dears is it possible to implement WSA in explicit mode and spoofing enabled . i think this will not work if the web site is ipv4 only. because: wsa could not initiate a traffic with IP-source v6 (client IP) and IP-destination v4. this will not work of course. is there any solution for this problem.   thanks  ... View more

hi   we are planing to implement dual stack. in internet edge we have 2 routers (hsrp)  connected to our ISP 2 routers. (one ISP having 2 routers for redundancy) we use BGP. in case ISP line 1 goes down traffic will be redirected to ISP line2. ----R1---------R2         |                    |       ISP-R1          ISP-R2  now our ISP gave us 2 IPv6 prefixes. each one for each router. now for end users what prefix should i use? both ? (we don t use NAT, just routing. users must get public IPv6)   thanks ... View more

hi  we have cisco prime infrastructure 3.2.2. we noticed that if one device is down we revive an alert-email  after long time (may be 20 min) is it possible to tune this parameter (5min for example)   thanks  ... View more

We are asked to deploy IPv6 in dual stack in our network in order to enhance our IPv6 rank  . As we are new with this technology can you guide us?   Shall we Address all our internal network with public IPv6 addresses  in order to enhance our rank ? is there any security issue in doing so? Is NAT still used ? When a dual stack client will connect to internet will it use IPv4 or v6 or both ? For IPv6 addresses assignment, shall we use a dhcp server like for IPv4 or let the router/L3 switch assign the IP?  Any best practices for dual stack IPv6? ... View more

Hi We are asked  to deploy IPv6 in dual stack in our network in order to enhance our rank . Shall we Address all our internal network with public IPv6 addresses  in order to enhance our rank ? is there any security issue in doing so? Is NAT still used ? When a dual stack client will connect to internet will it use IPv4 or v6 or both ? For IPv6 addresses assignment, shall we use a dhcp server like for IPv4 or let the router/L3 switch assign the IP? Any best practices for dual stack IPv6? thanks ... View more

dears i am receiving this error from our WSA. i wonder how WSA detects this problem because syslog is udp? and what solution can we do to avaoid it? Log Error: Subscription accesslogs: Syslog internal buffer overflow. Some data may be dropped. This may be because server x.x.x.x (unknown) is not accepting data fast enough or because data is being generated more quickly than can be accomodated by the syslog protocol.   ... View more

Hello we would like to limit mail server traffic between towerA and tower B that are connected via GRE tunnel 79. i configured the following in the router that is in mail server side (hoping it will limit mail bw to 40Mbps). access-list 195 permit ip host mailserver-ip any class-map match-all email   match access-group 195 ! policy-map TUNNEL79  class email  police cir 40000000 ! interface Tunnel79 ip address x.x.x.x 255.255.255.0 tunnel source x.x.x.x tunnel destination x.x.x.x service-policy output TUNNEL79 end my question: if many mail clients in remote tower are downloading emails from mail server, will the router give 40M for each session or for the whole email traffic? actually i feel it gives 40M fro each client because using netflow we can see mail traffic can exceed 70M. but we need to limit all clients to 40M. thanks  ... View more

  dears   i am receiving this messages daily  the same mac address is seen for 3 different IP addresses. i think this is a cluster. is this normal or a problem ?   2016 Apr 18 17:36:21 Nexus5K01 %FWM-2-STM_LEARNING_RE_ENABLE: Re enabling dynamic learning on all interfaces 2016 Apr 18 17:36:22 Nexus5K01 %FWM-2-STM_LOOP_DETECT: Loops detected in the network for mac 0010.e056.504e among ports Eth103/1/39 and Eth103/1/24 vlan 10 - Disabling dynamic learn notifications for 180 seconds 2016 Apr 18 17:39:22 Nexus5K01 %FWM-2-STM_LEARNING_RE_ENABLE: Re enabling dynamic learning on all interfaces 2016 Apr 18 17:39:22 Nexus5K01 %FWM-2-STM_LOOP_DETECT: Loops detected in the network for mac 0010.e056.504e among ports Eth103/1/24 and Eth103/1/39 vlan 10 - Disabling dynamic learn notifications for 180 seconds 2016 Apr 18 17:42:23 Nexus5K01 %FWM-2-STM_LEARNING_RE_ENABLE: Re enabling dynamic learning on all interfaces 2016 Apr 18 17:42:23 Nexus5K01 %FWM-2-STM_LOOP_DETECT: Loops detected in the network for mac 0010.e056.504e among ports Eth103/1/39 and Eth103/1/24 vlan 10 - Disabling dynamic learn notifications for 180 seconds 2016 Apr 18 17:45:23 Nexus5K01 %FWM-2-STM_LEARNING_RE_ENABLE: Re enabling dynamic learning on all interfaces 2016 Apr 18 17:45:23 Nexus5K01 %FWM-2-STM_LOOP_DETECT: Loops detected in the network for mac 0010.e056.504e among ports Eth103/1/24 and Eth103/1/39 vlan 10 - Disabling dynamic learn notifications for 180 seconds 2016 Apr 18 17:48:23 Nexus5K01 %FWM-2-STM_LEARNING_RE_ENABLE: Re enabling dynamic learning on all interfaces 2016 Apr 18 17:48:23 Nexus5K01 %FWM-2-STM_LOOP_DETECT: Loops detected in the network for mac 0010.e056.504e among ports Eth103/1/39 and Eth103/1/24 vlan 10 - Disabling dynamic learn notifications for 180 seconds ... View more