Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Looks like the auto NAT rule is catching the RA VPN traffic unexpectedly. Compare the NAT order with the working FTD and run a packet tracer to confirm exactly which rule is being hit. An identity/NAT exemption for the VPN traffic may be needed.
Check show route 6.6.6.6/32 detail on R4-XR first. If the route isn’t installed with a valid recursive next-hop, XR won’t allocate an MPLS label for it. send-label alone doesn’t guarantee label allocation—the route must also be label-eligible and pro...
Option 2 is probably the most common approach: keep the customer in their own VRF and advertise only a default route toward the Internet instead of the full routing table. Route leaking is also common when controlled access between VRFs is needed, wh...
Nice set of improvements. The Docker image download, clearer CSV-limit errors, and scheduled-report retries are particularly useful for admins. The Destination List alerts are another welcome addition for preventing capacity issues.
Primero resolvería el routing entre A-B-C y comprobaría la conectividad de todas las subredes. Después implementaría QoS, ya que crear VLANs por sí solo no garantiza 90/10 Mbps.Como A→C pasa por B, el QoS debe contemplar ambos enlaces. Los firewalls ...