Hello,   On our 802.1x enabled switches, we have about 10 commands per port to enable 802.1x. Is there a way to create a global command set and call those commands with one command on each switch port (shorten up the config. we use 3750, 4500, 6500)? I think the Nexus switches have this capability. Secondly, is there a global way to put a switch in 802.1x monitoring mode with out the NAC appliance going into monitoring mode? We would like to enable each switch in monitoring mode with the NAC in full enforcement. Then when we are ready we will remove that command from one switch at a time to enable full enforcement.   Our NAC of choice is Aruba Clearpass. ... View more

Over the past few weeks I been studying Ansible, and last week I been receiving the error below on Cisco 3900,2800,3750-x devices. My Ansible version should be the same unless something auto updated within the week. Lastly, I can use the Linux command ssh josh@rtr1, so my machine has the access DNS / SSH access.   [root@localhost playbooks]# ansible --version ansible 2.4.2.0 config file = /etc/ansible/ansible.cfg configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible python version = 2.7.5 (default, Aug 4 2017, 00:39:18) [GCC 4.8.5 20150623 (Red Hat 4.8.5-16)]   fatal: [RTR3]: FAILED! => {"changed": false, "msg": "unable to open shell. Please see: https://docs.ansible.com/ansible/network_debug_troubleshooting.html#unable-to-open-shell"}     ... View more

I'm trying to configure Ansible to configure OSPF on a lab router. So far I can get Ansible to create a Loopback0, but keeps failing on the ospf config.  I'm new to this, so I'm not sure if I'm using the correct model for a cisco 3800 router. ... View more

My DMVPN spokes are not creating tunnels to other spokes when I ping the local lans on eth1/7.  It seems like site 5 is handling all the traffic that is spoke to spoke. should DMVPN allow spoke to spoke traffic?   I attached my router configs.   Site_5#sh dmvpn Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete N - NATed, L - Local, X - No Socket # Ent --> Number of NHRP entries with same NBMA peer NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting UpDn Time --> Up or Down Time for a Tunnel ========================================================================== Interface: Tunnel0, IPv4 NHRP Details Type:Hub, NHRP Peers:3, # Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb ----- --------------- --------------- ----- -------- ----- 1 2.2.2.2 192.168.0.2 UP 00:57:16 D 1 3.3.3.6 192.168.0.3 UP 00:57:17 D 1 3.3.3.10 192.168.0.4 UP 00:57:12 D     Site_7#sh dmvpn Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete N - NATed, L - Local, X - No Socket # Ent --> Number of NHRP entries with same NBMA peer NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting UpDn Time --> Up or Down Time for a Tunnel ========================================================================== Interface: Tunnel0, IPv4 NHRP Details Type:Spoke, NHRP Peers:1, # Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb ----- --------------- --------------- ----- -------- ----- 1 1.1.1.2 192.168.0.1 UP 00:56:53 S ... View more

Does the ASA platform support State-full DHCPv6? ... View more

I tried to lab up a IPsec VPN between to IOS routers on GNS3. The VPN is not working and tried a few VPN tutorial guides with no luck.   Phase 1 seems to work but my encrypt counters for phase two does not increment. I'm I missing a command?   Site_1#sh crypto isakmp sa IPv4 Crypto ISAKMP SA dst src state conn-id status 2.2.2.2 1.1.1.2 QM_IDLE 1001 ACTIVE   Site_2#sh crypto isakmp sa IPv4 Crypto ISAKMP SA dst src state conn-id status 2.2.2.2 1.1.1.2 QM_IDLE 1001 ACTIVE     ... View more