Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About mrochac
Stats
Member since
03-01-2016
60
Posts
0
Helpful
0
Solutions
03-23-2020
01:41 PM
I'll try to keep a simple as possible - HO has the ability to go through 2 different ISP, ISP1 original and ISP2 new - HO was recently moved over to ISP2, only HO goes through ISP2 - all other location go through ISP1 over MPLS. Problem, one of the web service that works on ISP1 no longer works on ISP2 - i can get to login screen, login, click on the service link i need, window pops up and nothing happens....eventually is just times out. So, the clicked link that takes us to this service is = http://xxrx.exxxxnk-infxxxxxxxxer.ca:2000/mss/RWebSession.do?link=ELB24Prod - this link starts a JAVA applet app for remote terminal access. - i confirmed with web app service provider and no ip blocking/whitelisting is being done on their side - i can telnet from the same machine to the IP address of this web service on port 2000 and it works On our HO L3Switch i have the ability to add/remove static route for the new firewall, so i can send traffic ISP1's way or ISP2's direction... So i hit a wall. any help would be apreciated.
... View more
03-21-2020
03:04 AM
Hijacking this question :-) I'm having the same issue... just setup the same environment, just ran the packet tracer as suggested and i am getting; any assistance would be appreciated, been banging my head for a while.. let me know if config is required..
... View more
Created by
mrochac
in Network Management
in Network Management
11-05-2019
06:21 AM
11-05-2019
06:21 AM
Good day everyone - i am seeing a lot of traffic related to akamai in netflow using up a lot of our bandwidth, the issue here is that i can identify the DNS of the service being provided - exp - a23-15-4-33.deploy.static.akamaitechnologies.com how do i resolve the name to company? Any help would be great... or option, solutions anything! :-)
... View more
Labels:
10-17-2019
08:40 AM
Thanks for the info Jaderson - its working fine now, after some research i notice that some of the other locations were also using the same UDP port (go figure....always over look easy!) i made changes and added some of your suggestions. thanks.
... View more
10-17-2019
06:03 AM
Hi there here is the conifg; applied to vlan 1 - still seeing traffic from multiple locations, normal? interface Vlan1 description old-data ip flow monitor monitor1 sampler SampleTest input ip address 192.168.3.9 255.255.255.0 no ip redirects end
... View more
10-16-2019
02:26 PM
yes an no - its a weird design, all branches connect to MPLS service provider (CE) using access port, so in theory yes. I was under the impression this would not work since it's a layer 3 service but i guess not. not as great as running on router but every bit counts. MR.
... View more
10-16-2019
12:08 PM
Good day all - please see what i used to attempt to gather netflow from a switch; my question here is - why do i see traffic from all my other branches from this one location? flow record record1 match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port collect counter bytes long collect counter packets long collect timestamp sys-uptime first collect timestamp sys-uptime last ! ! flow exporter export1 destination 172.24.5.25 transport udp 2055 template data timeout 60 ! ! flow monitor monitor1 exporter export1 cache timeout inactive 120 cache timeout active 300 record record1
... View more
Labels:
07-24-2019
12:15 PM
Good day gents and ladies - easy question; we have a SIEM in place and i'm supposedly not sending enough logs from my routers to it. Can one of you guide me on to setup so that everything gets sent to this syslog server, this is what i have... logging history size 500 logging history debugging logging trap debugging logging source-interface GigabitEthernet0/1.1 logging host 1X2.2X.5.25 logging host 10.100.X.62 Am i doing something wrong here....on that same token, if i do a sh logging on my routers there is only a few items on there - never what you are looking for a week ago, thanks for any help. MR.
... View more
- Tags:
- logging
Labels:
03-05-2019
05:49 AM
Both excellent options, i do have a syslog setup and i will add the config change audit option - at the same time, why is it that not all messages show up under #sh logging? was looking at troubleshooting DHCP snooping and nothing really showing up under logging... make sense?
as for the audit, can that be logged to a file?
MR.
... View more
02-25-2019
07:54 AM
good day, curious of how i would go about turning on logging so i can see all messages on switch, right now i only see minor items, but i need to know of changes to conifg, dhcp snooping messages, and so on... this is what i see right now.(example)
2909QUEEN-STK#sh logging Syslog logging: enabled (0 messages dropped, 1 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level debugging, 419 messages logged, xml disabled, filtering disabled Monitor logging: level debugging, 0 messages logged, xml disabled, filtering disabled Buffer logging: level debugging, 419 messages logged, xml disabled, filtering disabled Exception Logging: size (4096 bytes) Count and timestamp logging messages: disabled File logging: disabled Persistent logging: disabled
No active filter modules.
Trap logging: level informational, 378 message lines logged Logging Source-Interface: VRF Name:
Log Buffer (4096 bytes): on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:18:38.514 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:18:54.529 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:19:26.528 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2) Feb 25 10:25:30.536 EST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0015.5d6e.6c02 on port GigabitEthernet2/0/12. (2909QUEEN-STK-2)
... View more
Labels:
12-04-2018
06:17 AM
Good day everyone, i need some advice on best practice for the following scenario;
- we have 2 CE routers ISP owned providing MPLS access to our WAN
- we would like to install 2 routers and load balance between them which should also provide redundancy
any help is great appreciated.
... View more
- Tags:
- router
Re: Qos question for access-switch
in IP Telephony and Phones
11-13-2018
08:01 AM
11-13-2018
08:01 AM
OK, our WAN provider does have predefined markings, when the marking from switch hits my router do i need a policy-map on the ingress port as well or just egress facing WAN with our defined marking? also, i'm assuming that other then voip traffic everything else on LAN side is set to class-default?
thanks for your help.
MR
... View more
11-08-2018
02:56 PM
Classification - PUBLIC Yes now I get, clear! That's what I was so confused about - the ACL is used by the policy-map once you apply it to the interface with service-policy, that's the part I was getting confused with and could grasp around. Thank you for your help..
... View more
11-08-2018
02:44 PM
Classification - PUBLIC That makes sense! Shows you how much I know! So the ACL is used with service-policy when you apply it to an interface correct? That when filtering happens? MR
... View more
11-08-2018
02:10 PM
Classification - PUBLIC Hi Ashish - great read and I'm still reading it now, but my question still stands and I see reference to multiple ACL on the link you sent me, but yet, how do you apply 2 ACL to 1 interface? I see multiple ACL, all the config I need is on that link you sent. If am making reference to an ACL in my class-map, I have to attached that ACL to an interface do I not? MR
... View more
03-23-2020
I'll try to keep a simple as possible - HO has the ability to go through
2 different ISP, ISP1 origi...
03-21-2020
Hijacking this question :-)I'm having the same issue... just setup the
same environment, just ran th...
Created by
mrochac
in Network Management
11-05-2019
11-05-2019
Good day everyone - i am seeing a lot of traffic related to akamai in
netflow using up a lot of our ...
10-17-2019
Thanks for the info Jaderson - its working fine now, after some research
i notice that some of the o...
10-17-2019
Hi there here is the conifg; applied to vlan 1 - still seeing traffic
from multiple locations, norma...
10-16-2019
yes an no - its a weird design, all branches connect to MPLS service
provider (CE) using access port...
10-16-2019
Good day all - please see what i used to attempt to gather netflow from
a switch; my question here i...
07-24-2019
Good day gents and ladies - easy question; we have a SIEM in place and
i'm supposedly not sending en...
03-05-2019
Both excellent options, i do have a syslog setup and i will add the
config change audit option - at ...
02-25-2019
good day, curious of how i would go about turning on logging so i can
see all messages on switch, ri...
12-04-2018
Good day everyone, i need some advice on best practice for the following
scenario; - we have 2 CE ro...
11-13-2018
OK, our WAN provider does have predefined markings, when the marking
from switch hits my router do i...
11-08-2018
Classification - PUBLICYes now I get, clear! That's what I was so
confused about - the ACL is used b...
11-08-2018
Classification - PUBLICThat makes sense! Shows you how much I know! So
the ACL is used with service-...
Public Statistics
| Date Registered | 03-01-2016 05:36 PM |
| Date Last Visited | 03-25-2020 09:25 AM |
| Total Messages Posted | 60 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 10 | |
| 5 | |
| 10 | |
| 15 |
.jpg "Hall of Fame Community Legend"){kind=icon}
.jpg "VIP Mentor"){kind=icon}
