I am trying to configure a remote access vpn on ISR 4331 router with ipbase and sec licenses.   The problem is that the webvpn command is not recognized.   Anyone have any idea or a tested  configuration example.   Thx ... View more

Dears,   i am having a problem that the VPN session keeps disconnecting and the following log message appears: %CERM-4-TUNNEL_LIMIT: Maximum tunnel limit of 225 reached for Crypto functionality with securityk9 technology package license.   please find the show crypto eli brie below:   INT#sh crypto eli all Hardware Encryption : ACTIVE Number of crypto engines = 3 CryptoEngine IOSXE-ESP(9) details: state = Active Capability : DES, 3DES, AES, GCM, GMAC, IPv6, GDOI, FAILCLOSE IPSec-Session : 471 active, 10240 max, 0 failed CryptoEngine Software Crypto Engine details: state = Active Capability : IPPCP, DES, 3DES, AES, SEAL, GCM, GMAC, RSA, IPv6, GDOI, FAILCLOSE, HA IKE-Session : 90 active, 10340 max, 0 failed IKEv2-Session : 21 active, 10340 max, 0 failed DH : 2 active, 5170 max, 0 failed IPSec-Session : 0 active, 1000 max, 0 failed SSL support : Yes SSL versions : SSLv3.0, TLSv1.0, DTLSv1.0, DTLS-pre-rfc, TLSv1.1, TLSv1.2 Max SSL connec: 1000 SSL namespace : 1 SSLv3.0 suites: TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLSv1.0 suites: TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA DTLSv1.0 suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA CryptoEngine act2 details: state = Active Capability : RSA     Do i have to consider the HSEC license? any idea   thank you ... View more

Dears.   I have a catalyst 9407 switch,with SUP-1XL which i tried to insert a GLC-LH-SMD tranciever into it. The tranciever was detected as "inserted", but when i connect the fiber cable to it, it just did not came up.   Any idea ... View more

Dears,   I have configured motion detection events to send me an email once there is detected motion on the cameras.   Now, i do receive email from VSOM, but it is always grouped and it is not sending the emails in real time.   Example: DEVICE SECURITY ALERT Alert Time Device Name Alert Description Tue Jan 30 23:28:37 EET 2018 IP-CAM- Motion started on IP-CAM- - Window_0 Tue Jan 30 23:28:37 EET 2018: Motion started on IP-CAM-- Window_0 Tue Jan 30 22:59:00 EET 2018 IP-CAM- Motion started on IP-CAM- - Window_0 Tue Jan 30 22:59:00 EET 2018: Motion started on IP-CAM-2 - Window_0 Tue Jan 30 22:59:00 EET 2018 IP-CAM- Motion started on IP-CAM--1 - Window_0 Tue Jan 30 22:59:00 EET 2018: Motion started on IP-CAM--1 - Window_0 Tue Jan 30 21:50:15 EET 2018 IP-CAM- Motion started on IP-CAM--2 - Window_0 Tue Jan 30 21:50:12 EET 2018: Motion started on IP-CAM--2 - Window_0 Tue Jan 30 21:47:42 EET 2018: Motion started on IP-CAM--2 - Window_0 Tue Jan 30 21:50:12 EET 2018 IP-CAM- Motion started on IP-CAM--1 - Window_0 Tue Jan 30 21:50:12 EET 2018: Motion started on IP-CAM--1 - Window_0 Tue Jan 30 21:47:42 EET 2018: Motion started on IP-CAM--1 - Window_0 Tue Jan 30 21:18:49 EET 2018 IP-CAM- Motion started on IP-CAM-S - Window_0 Tue Jan 30 21:18:47 EET 2018: Motion started on IP-CAM- - Window_0 Tue Jan 30 21:12:34 EET 2018 IP-CAM--2 Motion started on IP-CAM--2 - Window_0 Tue Jan 30 21:12:34 EET 2018: Motion started on IP-CAM--2 - Window_0 Tue Jan 30 20:48:22 EET 2018 IP-CAM- Motion started on IP-CAM-- Window_0 Tue Jan 30 20:48:21 EET 2018: Motion started on IP-CAM- - Window_0 Tue Jan 30 20:41:21 EET 2018 IP-CAM--2 Motion started on IP-CAM--2 - Window_0 Tue Jan 30 20:41:21 EET 2018: Motion started on IP-CAM--2 - Window_0 Tue Jan 30 20:36:52 EET 2018: Motion started on IP-CAM--2 - Window_0 Tue Jan 30 18:09:41 EET 2018 IP-CAM--2 Motion started on IP-CAM--2 - Window_0 Tue Jan 30 18:09:41 EET 2018: Motion started on IP-CAM--2 - Window_0 There are 6 more alerts.   any idea?? ... View more

Dears,   I have uploaded the 7.10 image (Cisco_VSM-7.10.0-205i-rhel6.zip), but when i try to install it, a message says "Video Surveillance Operations Manager Operation failed: VSOM server is not upgradable, cannot upload/install software to UMS".   i will try to attach screen shots.   Thx in advance     ... View more

Dears. I have 15 APs (2800 & 2700) installed, discovered by the controller and in REG operational status. After i tried to move them to a certain group (WLAN Group) they got disconnected and i am unable to reach them to collect logs as they are installed in a remote location, And i do not have tier username and password. Now i tried to recover one of them, after i recovered it from the ap: mode, i tried to re-associate it with the controller and after the image download was finished, it took the previous name that was assigned to it before the recovery, and again it still undiscovered and keeps downloading. I have also tried to delete the created WLAN group, with no hope. Any idea ... View more

Good Day, I have a nexus 9K that acts as a core switch and a DHCP server (windows based) is connected to it, Now clients are able to reach the DHCP server and obtain an IP Address. My case is we want to isolate some VLANs on a ASA, So, we did create interfaces on the FW in Port-Channel setup, Then VLANs interfaces were deleted from the Core Switch, (Only layer 2 VLANs are still on the Core Switch), access-lists for now are permit ip any any on all the interfaces on the FW. Routes were added to the CS and the FW, Now the users are unable to obtain an IP Address from the DHCP server when its gateway is on the FW. Users that has their gateway on the CS or the FW are unable to obtain IP Addresses. I have also tried to debug DHCP packets on the FW, And there is no result shown. Any idea? ... View more

Good Day, I have a nexus 9K that acts as a core switch and a DHCP server (windows based) is connected to it, Now clients are able to reach the DHCP server and obtain an IP Address. My case is we want to isolate some VLANs on a ASA, So, we did create interfaces on the FW in Port-Channel setup, Then VLANs interfaces were deleted from the Core Switch, (Only layer 2 VLANs are still on the Core Switch), access-lists for now are permit ip any any on all the interfaces on the FW. Routes were added to the CS and the FW, Now the users are unable to obtain an IP Address from the DHCP server when its gateway is on the FW. Users that has their gateway on the CS or the FW are unable to obtain IP Addresses. I have also tried to debug DHCP packets on the FW, And there is no result shown. Any idea? ... View more