Hi, I have this issue on my 3750 stack which comprises of two 3750. ------------------------------------------------------------------------------------------------- show switch stack-ports Switch #    Port 1       Port 2   --------        ------       ------     1           Ok          Down     2          Down          Ok ------------------------------------------------------------------------------------------------- I have tried tightening the cable but still get this error messages. Could this be a faulty stack cable ? The other thing that I can do is swap the stack cables and see what kind of error message that I am getting. Would like to know what else I can do to fix the issue. Cheers, - SN - ... View more

Hi, I have a 3750 stack and want to confirm if I can run HSRP on the stack to two different ASR routers for redundancy purposes ? It looks like the below :-    --------------------------------    |     SW1          SW2  |    |       3750 Stack        |    |------------------------------- |             |          |             |          |      -----------     ------------     |    P     |   |    S      |     |  ASR1 |   |  ASR2  |     | ______|   |_______| Cheers, - SN - ... View more

Hi, I need to upgrade an FWSM module from version 4.0(10) to 4.1(10) and also upgrade the  ASDM from version 6.1(5) F to version 6.2 (2)F. This is the document that I have found :- http://www.cisco.com/en/US/docs/security/fwsm/fwsm41/release/notes/fwsmrn41.html#wp222373 This is the steps that needs to be done according to the above URL :- ---------------------------------------------------------------------------------------------------------------- Step 1 If you have a Cisco.com login, you can obtain the OS and ASDM images from the following website: http://www.cisco.com/cisco/software/navigator.html?a=a&i=rpm Step 2 For multiple context mode, change to the system execution space: hostname# changeto system Step 3 Install the new OS using TFTP: hostname# copy t ftp://server[/path]/filename flash: For example: hostname# copy t ftp://10.1.1.1/c6svc-fwm-k9.4-1-1.bin flash: Step 4 Install the new ASDM using TFTP: hostname# copy t ftp://server[/path]/filename flash:asdm For example: hostname# copy t ftp://10.1.1.1/asdm-621f.bin flash:asdm Step 5 To reload to start running the new software, enter the following command: hostname# reload ---------------------------------------------------------------------------------------------------------------- My question is :- i) Is this is all is needed to be done  ? ii) This FWSM is running on active/active mode ? Is there anything specific that I need to do ? Thanks in advance. Cheers, - sn - ... View more

Hi, I am trying to configure the dashboards for the pre-defined roles ie) Network Operator, Network Administrator, Helpdesk, etc but I cannot find the document to do this. I am running LMS version 4.1. The goal is to create users and put them in one of these roles and then they would inherit these dashboards when they log on. Can this be done on LMS ? The doco that I am reading says that each user needs to configure their own dashboard or they can use the public dashboard as a starting point. Any help will be greatly appreciated. Cheers, - sn - ... View more

Hi, I am having a few issues with the discovery process on LMS 4.1. The bug tool kit says that I can get a patch from Cisco to solve this issue. My question is what information do I need to give to the TAC to open a TAC case for this LMS tool ? Since this is a s/w, it won't have any serial number on it, so hence this question. Thank you. Cheers, - sn - ... View more

Hi, I would like to know how do we block some IP subnets from talking to other IP subnets on the same 6513 box. I used an ACL to do this but it does not seem to work I can still ping the machine on the IP subnet that I want to filter. In summary, this is what I have done :- ----------------------------------------------- ACL :- ip access-list extended 110    remark Deny OLD Data Subs to NEW data subnet    deny ip 10.49.0.0 0.0.15.255 any    deny ip 10.49.16.0 0.0.3.255 any    deny ip 10.49.20.0 0.0.0.255 any    deny ip 10.49.88.0 0.0.3.255 any    permit ip any any One of the new IP subnet :- interface Vlan600 description Data 600 ip address 10.136.20.252 255.255.255.0 ip access-group  110 in ip helper-address 10.44.144.1 no ip redirects no ip proxy-arp no ip mroute-cache standby 22 ip 10.136.20.254 standby 22 priority 105 standby 22 preempt Old IP subnet :- interface Vlan102 description Data 102 ip address 10.49.2.2 255.255.255.0 ip helper-address 10.49.30.11 ip directed-broadcast 108 no ip proxy-arp no ip mroute-cache ------------------------------------------------ The test was done by pinging from a host on vlan 102 to the HSRP IP of 10.136.20.254 and it is still pingable BUT the aim is that the OLD ip subnet should not be able to talk to the NEW ip subnet. One thing that I could have done is to put the ACL on the outbound as well but don't think that this would solve the issue. I would like to know how can I block the old ACL to the new ACL on the same 6513 device. Cheers, - SN - ... View more

Hi, I have got a new certificiate for my SSL VPN concentrator from a 3rd party vendor. How do I get the client to get this certificate since they work remotely ? If the user gets the certificate from the office and then works remotely, then its fine but for other remote users,  they cannot get connected to the SSL VPN concentrator. Can someone explain to me how these remote users can get the certificate ? Or any good links that can explain this. I am doing this for the first time. Thanks in advance. Cheers, SN ... View more

Hi, I have this configuration on a edge router that connects to the service provider. ----------------------- Current configuration : 285 bytes ! interface GigabitEthernet0/0 bandwidth 3000  <<<-------- ip address 172.17.32.254 255.255.255.240 no ip redirects load-interval 30 duplex full speed 100 media-type rj45 no keepalive no cdp enable service-policy output BLUECOAT_EGRESS ! ! policy-map BLUECOAT_EGRESS class VOICE_BEARER     priority 960    police rate 960000      conform-action transmit      exceed-action drop class VIDEO_BEARER    police rate 500000  burst 50000      conform-action transmit      exceed-action drop     priority 500 class class-default     fair-queue      random-detect ----------------------- The router is a Cisco 3825 and its not running any routing protocol. It just have a static default route pointing to the IP VPN. My question is with regards to the 'bandwidth 3000' command. From my monitoring tool, it peaks upto 3M during the nights when the backup happens. So it seems that the 'bandwidth 3000' is actually capping it to 3MB. The setup is as follows :- Cisco 3825 Router --> Packet Shaper (does compression) --> IP VPN. Since it looks like the bandwdith command is actually capping it, I plan to increase the bandwidth here to 6000 as the packet shaper will do compression on the packets. So my question is :- i) Does the bandwidth command cap the traffic to the amount set on the 'bandwdith x' ? ii) Any other related suggestions to increase the BW for outbound traffic to the IP VPN ? Thank you. Cheers, - SN - ... View more