I am trying to identify a more robust BGP solution for a customer's network. We currently have a need to increase the number of BGP sessions we can handle and I am interested in hearing any experience that can be shared related to setting up and maintaining route servers. I have googled extensively and have found very little information on what software packages are better then the other, etc. Does cisco have a software solution for this outside of the traditional IOS offerings? Any input would be greatly appreciated. Thanks, James ... View more

I have looked high and low and am unable to find anything on this topic. I am hoping that somebody here may be able to share some insight into what are considered the best practices for monitoring ASA's--specifically the 5510 with Sec+ License. My current monitoring application keeps reporting issues with outbound interface buffers being too high, but there are not any performance issues and I believe the thresholds are just set absurdly low. Thank you in advance for any assistance. ... View more

I have two 4900's that are core switches with various vlans on them. One of these vlans has an edge router and a firewall connected on each core switch and the vlan is allowed on the trunk between the 4900's. So 4900#1 and 4900#2 both have vlan xyz1 with two ports assigned to this vlan. There is a firewall in one port and an edge router in the other port so they may communicate rather than them being directly connected. Then the VLAN is allowed on the trunk between the two cores. The subnet is a /28 to accommodate the devices in the "DMZ". I have been advised that we should implement a VACL to further secure the traffic in this vlan. Can anyone explain how or why we would do this? Thank you!!! ... View more

I currently have 1 nortel 5510 switch connected via ether channel to a 4948 which is then connected to another Nortel 470-48T via a single 1Gb uplink. Attached to the 5510 is a server that sends multicast traffic for an application and a server connected to the 470 that needs to receive the multicast traffic. I enabled IGMP on all my vlans (the two servers reside in the same vlan) last week and now the client is not receiving that multicast traffic. I have configured vlan 1 on my 4948 to be a member of the multicast group 234.5.6.7. I can see the multicast traffic coming out of the 5510 switch if I mirror the uplink ports, but if I mirror the ports on the 4948 side, I dont see the traffic actually coming into the switch. Can anyone point me in the right direction here? Thank you in advance! James ... View more

Is there anyone that knows or can test in a lab what would happen if a tech mistakingly added "switchport voice vlan XX" to a trunk port? I am try to do some RCA on an issue and this has been identified as a possible cause by one of my techs. The config is Switch1------Switch2--------Switch3 Each interswitch connection is configured as a dot1q trunk with all vlans allowed. The link between switch2 and 3 is where switchport voice vlan 10 was added. Switch1 is a 3750 and 2/3 are 3560's. Thank you in advance. James ... View more

I have an MPLS connection to a client and we are running OSPF over the MPLS connection. My client swears up and down that they are advertising a particular network but it does not appear in my OSPF database on my ASA 5510.  I am receiving several other networks and have them in my database & routing table, but the network in question does not appear anywhere on my device unless I add a static route. Is there any way that I can verify that they are or are not actually advertising this network. I'm not sure if there may be a show ospf "something" command that will show additional information or if I can run a packet capture and see the raw data somehow, etc--anything! I have already run a capture but only get OSPF hello packets so I am assuming I would need to restart the OSPF process to re-establish the neighbor relationship and see advertised routes, but I am not sure about that. Any help/suggestions are much appreciated. Thanks!!! James ... View more

We are attempting to connect Cisco ICM to our Nortel Symposium/CCMS 6 server, BUT the two devices are separated by a firewall. I have been able to find documentation regarding the multicast configuration on the Nortel side, but nothing using unicast through a firewall. Has anyone attempted this before, or does anyone know of documentation for port/firewall requirements between the two devices? Thanks, James ... View more

I have searched all over Cisco & Google and havent found anything that tells me straightforward what features are included with the ASA5540-BUN-K9 as opposed to just the ASA5540-K8. The only difference I can tell is 3DES/AES. I am concerned with being able to run the firewalls in an A/A configuration and possibly doing VPN clustering. In addition, what upgrade licenses would I need to be able to run more than 2 security contexts? Any help or links would be greatly appreciated. Thanks! James ... View more