Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About yongaik
Stats
Member since
12-05-2000
12
Posts
5
Helpful
0
Solutions
10-30-2017
01:03 AM
It depend on what is configured for ACL 101. You up permit the traffic mentioned.
Beside, If you trying to allow the return traffic for any outbound ping from host in the 10.44 network to host in the 192.168 subnet. Using that "ip inspect outbound out" , it should be apply at G0/0 instead.
hope i undertstand your requirement correctly.
... View more
10-30-2017
12:57 AM
you resolve (ping or nslookip) those URL to their IP addresses, then just apply it a permitted destination in the ACL policies. That basically the way.
But It is also a very unreliable way as many URL (actually FQDN) are hosted/fronted by CDN caches in the internet which mean they use quite a number of different ip addresses (of different subnet blocks). Many of them also quite dynamic (change frequently) in natural so trying to manually tracked it is not reliable mostly. The right way to block destination by URL should be performed on your web security gateway (i.e forward we proxy) instead.
... View more
10-30-2017
12:26 AM
The frame buffer are those egress queues on the switch port. Each switch port are designed to equipped with enough memory buffer to support the port speed (e.g. 10Gbps) and max frame sizes (e.g. jumbo frame 9000) so that it don't get overrun by operation.
Egress drops (due to buffer overun) happen if there is a backpressure coming from the other end (e.g. NIC of the server connected) due to some sw/hw issue preventing the receiving end (e.g. server) nic are processing the incoming frame quick enough. That is considered exception to the desired operation.
... View more
10-30-2017
12:10 AM
Normally simplex, half-duplex ot full-duplex in networking term will describe those one to one (i.e. ethernet NIC to switch-port or NIC to NIC, etc). For UDP, it can be sent in both directions simultaneously so you can refer it a full-duplex if you like, the typical significant characteristic about UDP is that is it connectionless protocol that do not perform acknowledgement to receiving of packets to the sender, as compared to TCP which is connection orientated.
... View more
Created by
yongaik
in VPN and AnyConnect
in VPN and AnyConnect
08-31-2010
08:12 AM
08-31-2010
08:12 AM
Any insight on the roadmap for this case? I mean will AIM-VPN on c3845 support SHA256 in hardware with IOS upgrade in the near future? Or this is not upgradeable ASIC feature on the AIM-VPN module..
... View more
Created by
yongaik
in VPN and AnyConnect
in VPN and AnyConnect
08-31-2010
01:29 AM
08-31-2010
01:29 AM
Setting DMVPM WAN for customer with Cisco 3845 (AIM-VPN) on the hub site. Cisco 2811 on the spoke sites. Checked IOS feasture guide; it mentioned IOS 15.1(2)T support IKE policy with the sha256 / sha384 hash algorithm ; crypto isakmp policy 15 hash sha256 exit it also mentioned IOS 15.1(2)T support IKEv2 proposal with the sha256 / sha384 integrity algorithm ; Checked CCO product datasheet on AIM-VPN/SSL-3 module; it mentioned that ; All AIM-VPN modules support IPSec DES and 3DES; Authentication: Rivest, Shamir, and Adelman (RSA) and Diffie Hellman; data integrity: Secure Hash Algorithm 1 (SHA-1) and Message Digest Algorithm 5 (MD5); and DES, 3DES, and AES key sizes: AES128, AES192, and AES256. Question1: With IOS 15.1(2)T on c3845 with AIM-VPN module, can i run DMVPN with IKE/IPSEC transform-set parameter using AES256 & SHA256 ? Questiion2: If it is supported, it is done on the hardware AIM-VPN or it will be software processed by the c3845 main CPU? What is the expected performance (pps/Mbps) in a software processing case? integrity {sha1 | sha256 | sha384 | md5}
... View more
- Tags:
- crypto_ike_3845
Labels:
08-26-2009
08:09 PM
Is buffer autotuning feature supported on Cat6509 with VS720? Will it impact service on the switch during execution?
... View more
08-26-2009
12:16 AM
understand that "show buffer" on most Cisco routers (e.g c3845) list the memory buffer that hold the packets to be processed by the software CPU like in situation of process switched traffic. In a Cat6500 with VS720 engine. What did the "show buffer" output provide? I had a cat6509 that give the following: It indicate 2 "Huge" buffers allocated by only 1 in free-list all the time.. Also there are some misses counts.. Is there a concern for this case? #sh buffers ... Huge buffers, 18024 bytes (total 10, permanent 2, peak 10 @ 7w0d): 1 in free list (1 min, 13 max allowed) 6400 hits, 4 misses, 0 trims, 8 created 0 failures (0 no memory)
... View more
Labels:
Created by
yongaik
in Other Collaboration Subjects
in Other Collaboration Subjects
08-03-2004
09:40 AM
08-03-2004
09:40 AM
How to get ip phone 7970 register to CCM 3.1.4b? It is possible?
... View more
Labels:
Created by
yongaik
in Other Network Architecture Subjects
in Other Network Architecture Subjects
09-25-2002
10:11 PM
09-25-2002
10:11 PM
we had Catalyst 3550 link to Black Diamond Switch which STP priority are set to 0. By setting cat3550 vlan STP priority to 32768, the cat3550 still become the vlan STP root bridge. Any way to prevent cat3550 from becoming the root here??
... View more
Labels:
11-28-2001
12:35 AM
Unity 2.4.6.135 fail to start after we setup the AvciscoTsp driver for integration. How to solve this problem?<br><br>
... View more
Labels:
Created by
yongaik
in Other Collaboration Subjects
in Other Collaboration Subjects
11-26-2001
05:39 AM
11-26-2001
05:39 AM
After installing exchange 5.5 (with sp4) on win2k sp2 machine. I try to run setup for unity 2.4.6.135 but alway get a abort message indicating "ldap is not enabled on the exchange site". I check the exchange setup but it was already enable. Please help me. Thanks<br><br>
... View more
Labels:
10-30-2017
It depend on what is configured for ACL 101. You up permit the traffic
mentioned. Beside, If you try...
10-30-2017
The frame buffer are those egress queues on the switch port. Each switch
port are designed to equipp...
10-30-2017
Normally simplex, half-duplex ot full-duplex in networking term will
describe those one to one (i.e....
Created by
yongaik
in VPN and AnyConnect
08-31-2010
08-31-2010
Any insight on the roadmap for this case?I mean will AIM-VPN on c3845
support SHA256 in hardware wit...
Created by
yongaik
in VPN and AnyConnect
08-31-2010
08-31-2010
Setting DMVPM WAN for customer with Cisco 3845 (AIM-VPN) on the hub
site. Cisco 2811 on the spoke si...
08-26-2009
Is buffer autotuning feature supported on Cat6509 with VS720? Will it
impact service on the switch d...
08-26-2009
understand that "show buffer" on most Cisco routers (e.g c3845) list the
memory buffer that hold the...
Created by
yongaik
in Other Collaboration Subjects
08-03-2004
08-03-2004
How to get ip phone 7970 register to CCM 3.1.4b? It is possible?
Created by
yongaik
in Other Network Architecture Subjects
09-25-2002
09-25-2002
we had Catalyst 3550 link to Black Diamond Switch which STP priority are
set to 0. By setting cat355...
11-28-2001
Unity 2.4.6.135 fail to start after we setup the AvciscoTsp driver for
integration. How to solve thi...
Public Statistics
| Date Registered | 12-05-2000 07:04 PM |
| Date Last Visited | 08-31-2018 12:01 AM |
| Total Messages Posted | 12 |
| Total Helpful Votes Received | 5 |
