About JIRI GRYGAREK

JIRI GRYGAREK · 03-24-2011

I have two questions about ZBF on ASR1000 with Firewall and Flexible Packet Inspection license:1 is IPv6 supported?2 can I use police action in an inspect rule? I want to limit some protocols to low bandwidth. There is no police command in ZBF policy...

JIRI GRYGAREK · 06-03-2010

Hello,I want to use IPv6 over RA VPN using AnyConnect client from Windows XP SP3. But connection is unsuccessful with error message 'The VPN client was unable to successfully verify the IP forwarding table modifications'.I know there was such bug in ...

JIRI GRYGAREK · 05-19-2008

When I boot C2801 router, it displays message :*May 19 10:08:53.983: %PA-3-PACREATE: Unable to create driver for Port Adaptor type 65535 in bay 0After booting is complete, I can not see any interface (no built-in Ethernet, no serial on WIC-2A/S).I su...

JIRI GRYGAREK · 06-07-2007

I have ASA5520 with AIP-SSM-10 and I want to send messages from IPS sensor to external syslog server. I am not able to find, how to configure it.Thanks for any hint.

JIRI GRYGAREK · 02-14-2006

I have a problem with access list on C3750 box. I want to deny all packets with IP options. Access list is as follows:5 permit igmp any any10 deny ip any any option any-options20 permit ip any anyWhen I attach this acl to the interface, almost all tr...

JIRI GRYGAREK · 10-19-2011

Hello Peter,yesterday I built this again in our lab, but no problem occured. I am not able to replicate exactly the last lab, I do not have original configurations, and there was more OSPF features turned on.Sorry for bothering you for nothing.Jiri

JIRI GRYGAREK · 10-19-2011

Hello,thank you for your explanation. I am trying it in the Dynamips now and it is working as expected Previously I have tried it on the real boxes (C2801, 12.4(24)T5).I will try it again, but I do not have original configs, Maybe it is some intermit...

JIRI GRYGAREK · 10-18-2011

Hello PeterI have read in documentation, that I can speed-up OSPF convergence by using prefix suppression feature. I tried it in our lab, but when I put in configurationrouter ospf 1 network ... prefix suppressionall OSPF networks was gone from the...

JIRI GRYGAREK · 03-25-2011

Thank you for quick response.Our testing leads to another questions:It seems that ZBF protocol inspection goes only to L4. If we put 'match protocol sip' into class-map, we are able to connect to HTTP server running on port 5060. In the session table...

JIRI GRYGAREK · 03-24-2011

Thank you, but it seems that your answer concernsIOS 12.4, and we use IOS XE: Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.0(1)S1Please can you confirm that this IOS is also IPv6 ZBF capable? Our basic testing i...

Member Since	‎04-07-2005 07:16 AM
Date Last Visited	‎07-24-2019 02:49 AM
Posts	17

User Statistics

User Activity

ASR 1000 ZBF

AnyConnect and IPv6

No interfaces recognized on C2801

AIP-SSM-10 and syslog

Access-list problem

Ask the VIP Event: Unicast IP Routing Protocols

Ask the VIP Event: Unicast IP Routing Protocols

Ask the VIP Event: Unicast IP Routing Protocols

Re: ASR 1000 ZBF

Re: ASR 1000 ZBF