I am setting up ospf between area 1 and area 0 along with 2 9500 switches that are connected to both area 1 and area 0. 9500A and 9500B are connected on the same vlan that is part of area 1, however I need 9500B to prefer the area 0 routes learned from the 9500A rather than 9500B.  Other than creating a 2nd vlan that will neighbor up the switches together on area 2, is there a way to get this done?   ... View more

I have an issue where I need to setup a router for area 1 but it will be connected to 2 area 0 routers   Essentially it will be area 0 <--> area 1 <--> area 0, and both area 0 routers will not be connected to each other in anyway.  Is this something that is possible? ... View more

I have a flexvpn solution so anyconnect will use ikev2: crypto ikev2 authorization policy xxxxx pool xxxxx dns xxxxx netmask 255.255.255.220 include-local-lan aaa attribute list isakmpxxxxprofile route set access-list xxxx-access-list   ip access-list standard xxxx-access-list permit 0.0.0.0 127.255.255.255 permit 128.0.0.0 127.255.255.255   problem is my users cannot access their home printers and other local lan devices.  Is there a way to tunnel all traffic but still give them access to their local lan devices? ... View more

I am unable to get the migration tool working from ACS 5.8 to ISE 2.4.  I am constantly getting this error message: Error occurred while communicating to ACS 5.x. (404)Not Found I enabled migration on the ACS. I added the certificate to my machine (even though I keep getting certificate errors when browsing to IE) I added the certificate to the migration tool   I keep getting the following error message: Error occurred while communicating to ACS 5.x. (404)Not Found   Any idea why I keep getting this? ... View more

does anyone know the default login for cisco ise evaluation when using the ova? ... View more

Since the next gen firewalls do not handle easyvpn that well we are looking for an easyvpn replacement that will work with ASAs and ISR routers that host vpn.  I looked on the meraki route however I am told that meraki's only work if the other firewall is a meraki (this is not going to change).  Has anyone used an alternative method to EasyVPN? ... View more

As of right now I have a bunch of ASA 5505's at users homes connecting to the network using easyvpn. However due to certain issues with the ASA 5506 I am looking to see if there is something better to suite my needs.  I know Palo Alto and Sophos have an option to setup a firewall as a ssl vpn client, which is also a lot more secure as well as no longering using antiquited ipsec technology.  Is there a way to have an ASA or a Router or some other cisco device to act as an Anyconnect client or a SSL VPN client?     ... View more

I have a client that does not want to do this on his ASA, he instead wants this setup on a 3850 switch.  They basically are trying to create a DMZ vlan, VLAN 10.  The servers are on VLAN 5.  They want VLAN 5 to have full access to VLAN 10, but VLAN 10 to have no access at all to VLAN 5.   I know on an ASA this is really simple but on a switch I am not sure, and also setting up zone based firewall on this switch is not an option. ... View more

I have a Nexus 5000 to a trunk to Nexus 9000 My trunk to the switch is configured as: interface port-channel1 description uplink to Nexus9372 switchport mode trunk speed 10000 We purposely want Vlan1 to show up as untagged, however vlan 1 is not showing up in the STP Forwarding state.  However VTP feature is not on on the 5000 but is setup and configured in transparent mode on the 9000 I have the exact same config on another 5000 trunked to 9000, except vtp is enabled and setup as transparent on both the 5000 and 9000.  Please let me know if vtp needs to be setup on the 5000 for vlan 1 to be carried over untagged? Thanks ... View more