Hi Community, I am trying to locate the ASR 1000 (1004 specifically) system limitations for VRF lite. I am after info such as max OSPF process, with associated timers max VRF max BFD neighbors max tracking objects max RIP IPV4 address family vrf max BGP IPV4 address family vrf etc. Many thanks ... View more

Hi Community, I would appreciate any input other may be able to provide on the behaviour of ASA when in Transparent mode. I have a few scenarios and am looking to confirm stateful inspection behaviour for. By default I shall block all traffic. 1 - Flow initiated Inside to outside (Higher to Lower security interface)      - Rule on inside 2 - Flow Initiated Outside to Inside (Lower to Higher security interface)      - Rule on Outside      - Appears to require rule on inside to allow response - No Stateful inspection 3 - Flow initiated Inside to Outside - With Application inspection (Higher to Lower)      - Rule on inside + App inspection 4 - Flow initiated Outside to Inside - With Application Inspection (Lower to Higher)      - Rule on outside + App Inspection      - Appears to require rule on inside to allow response - No Stateful Inspection The references guide could do with some clarification around transparent behaviour. Many thanks ... View more

I have been searching around trying to find a decent solution to the above, without much luck. Is there an approach to setting the RAS QOS on gateways and gatekeeper. The default is 0x0 which is not good. Using an ACL seems like a very clunky approach, is there any other way? Thanks Steve ... View more

Hi, Does anyone know of an implemented method to provide PE Node Protection? Failover time is key here. Network topology has pair of PEs at each site, with each PE connected to a seperate P. The 2 PEs at each site are connected and link protection is in use today for PE-P link failures. Thanks Steve ... View more

If a native IP packet arrives at an LSR (P router) is a label imposed and packet label switched (assuming a label exists for the destination)or is the packet forwarded natively using standard IP routing. Is the label imposition / native forwarding behaviour the same for all types of packet, eg OSPF (non bcast), BGP, SNMP, Telnet. Reading RFC 3031 it looks as though labels should be imposed, however reading the cisco MPLS FAQ it indicates native IP packets are forwarded natively. Thanks for any inout ... View more

Hi, Has anyone added new sensors 4.1 to VMS 2.2? I have been trying to add 4.1 Sensors to VMS 2.2. I find the auto method fails with an error that Sensor version is not supported, with information suggesting a upgrade the Sensor, which I have done to S91. You can add the sensor manually but the drop down list does not include any 4.1 versions, latest is 4.0xx in my list. If you use 4.0xx you then can not run things such as signature updates because the MC checks versions before applying updates to sensors. I checked out Cisco Release Notes and IDS MC 1.2 supports 4.1 supposidly. I have also added latest IDS MC 1.2.3 patch. Any input much appreciated. Thanks ... View more