Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have two questions about ZBF on ASR1000 with Firewall and Flexible Packet Inspection license:1 is IPv6 supported?2 can I use police action in an inspect rule? I want to limit some protocols to low bandwidth. There is no police command in ZBF policy...
Hello,I want to use IPv6 over RA VPN using AnyConnect client from Windows XP SP3. But connection is unsuccessful with error message 'The VPN client was unable to successfully verify the IP forwarding table modifications'.I know there was such bug in ...
When I boot C2801 router, it displays message :*May 19 10:08:53.983: %PA-3-PACREATE: Unable to create driver for Port Adaptor type 65535 in bay 0After booting is complete, I can not see any interface (no built-in Ethernet, no serial on WIC-2A/S).I su...
I have ASA5520 with AIP-SSM-10 and I want to send messages from IPS sensor to external syslog server. I am not able to find, how to configure it.Thanks for any hint.
I have a problem with access list on C3750 box. I want to deny all packets with IP options. Access list is as follows:5 permit igmp any any10 deny ip any any option any-options20 permit ip any anyWhen I attach this acl to the interface, almost all tr...
Hello Peter,yesterday I built this again in our lab, but no problem occured. I am not able to replicate exactly the last lab, I do not have original configurations, and there was more OSPF features turned on.Sorry for bothering you for nothing.Jiri
Hello,thank you for your explanation. I am trying it in the Dynamips now and it is working as expected Previously I have tried it on the real boxes (C2801, 12.4(24)T5).I will try it again, but I do not have original configs, Maybe it is some intermit...
Hello PeterI have read in documentation, that I can speed-up OSPF convergence by using prefix suppression feature. I tried it in our lab, but when I put in configurationrouter ospf 1 network ... prefix suppressionall OSPF networks was gone from the...
Thank you for quick response.Our testing leads to another questions:It seems that ZBF protocol inspection goes only to L4. If we put 'match protocol sip' into class-map, we are able to connect to HTTP server running on port 5060. In the session table...
Thank you, but it seems that your answer concernsIOS 12.4, and we use IOS XE: Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.0(1)S1Please can you confirm that this IOS is also IPv6 ZBF capable? Our basic testing i...
