Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Peter Lyttle
Stats
Member since
11-25-2011
29
Posts
5
Helpful
0
Solutions
12-04-2015
02:05 AM
Ah ok, I'd hoped there would be a way to do it at the router, different VLAN it is!
... View more
Created by
Peter Lyttle
in Switching
in Switching
12-03-2015
02:37 AM
12-03-2015
02:37 AM
Hello,
I'm currently looking at this issue where I want to maintain my vlan but change IP Addresses (gradually). My vlan looks as follows and all works well, however I want to add a secondary IP Address for my new range with ip helper-address for that new network. Does anyone know how I can have hosts on the 10.217.4.1 subnet go to the 10.217.1.10 dhcp server and not the one of the primary address (10.218.1.10)?
interface Vlan10 ip address 10.21 8 .4.1 255.255.254.0 ip helper-address 10.21 8 .1.10 ##ip address 10.217 .4.1 255.255.254.0 secondary ##ip helper-address 10.217 .1.10
Thanks,
Peter
... View more
Labels:
07-09-2015
02:55 AM
FYI, private patch a_patch_900_9948.jar was issued by Citrix which looks to return values when a device is out of compliance now.
... View more
06-01-2015
02:51 AM
Citrix have advised that a patch will be required due to the changed format of the API request from Cisco ISE 1.4 to XenMobile. I will update later with the patch number (likely a private patch)
... View more
Created by
Peter Lyttle
in Policy and Access
in Policy and Access
05-30-2015
05:17 AM
05-30-2015
05:17 AM
Hi, Has anyone seen an issue with Cisco ISE 1.4 failing compliance checks with Citrix XenMobile 9.0 (patch 9996 & 9989 installed). From decrypting the HTTPS sessions ISE 1.3 looks to have sent the request in the following format - http://xenmobile.domain/zdm/ciscoise/devices/0/macaddress/<MAC>/all - this would return <? xml version = "1.0" encoding = "UTF-8" standalone = "yes" ?> <ise_api> <name> attributes </name> <api_version> 1 </api_version> <paging_info> 0 </paging_info> <deviceList> <device> <macaddress> <MAC> </macaddress> <attributes> <register_status> true </register_status> <compliance> <status> false </status> <failure_reason> Device out of compliance </failure_reason> <remediation> Device out of compliance to policy... Please contact your Administrator </remediation> </compliance> <disk_encryption_on> true </disk_encryption_on> <pin_lock_on> false </pin_lock_on> <jail_broken> false </jail_broken> <manufacturer> Apple </manufacturer> <serial_number> <SERIAL> </serial_number> <os_version> iOS </os_version> <model> iPad </model> <phone_number /> </attributes> </device> </deviceList> </ise_api> However in Cisco ISE 1.4 it seems to send the format - http://xenmobile.domain/zdm/ciscoise/devices/0/compliance/false/all which returns the following (if a device is compliant or not) <? xml version = "1.0" encoding = "UTF-8" standalone = "yes" ?> <ise_api> <name> attributes </name> <api_version> 1 </api_version> <paging_info> 0 </paging_info> <deviceList> <device> <attributes> <compliance /> </attributes> </device> </deviceList> </ise_api> Has anyone seen this or got a fix for it? Thanks, Peter
... View more
Labels:
02-06-2013
02:38 AM
Ahh nice one thanks. I'll speak with the guys and see what they are thinking as we'd hoped it was a checkbox we'd missed somewhere.
... View more
02-04-2013
08:45 AM
Hello, This may be seen as a very basic question but is it possible on a per User basis (9971/7965) running Call Manager 8.5 to translate an inbound number eg 90791234567 into Blogs, Joe (Mobile) on the screen display? I guess if you used LDAP and did a sync but this would require a user created in AD to be pulled in (not an option) as it would require admin work. Just a query I've had for some time. Thanks, Peter
... View more
Labels:
09-04-2012
03:07 AM
Hello Alain, Thanks for your help. Sorry I missworded that, If 1 fails I still want to advertise the route (to protect against an outage outside of ourselves, i.e. 8.8.8.8 or 8.8.4.4 being down) only if they ALL fail should the route be removed from being advertised. I hope this makes it a little clearer?
... View more
09-04-2012
02:06 AM
Update: I also wanted to ensure that the 1.1.1.1 BGP peer was only being sent 1 route and not allowed to receive any routes from 1.1.1.1 (to avoid private addresses leaking). That was why I added the bit in bold at the bottom ip local policy route-map SLA ip route 0.0.0.0 0.0.0.0 2.2.2.2 track 10 ! track 1 ip sla 1 track 2 ip sla 2 track 3 ip sla 3 track 4 ip sla 4 track 10 list boolean or object 1 object 2 object 3 object 4 ip sla 1 icmp-echo 8.8.8.8 source-interface Fa0/0 timeout 2000 frequency 10 ip sla 2 icmp-echo 8.8.4.4 source-interface Fa0/0 timeout 2000 frequency 10 ip sla 3 tcp-connect 8.8.8.8 port 53 source-interface Fa0/0 timeout 2000 frequency 10 ip sla 4 tcp-connect 8.8.4.4 port 53 source-interface Fa0/0 timeout 2000 frequency 10 ! ip sla schedule 1 life forever start-time now ip sla schedule 2 life forever start-time now ip sla schedule 3 life forever start-time now ip sla schedule 4 life forever start-time now ! access-list 100 permit icmp any host 8.8.8.8 access-list 100 permit icmp any host 8.8.4.4 access-list 100 permit tcp 8.8.8.8 destination-port eq 53 access-list 100 permit tcp 8.8.4.4 destination-port eq 53 ! route-map SLA permit 10 match ip address 100 set ip next-hop 10.1.13.3 route-map ALLOW_OUT permit 10 match ip address prefix-list DEFAULT_ONLY route-map DENY_IN permit 20 match ip address prefix-list DENY_IN ! router bgp XXXX redistribute static neighbor 1.1.1.1 remote-as 65000 default-information originate bgp log-neighbor-changes timers bgp 7 21 neighbor 1.1.1.1 description BGP Internet Peer for Default Route neighbor 1.1.1.1 next-hop-self neighbor 1.1.1.1 route-map ALLOW_OUT out neighbor 1.1.1.1 route-map DENY_IN in ! ip prefix-list DEFAULT_ONLY seq 5 permit 0.0.0.0/0 ip prefix-list DEFAULT_ONLY seq 10 deny 0.0.0.0/0 ge 1 ip prefix-list DENY_IN seq 5 permit 0.0.0.0/0
... View more
09-04-2012
01:54 AM
Hi Alain, I want to advertise the route if any of the SLA tests are successful (therefore removing it if they fail) or I want to remove the route if any of the SLA tests fail I'm not sure which would be the best way to look at it?
... View more
09-03-2012
07:34 AM
Hello, I've been trying to work this out for a while so any guidance would be much appreciated. Basically I want to provide my ISP with a list of commands which they would run on their CE router to enable the IP SLA tracking of a few IPs and perform an action (advertise the 0.0.0.0/0 default route to my peer) based upon the result of the IP SLA check. I only want to advertise out 0.0.0.0/0 and receive nothing inbound. I want the IP SLA action only to be performed if all 4 actions fail, not just 1. I'm a bit rusty on the route-maps as I've never done them in production on Cisco IOS devices and also dont have any device to test this on. router bgp 1111 bgp log-neighbor-changes timers bgp 7 21 redistribute connected neighbor 1.1.1.1 remote-as 65000 neighbor 1.1.1.1 description BGP Internet Peer for Default Route neighbor 1.1.1.1 next-hop-self neighbor 1.1.1.1 route-map ALLOW_OUT out neighbor 1.1.1.1 route-map DENY_IN in ! route-map ALLOW_OUT permit 10 match ip address prefix-list DEFAULT_ONLY set ip next-hop verify-availablility 8.8.8.8 1 track 10 set ip next-hop verify-availablility 8.8.4.4 2 track 11 set ip next-hop verify-availablility 8.8.8.8 5 track 14 set ip next-hop verify-availablility 8.8.4.4 6 track 15 route-map DENY_IN permit 20 match ip address prefix-list DENY_IN ! ip prefix-list DEFAULT_ONLY seq 5 permit 0.0.0.0/0 ip prefix-list DEFAULT_ONLY seq 10 deny 0.0.0.0/0 ge 1 ip prefix-list DENY_IN seq 5 permit 0.0.0.0/0 ! ip sla 10 icmp-echo 8.8.8.8 source-interface Fa0/0 frequency 10 ip sla 11 icmp-echo 8.8.4.4 source-interface Fa0/0 frequency 10 ip sla 14 tcp-connect 8.8.8.8 port 53 source-interface Fa0/0 frequency 10 ip sla 15 tcp-connect 8.8.4.4 port 53 source-interface Fa0/0 frequency 10 ! ip sla monitor group schedule 10-15 start-time now life forever ! track 10 ip sla 10 track 11 ip sla 11 track 14 ip sla 14 track 15 ip sla 15 Anyone got any feedback (good or bad) please? Thanks, Peter
... View more
Labels:
Created by
Peter Lyttle
in Switching
in Switching
08-06-2012
04:06 AM
08-06-2012
04:06 AM
Hello, All the physical ports are connected to the same host. It turns out that is was being caused by having LACP enabled rather than "on". LACP is only supported on Nexus 1000. http://communities.vmware.com/message/2093238#2093238 After changing from "active" to "on" the flapping has stopped happening. Hope this helps someone else.
... View more
Created by
Peter Lyttle
in Switching
in Switching
08-06-2012
02:47 AM
08-06-2012
02:47 AM
Hi Sandeep, Yea I had applied portfast as I know the vDS wont cause an L2 loop and should bring the ports up faster on boot etc. If I have a virtual machine sitting on my ESXi hosts and have Route Based on IP Hash configured along with the above switch config. I would expect the MAC address to be shown on all interfaces that are members of the port-channel and therefore to see the MAC, I just didnt expect the switch to complain about it (as I thought this is how it should work). Or am I misunderstanding something?
... View more
Created by
Peter Lyttle
in Data Center Switches
04-19-2016
04-19-2016
Hello,We're looking at installing a couple of Nexus 7702 devices in our
DC and we had planned two di...
12-03-2015
Hello, I'm currently looking at this issue where I want to maintain my
vlan but change IP Addresses ...
07-09-2015
FYI, private patch a_patch_900_9948.jar was issued by Citrix which looks
to return values when a dev...
06-01-2015
Citrix have advised that a patch will be required due to the changed
format of the API request from ...
05-30-2015
Hi, Has anyone seen an issue with Cisco ISE 1.4 failing compliance
checks with Citrix XenMobile 9.0 ...
02-06-2013
Ahh nice one thanks. I'll speak with the guys and see what they are
thinking as we'd hoped it was a ...
02-04-2013
Hello,This may be seen as a very basic question but is it possible on a
per User basis (9971/7965) r...
09-04-2012
Hello Alain,Thanks for your help. Sorry I missworded that, If 1 fails I
still want to advertise the ...
09-04-2012
Update: I also wanted to ensure that the 1.1.1.1 BGP peer was only being
sent 1 route and not allowe...
09-04-2012
Hi Alain,I want to advertise the route if any of the SLA tests are
successful (therefore removing it...
09-03-2012
Hello,I've been trying to work this out for a while so any guidance
would be much appreciated.Basica...
Created by
Peter Lyttle
in Switching
08-06-2012
08-06-2012
Hello,All the physical ports are connected to the same host. It turns
out that is was being caused b...
Public Statistics
| Date Registered | 11-25-2011 02:46 AM |
| Date Last Visited | 10-31-2017 01:28 PM |
| Total Messages Posted | 29 |
| Total Helpful Votes Received | 5 |
