Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
You’ll need to request an official 10-year support and spare-parts confirmation directly from Cisco or an authorized partner for these exact part numbers.
Looks like the auto NAT rule is catching the RA VPN traffic unexpectedly. Compare the NAT order with the working FTD and run a packet tracer to confirm exactly which rule is being hit. An identity/NAT exemption for the VPN traffic may be needed.
Check show route 6.6.6.6/32 detail on R4-XR first. If the route isn’t installed with a valid recursive next-hop, XR won’t allocate an MPLS label for it. send-label alone doesn’t guarantee label allocation—the route must also be label-eligible and pro...
Option 2 is probably the most common approach: keep the customer in their own VRF and advertise only a default route toward the Internet instead of the full routing table. Route leaking is also common when controlled access between VRFs is needed, wh...
Nice set of improvements. The Docker image download, clearer CSV-limit errors, and scheduled-report retries are particularly useful for admins. The Destination List alerts are another welcome addition for preventing capacity issues.
