Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I am trying to use a tunnel interface with route-based IPsec.However, the following log message is being output, and the tunnel interface keeps switching between the "up" and "down" states. Could you please advise me on the cause of this issue?The re...
I am using policy-based IPsec with two routers in a redundant configuration.When I set the tunnel address to the HSRP VIP using the `crypto map MAP redundancy VIPHA` on the WAN interface, the router that became Standby during an HSRP switchover would...
The following password is configured on the Catalyst switch.Is my understanding of the command to change this password correct?<Current Configuration>enable secret 8 *********username admin secret 8 *********<Command to Change>enable algorithm-type s...
We are using BGP on the WAN interfaces of R1 and R2.I would like to create an EEM that executes commands on R2 in the event of a WAN failure or a hardware failure on R1.I believe the best approach is to use IP-SLA on R1 to monitor ICMP traffic to the...
Is it possible to configure EEM to execute an action whenever any one of multiple syslog messages matches a pattern? I would like to know if it is possible to write syslog patterns using an "OR" condition.
@swept I believe the problem up until now was that even after an HSRP failover, the active router continued to retain the old SA; as a result, even when the router transitioned from standby to active, it could not re-establish the SA, causing the com...
@Rob Ingram After changing the VPN router on the other end to route-based mode and configuring a static route to the site's LAN segment with the tunnel interface as the destination, the tunnel interface came up!
@Rob Ingram M02@rt37 Thank you for your explanation.When configuring the "crypto map MAP redundancy VIPHA stateful" setting, the SA on the original Active side was not deleted during an HSRP failover but remained, and a new SA was established on the ...
@pman Sorry. It is correct that you can still ping a BGP peer even if a BGP neighbor goes down. I would like to configure R1 to trigger EEM in response to a BGP neighbor down message.
