hi, i know this was 1 year before but if you need any help in deploying the PA with Cisco network gear, nexus or CAT family. please respond and i will provide you the configurations for VPC or PO's as i have deployed them in both environments. ... View more

yes there is something wrong with my switch configurations, as when i start the debug snmp packet and i trigger the change in the switch nothing comes up not a single packet  ... View more

i think there is somthing i am not doing right as far as configurations are concern. i am looking in syslog server for the mac-logs. Am i on right box ? ... View more

hi, i did add the configuration line for # snmp-server host X.X.X.X traps SnmpUserName mac-notification and also re-execute the global configuration command to enable the traps and mac-notification so far no success ... View more

hi, please find the configurations  SNMP Configurations on switch: all the traps are enabled on switch with mac  snmp-server enable traps mac-notification change move threshold global: mac address-table notification change interval 10 mac address-table notification change history-size 500 mac address-table notification change mac address-table notification threshold mac address-table notification mac-move on two interfaces of switch snmp trap mac-notification change added snmp trap mac-notification change removed ... View more

hey, thank you for your response. Yes i did the enable the SNMP trap commands in the system to send all the traps to syslog.  mac address-table notification change interval 10 mac address-table notification change history-size 500 mac address-table notification change mac address-table notification threshold mac address-table notification mac-move even after this nothing came to logging server at very last step i configured the interface to send any snmp trap mac-notification for any change like add and remove snmp trap mac-notification change added snmp trap mac-notification change removed i am receiving all the syslogs that is configured in the switch and it looks ok to me. the only logs i am unable to get is MAC logs. i tried to change the machines and do different things to trigger it but nothing is sent to syslog ... View more

yes, i can see all the other logs in the syslog from the switch and its working fine, however the only thing that is not working at the moment is these mac address-table information. WS-C2960CPD-8PT-L with  C2960c405-UNIVERSALK9-M on it its  15.0(2)SE2 the logging output is  Logging to X.X.X.X (udp port 514, audit disabled, link up), 148 message lines logged, 0 message lines rate-limited, 0 message lines dropped-by-MD, xml disabled, sequence number disabled filtering disabled Logging Source-Interface: VRF Name: ... View more

hi Harmeet, if you have the ASA of any model you can use the following 2 methods to analyze the traffic that is passing from the ASA. 1- From- CLI 2- From -ASDM (ASA Device Manager) 3-capture traffic (only which is required) before you move ahead, please note that firewalls usually dont have any storage space that can stored the traffic logs that is passing through it, until unless you have installed a Flash Card or USB. 1 - From CLI from cli you execute many commands like the simple one is show logging: will display the running traffic show nat: will update you the translation information show xlate: will update you the static and dynamic table Show show conn, and show local-host conn show proc show asp drop and so on the link below is the command reference guide in detail and will help you to get all the possible commands you want to execute. 2- ASDM: from asdm it is quite easy and very informative to use. from asdm manager you can follow the following steps and can see the running traffic or live traffic or can filter the traffic as you require login via asdm after you login you will see that at the bottom of the asdm the logs are running which you can review, stop pause or start click Monitoring from the top tab its option number 3 now on your right you will see all the ARP table learned by firewall on left pane click logging after you click logging, the right pane will change and you will have option to view click view button when you click view button, a new window will open and you will see all the logs that are currently being passed from firewall you can use filter to search any specific information you can create a filter to search if you dont have any logging server then, you would require one to send your logs for proper storage and configure your security device on certain level i hope this information will help you. Cisco ASA 5500 Series Command Reference, 8.2 - same-security-traffic -- show asdm sessions [Cisco ASA 5500-X Series Fire… ... View more

hello preranda, you can go for 9900 series and they do support wireless and vpn connectivity, i am currently in process of deploying one for me. ... View more