Has anyone been able to get the new 64-bit IOSXRv image working under VMware player or VMware workstation?    It appears to me to boot using the same settings that the latest non 64-bit IOSXRv does, however I do not get any output from the console named pipe.    Console settings Speed: 115200 Data bits: 8 Stop bits: 2 Parity: None Flow control: XON/XOFF \\.\pipe\xrv-1   Virtual Machine Settings 6GB RAM 4 processors 8GB HD 4 host-only network adapters Named pipe Serial connection Server/Application and Yield CPU Poll on     ... View more

 I am working on a 5510 which has older code then I am used to.  I seem to have the NAT exemptions for my VPN built, I have the ACL specified, and everything **should** be good, but for whatever reason this traffic I STILL getting blocked by the implicit deny even when there is a permit ip any any there. I have no idea why this is happening.      ... View more

I am trying to figure out how multiple NAT rules configured may be causing our VPN tunnels to malfunction.  Basically what we have done is for each L2L tunnel, for a NAT exemption, we create a NAT rule like so: nat (ServerDMZ,Outside) source static ServerDMZ ServerDMZ destination static SITE1_LAN SITE1_LAN no-proxy-arp route-lookup desc OFFICE1 NO NAT nat (ServerDMZ,Outside) source static ServerDMZ ServerDMZ destination static SITE2_LAN SITE2_LAN no-proxy-arp route-lookup desc OFFICE2 NO NAT Now my question here is that I do believe that the ASA will exclaim overlapping rules exist when configuring like this, so what is the proper way to configure this? I believe overlapping rules, primarily where the source interface and destination interface are the same in each rule, may potentially be causing issues with the negotiation of our VPN tunnels, although I have been unable to substantiate this hypothesis with evidence.  Furthermore, the question has come up: "is there ever a situation where it is 'appropriate' to be using 'any' in the source or destination network?" e.g. nat (Inside,Outside) source static any any destination static Cisco_Client_VPN_Pool Cisco_Client_VPN_Pool no-proxy-arp route-lookup ... View more

I am very confused on how to get accurate readings for SNR and other statistics on a per-interface basis on the Cisco CMTS platform.  Here is the problem: I get the cable interface information, and use that same ID to correlate and walk DOCS-IF-MIB:docsIfSigQSignalNoise The problem is this upstream channel is really down so I do not understand why it is reporting a value for SNR $ snmpwalk 1.3.6.1.2.1.2.2.1.2.190510 IF-MIB::ifDescr.190510 = STRING: Cable1/0/0-upstream6 $ snmpwalk 1.3.6.1.2.1.10.127.1.1.4.1.5.190510 SNMPv2-SMI::transmission.127.1.1.4.1.5.190510 = INTEGER: 286 CBR8_CMTS#sh int cable 1/0/0 upstream 6 MAC domain upstream impairment report: 0x0 Cable1/0/0: Upstream 6 is up Description:  Received 120227940 broadcasts, 16231561 multicasts, 28442379 unicasts 108275 discards, 1939920 errors, 0 unknown protocol 164901880 packets input Codewords: 4130183473 good 83486120 corrected 13856708 uncorrectable 0 noise, 0 microreflections Total NON-MTC Modems On This Upstream Channel : 19 (18 active) Total MTC Modems On This Upstream Channel : 88 (88 active) CBR8_CMTS#sh controllers upstream-Cable 1/0/0 us-channel 6 Controller 1/0/0 upstream 6 AdminState:DOWN Opstate: DOWN (Reason: Default) Frequency NA, Channel Width 1.600 MHz, Symbol Rate 1.280 Msps ... View more

I have set up a SSL VPN and I can connect via anyconnect but my clients in the VPN pool cannot access the internet  object network SSL_VPN_POOL nat (Outside,Outside) dynamic interface nat (Outside,Outside) source static SSL_VPN_NONAT SSL_VPN_NONAT destination static SSL_VPN_POOL SSL_VPN_POOL no-proxy-arp ip local pool SSL_RA_VPN 172.20.253.1-172.20.253.254 mask 255.255.255.0 The object group SSL_VPN_NONAT contains a list of internal networks that should not be natted when accessed vial the SSL_VPN_POOL clients.  I cannot get to the gateway of my VPN, or ping out to any of the SSL_VPN_NONAT network hosts, or to the internet.  ... View more

I am a bit confused on how to handle RTP streams on phones that register to CME from across a VPN.  Here is the diagram: (SIP phones on the 192.168.1.0/24 network register with the 2811) When I make inbound calls I can see RTP streams from 192.168.1.0/24 to the loopback IP but since that network does not live on the 2811 I cannot write a NAT rule for it.  I have tried writing a NAT rule to NAT RTP to loopback 0 on the 2811, but this does not seem to work either.  2811-VOIP-1#sh run | s ip nat pool ip nat pool rtp 172.16.3.1 172.16.3.1 netmask 255.255.255.0 type rotary 2811-VOIP-1#sh ip access 100 10 permit udp any any range 10000 20000 2811-VOIP-1#sh run | inc ip nat no ip nat service allow-sip-even-rtp-port ip nat pool rtp 172.16.3.1 172.16.3.1 netmask 255.255.255.0 type rotary ip nat inside source static udp 172.16.3.1 5060 interface FastEthernet0/1.98 5060 ip nat inside source static tcp 172.16.3.1 5060 interface FastEthernet0/1.98 5060 ip nat inside source list 1 interface FastEthernet0/1.98 overload ip nat inside destination list 100 pool rtp ... View more

Good afternoon Today I attempted to configure the following on an ASR 9010 in our network:  - snmp-server ifindex persist - snmp-server mibs cbqosmib persist - flow exporter-map SOLARWINDS-IPV4 - transport udp 2055 - source Loopback0 - destination 1.1.1.1 - ! - flow monitor-map PRIMARY-IPV4 - record ipv4 - exporter SOLARWINDS-IPV4 - cache entries 100000 - cache timeout active 1 - cache timeout inactive 10 - ! - sampler-map ONE_PER_ONE - random 1 out-of 1 - ! I then added the flow monitor to one of our bundle interfaces and this caused the bundle interface to flap.  LC/0/6/CPU0:Jul 14 12:44:48.419 CDT: bfd_agent[126]: %L2-BFD-6-SESSION_STATE_DOWN : BFD session to neighbor 10.164.254.41 on interface TenGigE0/6/0/5 has gone down. Reason: Control timer expired RP/0/RSP1/CPU0:Jul 14 12:44:48.427 CDT: BM-DISTRIB[1148]: %L2-BM-5-MBR_BFD_SESSION_DOWN : The BFD session on link TenGigE0/6/0/5 in Bundle-Ether10 has timed out. The member will be removed from the active members of the bundle. RP/0/RSP1/CPU0:Jul 14 12:44:48.427 CDT: BM-DISTRIB[1148]: %L2-BM-6-ACTIVE : TenGigE0/6/0/5 is no longer Active as part of Bundle-Ether10 (BFD state of this link is Down) LC/0/5/CPU0:Jul 14 12:45:03.170 CDT: nfsvr[273]: %MGBL-NETFLOW-6-INFO_HIGHWATER : Cache for monitor PRIMARY-IPV4 entries 98777 exceeds highwater mark of 95000 entries I am trying to understand why this happened. This is one of many ASR9010 that I have running in my environment which have all received the configuration that I have posted before, many of which also contained bundle interfaces.  Why was there a problem on this router only? ... View more