Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About mrochac
07-29-2019
Stats
Member since
03-01-2016
53
Posts
0
Helpful
0
Solutions
07-24-2019
12:15 PM
Good day gents and ladies - easy question; we have a SIEM in place and i'm supposedly not sending enough logs from my routers to it. Can one of you guide me on to setup so that everything gets sent to this syslog server, this is what i have... logging history size 500 logging history debugging logging trap debugging logging source-interface GigabitEthernet0/1.1 logging host 1X2.2X.5.25 logging host 10.100.X.62 Am i doing something wrong here....on that same token, if i do a sh logging on my routers there is only a few items on there - never what you are looking for a week ago, thanks for any help. MR.
... View more
- Tags:
- logging
Labels:
03-05-2019
05:49 AM
Both excellent options, i do have a syslog setup and i will add the config change audit option - at the same time, why is it that not all messages show up under #sh logging? was looking at troubleshooting DHCP snooping and nothing really showing up under logging... make sense?
as for the audit, can that be logged to a file?
MR.
... View more
02-25-2019
07:54 AM
good day, curious of how i would go about turning on logging so i can see all messages on switch, right now i only see minor items, but i need to know of changes to conifg, dhcp snooping messages, and so on... this is what i see right now.(example)
2909QUEEN-STK#sh logging Syslog logging: enabled (0 messages dropped, 1 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level debugging, 419 messages logged, xml disabled, filtering disabled Monitor logging: level debugging, 0 messages logged, xml disabled, filtering disabled Buffer logging: level debugging, 419 messages logged, xml disabled, filtering disabled Exception Logging: size (4096 bytes) Count and timestamp logging messages: disabled File logging: disabled Persistent logging: disabled
No active filter modules.
Trap logging: level informational, 378 message lines logged Logging Source-Interface: VRF Name:
Log Buffer (4096 bytes): on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:18:38.514 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:18:54.529 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:19:26.528 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:25:30.536 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2)
... View more
Labels:
12-04-2018
06:17 AM
Good day everyone, i need some advice on best practice for the following scenario;
- we have 2 CE routers ISP owned providing MPLS access to our WAN
- we would like to install 2 routers and load balance between them which should also provide redundancy
any help is great appreciated.
... View more
- Tags:
- router
Re: Qos question for access-switch
in IP Telephony and Phones
11-13-2018
08:01 AM
11-13-2018
08:01 AM
OK, our WAN provider does have predefined markings, when the marking from switch hits my router do i need a policy-map on the ingress port as well or just egress facing WAN with our defined marking? also, i'm assuming that other then voip traffic everything else on LAN side is set to class-default?
thanks for your help.
MR
... View more
11-08-2018
02:56 PM
Classification - PUBLIC Yes now I get, clear! That's what I was so confused about - the ACL is used by the policy-map once you apply it to the interface with service-policy, that's the part I was getting confused with and could grasp around. Thank you for your help..
... View more
11-08-2018
02:44 PM
Classification - PUBLIC That makes sense! Shows you how much I know! So the ACL is used with service-policy when you apply it to an interface correct? That when filtering happens? MR
... View more
11-08-2018
02:10 PM
Classification - PUBLIC Hi Ashish - great read and I'm still reading it now, but my question still stands and I see reference to multiple ACL on the link you sent me, but yet, how do you apply 2 ACL to 1 interface? I see multiple ACL, all the config I need is on that link you sent. If am making reference to an ACL in my class-map, I have to attached that ACL to an interface do I not? MR
... View more
11-08-2018
01:06 PM
Classification - PUBLIC Hi MK - similar to what I have, actually I'll be using yours! But, if you have 2 ACL 101 for VOICE and 102 for signaling how do you attached to same interface? That's where I'm confused, I see tones of references to ACL1 and ACL 2 in class-map but how are the ACL being reference if you can only have 1 attached to interface? MR
... View more
11-08-2018
11:18 AM
Thanks for reaching out Anthony - thats a very good point! yes i can separate them but if i can only apply 1 ACL to an interface how will that work? i think i'm not seeing the bigger picture here.
MR
... View more
11-08-2018
10:04 AM
good day everyone - i have some confusion in mind in regards to QoS, here is what questioning;
1 ACL base QoS
- if i create a ACL called VOIP (see below); within this ACL i have RTP and Signaling, when i create my class-map to match-all or any how does it work? because when i create my policy-map and say class XXX set dscp EF for voice and one for signally how does it classify according if it all in one ACL? (not sure if this is clear but....)
Extended IP access list Voip-QoS
10 permit udp any any range 16384 32767
11 permit tcp any any eq 5060
12 permit tcp any any range 2000 2002
13 permit tcp any any eq 1720
14 permit tcp any any range 11000 11999
15 permit tcp any any
16 permit ip any any
If i say match-all it will match ALL as per ACL list, if i say match-any will it match according to first come first serv?
Please help.
... View more
- Tags:
- policy-map
- qos
- router
Labels:
11-08-2018
07:14 AM
Hi Leo - just reading you issue and i had a question, how did you apply both ACL to interface? let me know your solution as i'm on the same boat... thanks.
... View more
11-05-2018
03:12 PM
Hi Georg - here are the markings; this is what they are expecting on their end from me - i guess my confusion is how do mark all this traffic coming in from LAN so that when it goes out WAN port its defined according? I gathered that each int would have an ACL filtering the traffic and classes marking traffic according to policy-map? thanks.
RT
class-map match-any RT
description *** Real Time ***
match ip dscp cs5
match ip dscp ef
VC
class-map match-any VC
description *** Video class***
match ip dscp cs4 af41 af42 af43
BH
class-map match-any BH
description *** Business High ***
match ip dscp cs3 af31 af32 af33 cs6 cs7
BL
description *** Business Low ***
match ip dscp cs2 af21 af22 af23
BE
description *** Business Enhance ***
match ip dscp cs1 af11 af12 af13
... View more
10-31-2018
05:53 AM
Good day everyone - i'm working on deploying QoS across our corporation and have a few questions - i'll keep it simple as for layout of network.
WAN(MPLS) -----(CERouter)----(OurRouter (2901)----(Switch(2960x)----devices (ip phone, desktop,etc..)
CE predefined QoS as follow marking so this is what they are expecting to receive as markings from me, which is fine.
how do i go about this?
1 - create ACL for all the traffic i want to mark and use policy-map
- if i use ACL wont the deny all at the end of ACL dropped the rest of the traffic?
2 - where do i apply ACL to SVI?phusical?
I been reading tones of info online but i can grasp around how it functions...
i'm a little confused how this comes together.
Hopefully i make sense...any help is appreciated. tks.
... View more
- Tags:
- policy-map
- qos
- router
Labels:
07-24-2019
Good day gents and ladies - easy question; we have a SIEM in place and
i'm supposedly not sending en...
03-05-2019
Both excellent options, i do have a syslog setup and i will add the
config change audit option - at ...
02-25-2019
good day, curious of how i would go about turning on logging so i can
see all messages on switch, ri...
12-04-2018
Good day everyone, i need some advice on best practice for the following
scenario; - we have 2 CE ro...
11-13-2018
OK, our WAN provider does have predefined markings, when the marking
from switch hits my router do i...
11-08-2018
Classification - PUBLICYes now I get, clear! That's what I was so
confused about - the ACL is used b...
11-08-2018
Classification - PUBLICThat makes sense! Shows you how much I know! So
the ACL is used with service-...
11-08-2018
Classification - PUBLICHi Ashish - great read and I'm still reading it
now, but my question still st...
11-08-2018
Classification - PUBLICHi MK - similar to what I have, actually I'll be
using yours!But, if you have...
11-08-2018
Thanks for reaching out Anthony - thats a very good point! yes i can
separate them but if i can only...
11-08-2018
good day everyone - i have some confusion in mind in regards to QoS,
here is what questioning; 1 ACL...
11-08-2018
Hi Leo - just reading you issue and i had a question, how did you apply
both ACL to interface? let m...
11-05-2018
Hi Georg - here are the markings; this is what they are expecting on
their end from me - i guess my ...
Public Statistics
| Date Registered | 03-01-2016 05:36 PM |
| Date Last Visited | 07-29-2019 05:58 AM |
| Total Messages Posted | 53 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 10 | |
| 5 | |
| 10 | |
| 15 | |
| 5 |
.jpg "VIP Mentor"){kind=icon}
