Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I need to replace an older ASA 5520 with a IOS XE router. Both ends have been on ASA some time ago and I successfully replaced one end with a 4451-X a while back. This worked without problems - just match the ACL and the crypto parameters and it work...
On a 2960-S POE switch with IOS version 15.0.2 there are 8 interfaces (ports 17 - 24) which report no spanning tree info available for GigabitEthernetx/x/xwhen issuing the command show spanning-tree interface GigabitE...
On older switches 2960-S, when enabling the web UI with ip http server ip http access-class 10 ip http authentication local ip http secure-server no aaa new-modelwhat would the username / password be?The switch shows a login scre...
In every sample of configuring wireless access points, including Cisco documentation (notably the older Aeronet ones), I find the following lines to be configured on the bridge group which includes the radio interface: bridge-group 1 block-unknown-s...
In an environment with multiple routers of the ISR 4000 series (ISR 4451-X specifically), some are running IOS XE 16.6.9 and some are running the old version 3.16. Since we have the IOS binary for 16.6.9, I want to load this image onto all routers so...
@Cristian Matei Thanks for the tips. Since I am not so familiar with VTI, I am doing it in two stages - set up a VTI at both ends but for interesting traffic disjoint to any production traffic. This works fine, then I can just shut down my local end,...
@Cristian Matei Certainly we want to move away from IKEv1, but let's get the old device off the line first, at least that's what's my thought. Unless if I configure IKEv2 first and it may work? I can try that.And using VTI, yes that should be done to...
@kiwibird Using new IP addresses at both ends and configuring a new ISAKMP pair is definitely a good idea. Although then I will have the problem that I cannot really configure 2 SAs with identical interesting traffic - I don't have a separate out-of-...
