Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Sal2
Stats
Member since
03-05-2016
45
Posts
0
Helpful
1
Solution
11-11-2019
10:46 AM
I am adding a ACL rule on ASA, but when I do that, it goes at the bottom after the deny statement, the only way I can move rules is using ASDM So, how can we do that using in cli when adding rules before deny statement- All the line number before 186 are taken in order, if I add a new rule using same line number as 186, will it push the deny one number down? or will it overwrite it? What is the best approach to have a rule added before deny on ASA using cli? access-list xyz_in line 186 remark Explicit deny to ANY access-list xyz_in line 187 extended deny ip any any log disable
... View more
10-04-2019
02:41 PM
What command or commands I can run to see port to asic mapping? C7009 N7K-M224XP-23L N7K-F348XP-25
... View more
Labels:
07-01-2019
04:08 PM
Hi- I added a new access list statement, but it went after deny. The only way I had to move was using ASDM software. How can add an acl line before deny in acl? e-g remark test access-list inside_in line 7 extended permit tcp host 1.1.1.1 host 2.2.2.2 access-list inside_in line 7 extended permit tcp host 3.3.3.3 host 4.4.4.4 Now I want to add the following line to above acl, making sure it goes before deny statement? some platforms have option to add before deny statement access-list inside_in extended permit tcp host w.x.y.z host p.q.r.s eq 8000 Sal
... View more
Labels:
05-21-2019
03:12 PM
I also found this command for more refined result from other post. #show running-config object network in-line | i x.x.x.x
... View more
05-21-2019
02:55 PM
so it partially helps, appreciate that. But it still show lines with text containing word object-group not relevant to my search. all I need is when I search the IP it lists down the IP and which group it is sitting under.
... View more
05-17-2019
02:30 PM
Hi Say I have a object host IP, and I want to see under which object group it belongs to. if I do show run | in IP (I only see the lines where the IP exist) not its main section and subsections. What grep command will help me get its complete section in Cisco ASA? Thanks
... View more
Labels:
04-03-2019
11:18 PM
Yes this in gns3, I do have vlan10 configured on both switches I do not have anything in mac address table, when I try to ping from my pc1 to pc2 it says not reachable. Am I doing SVI right? what gateway should I configure on vpcs? I feel like it is purely layer 2. not sure what I am missing SW1#show int tr SW1#show int trunk Port Mode Encapsulation Status Native vlan Gi0/1 on 802.1q trunking 1 Port Vlans allowed on trunk Gi0/1 1-4094 Port Vlans allowed and active in management domain Gi0/1 1,10 Port Vlans in spanning tree forwarding state and not pruned Gi0/1 1,10 SW1#sh cdp neighbors Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone, D - Remote, C - CVTA, M - Two-port Mac Relay Device ID Local Intrfce Holdtme Capability Platform Port ID SW2 Gig 0/1 140 R S I Gig 0/1 Total cdp entries displayed : 1 SW2#show int trunk Port Mode Encapsulation Status Native vlan Gi0/1 on 802.1q trunking 1 Port Vlans allowed on trunk Gi0/1 1-4094 Port Vlans allowed and active in management domain Gi0/1 1,10,20 Port Vlans in spanning tree forwarding state and not pruned Gi0/1 1,10,20 SW2#sh cdp neighbors Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone, D - Remote, C - CVTA, M - Two-port Mac Relay Device ID Local Intrfce Holdtme Capability Platform Port ID SW1 Gig 0/1 149 R S I Gig 0/1 Total cdp entries displayed : 1
... View more
04-02-2019
10:21 PM
All I want is to ping across both PCs in vlan 10 but I cannot, what am I missing here? SW1#show running-config int gigabitEthernet 0/0 Building configuration... Current configuration : 122 bytes ! interface GigabitEthernet0/0 switchport access vlan 10 switchport mode access media-type rj45 negotiation auto end SW1#show running-config int gigabitEthernet 0/1 Building configuration... Current configuration : 132 bytes ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk media-type rj45 negotiation auto end SW1#show running-config int vlan 10 Building configuration... Current configuration : 39 bytes ! interface Vlan10 no ip address end --------------- SW2#show running-config interface gigabitEthernet 0/0 Building configuration... Current configuration : 122 bytes ! interface GigabitEthernet0/0 switchport access vlan 10 switchport mode access media-type rj45 negotiation auto end SW2#show running-config interface gigabitEthernet 0/1 Building configuration... Current configuration : 132 bytes ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk media-type rj45 negotiation auto end SW2#show running-config interface vlan10 Building configuration... Current configuration : 39 bytes ! interface Vlan10 no ip address end --- PC-2> sh ip NAME : PC-2[1] IP/MASK : 192.168.1.1/24 GATEWAY : 0.0.0.0 DNS : MAC : 00:50:79:66:68:01 LPORT : 10002 RHOST:PORT : 127.0.0.1:10003 MTU: : 1500 --- NAME : PC-1[1] IP/MASK : 192.168.1.2/24 GATEWAY : 0.0.0.0 DNS : MAC : 00:50:79:66:68:00 LPORT : 10004 RHOST:PORT : 127.0.0.1:10005 MTU: : 1500 PC-1> ping 192.168.1.1 host (192.168.1.1) not reachable
... View more
Labels:
01-27-2019
02:55 PM
Super! that exactly was the issue, I followed the instructions to resolve the bug. Thanks @francesco for helping me out on this one. I have marked your first response as the correct answer. Thanks again :)
... View more
01-26-2019
10:22 AM
Hello All GNS3 user, new to virl labs. I am using Devnet available (free sandboxes) to learn and get familiar to this platform. I want to know which sandbox I can pick, where I can create/edit simple topology of Nexus (pair) and iOS switch triangle? Thanks Sal
... View more
01-25-2019
10:01 PM
(above is the new diagram) I have made my topology more smaller, My vpc is up and so is my vpc peer-keepalive (please look at the attached config files, @balaji.bandi But I am unable to bring up my member port-channel i-e between IoSL2 switch and nexus pair. I have also attached my current configurations. my spanning tree keeps blocking my et1/1 on both nexus, I don't know why. right now this is sh spanning tree and I removed et/1 from po10 NX-OSv9k-2(config-if)# sh spanning-tree VLAN0001 Spanning tree enabled protocol rstp Root ID Priority 32769 Address 0cbf.d05c.c407 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32769 (priority 32768 sys-id-ext 1) Address 0cbf.d05c.c407 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Interface Role Sts Cost Prio.Nbr Type ---------------- ---- --- --------- -------- -------------------------------- Po1 Desg FWD 3 128.4096 (vPC peer-link) Network P2p Eth1/1 Desg BLK 4 128.1 P2p Eth1/2 Desg FWD 4 128.2 P2p Eth1/3 Desg FWD 4 128.3 P2p Eth1/4 Desg FWD 4 128.4 P2p Eth1/5 Desg FWD 4 128.5 P2p Eth1/6 Desg FWD 4 128.6 P2p Eth1/7 Desg FWD 4 128.7 P2p
... View more
01-24-2019
08:52 PM
@Francesco Molino I am using GNS3 I have a feeling as well that this is more of spanning tree issue or something, which is blocking my ports, or maybe port trunking . there is alot involved here, or maybe I am no bringing this up in right order, I have already tried with newer Nx9k images as well, and it throws exact same error and lacp does not come up Thanks for trying and helping me out here, I am going to attach my current full configs here so it can be replicated if anyone wants to try @balaji.bandi
... View more
01-23-2019
08:06 AM
Here is the correct answer from GNS3 forum By joe higgins JANUARY 16TH, 2019 Okay, I see some mistakes in my instructions Do this: 1) delete the nx-osv 9000 from your gns3 workspace in your project 2) from the gns3 toolbar->Edit->Preferences->QEMU VMs->select the nx-osv 9000 in question 3) if necessary, scroll down on the right side of that popup and select Delete 4) Then you have to click Apply, or OK, and OK, and OK to get back to the gns3 workspace 5) close down gns3 6) restart gns3 7) reimport the nx-osv 9000 in question 8) IMPORTANT: close down GNS3 9) restart GNS3 10) do NOT start the nx-osv 9000, but drag it into your workspace Very important, in the ensuing video, pay extreme attention to typing in ‘y’ when you start the nx-osv 9000 and it asks you to Abort Auto-Provision If you do not type in ‘y’ in the required amount of time, the nx-osv 9000 will, by default, drop you into the loader prompt. If the nx-osv 9000 drops you into the loader prompt, then start back at step 1. If you make it to the switch# prompt switch# dir switch# show version switch# conf t Enter configuration commands, one per line. End with CNTL/Z. switch(config)# boot nxos bootflash:nxos.7.0.3.I2.2d.bin <--- Note: use correct image name from "dir" command output switch(config)# copy r s [########################################] 100% Copy complete. switch(config)#end switch#reload When it reloads you should be at the switch prompt and not go through the abort auto-provisioning stuff.
... View more
01-22-2019
10:28 PM
I have attached my main config file to actual post/question. NX-OSv9k-1# sh vpc Legend: (*) - local vPC is down, forwarding via vPC peer-link vPC domain id : 1 Peer status : peer adjacency formed ok vPC keep-alive status : peer is alive Configuration consistency status : success Per-vlan consistency status : success Type-2 consistency status : success vPC role : primary Number of vPCs configured : 1 Peer Gateway : Disabled Dual-active excluded VLANs : - Graceful Consistency Check : Enabled Auto-recovery status : Enabled, timer is off.(timeout = 240s) Delay-restore status : Timer is off.(timeout = 30s) Delay-restore SVI status : Timer is off.(timeout = 10s) Operational Layer3 Peer-router : Disabled vPC Peer-link status --------------------------------------------------------------------- id Port Status Active vlans -- ---- ------ ------------------------------------------------- 1 Po1 up 1 vPC status ---------------------------------------------------------------------------- Id Port Status Consistency Reason Active vlans -- ------------ ------ ----------- ------ --------------- 10 Po10 down* Not Consistency Check Not - Applicable Performed Please check "show vpc consistency-parameters vpc <vpc-num>" for the consistency reason of down vpc and for type-2 consistency reasons for any vpc. ========= NX-OSv9k-1# show running-config int po1 !Command: show running-config interface port-channel1 !Time: Wed Jan 23 06:27:55 2019 version 7.0(3)I7(1) interface port-channel1 description VPC Peer-Link switchport mode trunk spanning-tree port type network vpc peer-link ============== NX-OSv9k-2# show run interface po10 !Command: show running-config interface port-channel10 !Time: Wed Jan 23 06:28:02 2019 version 7.0(3)I7(1) interface port-channel10 switchport mode trunk vpc 10
... View more
11-11-2019
I am adding a ACL rule on ASA, but when I do that, it goes at the bottom
after the deny statement, t...
10-04-2019
What command or commands I can run to see port to asic mapping?
C7009N7K-M224XP-23LN7K-F348XP-25
07-01-2019
Hi- I added a new access list statement, but it went after deny. The
only way I had to move was usin...
05-23-2019
In my network, and I want to get better understanding of vlan/hsrp/and
SVI here I have a vlan 123, a...
05-21-2019
I also found this command for more refined result from other post.#show
running-config object networ...
05-21-2019
so it partially helps, appreciate that. But it still show lines with
text containing word object-gro...
05-17-2019
Hi Say I have a object host IP, and I want to see under which object
group it belongs to. if I do sh...
04-03-2019
Yes this in gns3, I do have vlan10 configured on both switchesI do not
have anything in mac address ...
04-02-2019
All I want is to ping across both PCs in vlan 10 but I cannot, what am I
missing here?SW1#show runni...
01-27-2019
Super! that exactly was the issue, I followed the instructions to
resolve the bug. Thanks @francesco...
01-26-2019
Hello All GNS3 user, new to virl labs. I am using Devnet available (free
sandboxes) to learn and get...
01-25-2019
(above is the new diagram) I have made my topology more smaller,My vpc
is up and so is my vpc peer-k...
01-24-2019
@Francesco Molino I am using GNS3I have a feeling as well that this is
more of spanning tree issue o...
01-23-2019
Here is the correct answer from GNS3 forum By joe higginsJANUARY 16TH,
2019Okay, I see some mistakes...
Public Statistics
| Date Registered | 03-05-2016 12:54 PM |
| Date Last Visited | 11-13-2019 12:39 AM |
| Total Messages Posted | 45 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 20 | |
| 5 | |
| 5 | |
| 5 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Cisco Employee"){kind=icon}
