configuration of the physical elements of your connection. ... View more