Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi All, We are looking to upgrade our Nexus 7k infrastructure as our current line cards are going/gone End Of Life. We will be replacing M1 cards we either M2 or F2 that were purchased sometime ago. Sounds like an easy task until you consider the vP...
Hi All,
We are deploying 802.1x/MAB with ISE. The configuration that has been suggested in terms of AAA server and deadtimer is:
!
aaa group server radius ISE
server name A
Server name B
deadtime 60
!
radius-server dead-criteria time 5 tries 3
!
My...
Hi,
I am going to be editing an existing extended ACL adding 2 permit lines,(using ACL sequence numbers) but I also want to include remarks.
How do I do this with out having to re-write the entire list, and causing downtime?
You help is much apprecia...
Hi,
I am going to be deploying DHCP snooping along with IP device tracking to aid with the Dot1x solution also being implemented. As IP device tracking is activated, this also means Dynamic Arp Inspection will be running.
My question is however, if ...
Hi. Please see my diagram attachment for a clearer picture. I currently have a pair of Distribution switches connected to the Core using OSPF load balancing. The DL then runs RPVST+ each with a layer two link to the access switch, and a connection a...
I fully understand the connectivity to the radius servers and the wan connectivity.
My question is more around the deadtimer. If the WAN went down both Radius servers with the abover configuration (deadtime 60) would be marked dead for 60 minutes. ...
6509.
I believe the only way is to remove the line "access-list 111 deny ip any any"
add the remark and the new permit statement
Re-enter the line "access-list 111 deny ip any any"
The implicit deny any any will cover this so the ACL will be fully...
Hi there,
I have an existing ACL
access-list 111 permit ip any host 1.1.1.1
access-list 111 permit ip any host 2.2.2.2
access-list 111 permit ip any host 3.3.3.3
access-list 111 deny ip any any
I want to add a new like to permit host 4.4.4.4 but b...
Thanks for the reply, I understand now that with only DHCP snooping running the agent isn't so important, however when using DAI or Source guard it is.
Can you confirm whether the "ip device tracking" command does enable DAI... the below extract see...
