We have purchased two new Nexus 3548 switches. According to documenation the Nexus 3K does support vPC. When trying to enable the feature I get this: nexus(config)# feature vpc Error: vPC feature is not supported nexus(config)# We are running software version version 5.0(3)A1(1) and it looks like the latest version is 5.0(3)A1(2) so that's not much of a difference. Am I missing something here? ... View more

Hi, I've developed a Perl REST API to process large Cisco ASA ACL's and find out of there is an existing rule to permit traffic. You may say why not use packet tracer or the ASDM but packet tracer doesn't work on transit interfaces as it can't classify the traffic and ASDM isn't an option as this script I'm writing needs to execute commands from the command line. Well known ports are automatically translated into a name. So TCP 443 will show as "https" for example. My API takes in the protocol port as a number as an input. I'm trying to find a way to convert the number into the name you will see in an ACL without manually mapping them out based on the ones I already know. Does anyone know if there is a show command to show the port name number mappings or maybe an URL with a comprehensive list of the built in mappings? I've been trawling the web looking for this and I haven't had much luck finding it. Thanks in advance. Regards, Mike ... View more

Hi all, I was wondering if it's possible on the ACS or ASA to restrict access to a policy group depending on the IP address they are coming from? For example, if I wanted users from home to connect to the outside interface of the firewall to authenticate with a token but if they are in the office to connect to the internal interface and just use LDAP. Both these options are working but this doesn't seem to stop someone from home authenticating off LDAP from home. I know that Radius has the Caller-ID field which has the IP address of the device authenticating. I was wondering if it's possible to use this information either on the ASA or ACS to add the control I need. Any ideas? Regards, Mike ... View more