Recently upgraded all 4 of our ACS appliances 5.8.1 and patches. All four stopped allowing access to the GUI around the same time. Users are still able to authenicate and i can access the CLI. Thoughts? ... View more

Hello, I am trying to locate the default queue limit for class based QOS on the ISR 4000's series routers.  Thanks ... View more

I have an odd situation. I have a 3560 switch at a remote location that hosts phones and desktops. This switch has two L3 interface vlans, one for voip and one for desktops. When I do a tracert from my desktop to the voice vlan's IP it traverses a couple desktops before it come back to the switch. When I do this going to the desktop vlan it traces straight to the switch.  G:\>tracert 10.78.13.248 Tracing route to s2z3.xx.com [10.78.13.248] over a maximum of 30 hops:   1    <1 ms    10 ms     1 ms  intf-vlan92-s3z4.x.com [10.30.92.254]   2    <1 ms    <1 ms    <1 ms  intf-gig-e-0-0-dot-8-router.x.com [10.4 .1.131]   3     2 ms     2 ms     2 ms  att-avpn-per.x.com [172.4.3.2]   4   216 ms   216 ms   216 ms  att-avpn-per.x.com [172.4.4.190]   5   222 ms   222 ms   222 ms  wan-avpn-x.com [172.4.4.189]   6     *        *      226 ms  switch.x.com [10.40.89.129]    7   226 ms   222 ms     *     pc-rdongnew.x.com[10.78.22.85]   8     *      235 ms     *     PC-NYU.x.com [10.78.20.173]   9     *        *      233 ms  PC-NYU.x.com [10.78.20.173]  10     *        *      232 ms  pc-rdongnew.x.com [10.78.22.85]  11     *      234 ms     *     pc-rdongnew.x.com [10.78.22.85]  12     *        *        *     Request timed out.  13     *        *        *     Request timed out.  14     *      222 ms   223 ms  s2z3.x.com [10.78.13.248] Trace complete.   ... View more

Hello, I am working with NXOS ospf config and I need to filter routes coming into a specific switch. All my devices are in the same area. I have two exit points across a WAN via BGP. I am not redistributing BGP into OSPF. In IOS you can do a distribute list on a device and block routes there. In NXOS you don't have that option in OSPF and when you do a filter list it has to be under the area command. I was told that when you put that command on one switch that it propagates throughout the entire area. So wherever that area is designated the same routes are blocked or allowed. Could you please verify that and if there is a better way to accomplish this. router ospf LAN   router-id 10.128.0.25   area 0.0.100.0 filter-list route-map OSPF_FILTER_IN in Thanks Doug ... View more

Hi, I am looking through some firewall configs and I see the Local Network and Remote Network site to site vpn's are /32 addresses. Also the Enable inbound VPN sessions to bypass interfa ce access lists, is checked. This is our backup solution if our MPLS circuit goes down. So what I am asking is with this configuration will all traffic routed to the firewall go through VPN? version 8.2 Thanks Doug ... View more

Hi all,   Trying to get the boot system flash bootflash: command to work so I can change code versions if the latest one begins to have issues I can easily roll back. I enter the command: boot system flash bootflash:asr1000rp1-advipservicesk9.03.03.01.S.151-2.S1.bin end wr reload and on reboot it still boots to the other image. IOS XE Version: 03.06.02.S System image file is "bootflash:asr1000rp1-advipservicesk9.03.06.02.S.152-2.S2.bin"   12.2(33r)XNC Configuration register is 0x2102 dir   325261624  Jan 30 2013 08:51:54 +00:00  asr1000rp1-advipservicesk9.03.06.02.S.152-2.S2.bin    304699704  Jun 14 2011 08:05:10 -04:00  asr1000rp1-advipservicesk9.03.03.01.S.151-2.S1.bin The only way around this is to have only one image in the directory. ... View more