Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
OK Guys, I am new to firewalling but need to get one up and running, I actually have a pair, but am trying to just get it working on one to then copy.I am using three zones - inside, outside and self. Self seems to be OK.
I need to permit some acces...
I have a colleague trying to upgrade a pair of ACE appliances. The upgrade has been succesfull for the same file downloaded from CCO on other appliances, but when they try the reboot to perform the upgrade, it reports a CRC error, so they abort the u...
Guys, has anyone seen this before? Configuring QoS I use names ACLs, but when I show the class map, it refers to a number rather than name:conf tip access-list extended QoS-CGP permit tcp any any eq 2598ip access-list extended QoS-MOVI-Data permit tc...
Guys, I am hoping one of you can answer this easily!When you use sh int summary, for fields like RXPS, what time period is that for? Is it the load-interval period (default 5 mins) or is it average load since last clearing of counters? Interface ...
Hi Guys. I am looking at a issue with an ACE. SW is 3.0(0)A3(2.6)We have a setup where most of it appears fine. It detect the loss of rservers, probes fail, the VIP stops responding to Pings, but it still accept TCP connections, even though there is ...
I have arrived at a similar position - we have a shiny new 1117 and a colleague tried to add EZ-VPN and failed.There are references to it in older SW versions, and I note it is no longer mentioned in the datasheet and see https://www.cisco.com/c/en...
I have
policy-map type inspect PolInsideOut class type inspect ClassManagementOutDNS inspect class type inspect ClassManagementOutWebproxies inspect class type inspect ClassReturnTrafficOut inspect class class-default drop log
policy-map type ins...
With HSRP you will always need N+1 addresses - two routers, three addresses. VRRP allows you to use one less, but even then you would need a /29 to fit both of your addresses plus the ISP router.Paul.
You need to get a wireshark trace from one of the failing PCs. Torsten's description matches what I see in the traces. That makes it look like as the client is offered an address and tries to ARP it something responds.It is indeed suspicious that it ...
Spanning tree is in use pretty much the world over with no ill effect on DHCP. The server is providing an address, so exhaustion unlikely. The client is declining the offer.I would want to see a trace from the PC itself, and I would be tempted to dis...