Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About abdulrafayessani
Stats
Member since
03-24-2008
17
Posts
0
Helpful
0
Solutions
02-12-2016
02:46 AM
Thanks Philip for your quick response. but as per ASA 9.1.2 Configuration guide it says etherchannel with cross stack switches is not supported.
http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/interface_start.html#pgfId-1329030
Since my both ASA are intended for Active Passive therefore i've to make one Etherchannel, correct me if i am wrong.
just want to share my ASA configuration as well:
DMZ-5512-0
interface GigabitEthernet0/2 speed 1000 duplex full channel-group 9 mode active no nameif no security-level no ip address ! interface GigabitEthernet0/3 speed 1000 duplex full channel-group 9 mode active no nameif no security-level no ip address
interface Port-channel9 speed 1000 duplex full lacp max-bundle 1 port-channel load-balance src-port nameif INSIDE security-level 100 ip address 10.181.11.4 255.255.255.0
DMZ-5512-1
interface GigabitEthernet0/2 speed 1000 duplex full channel-group 9 mode active no nameif no security-level no ip address ! interface GigabitEthernet0/3 speed 1000 duplex full channel-group 9 mode active no nameif no security-level no ip address
interface Port-channel9 speed 1000 duplex full lacp max-bundle 1 port-channel load-balance src-port nameif INSIDE security-level 100 ip address 10.181.11.4 255.255.255.0
... View more
Created by
abdulrafayessan
in Firewalls
in Firewalls
02-11-2016
11:16 PM
02-11-2016
11:16 PM
Hi,
I' m making an Etherchannel from my Cisco ASA5512X using following interfaces and devices but the line interface is down on these ports and showing Orange LED
9
INSIDE-3850-0
G 1/0/17
10.181.11.3/24
DMZ-5512-0
GE 0/3
10.181.11.4/24
9
INSIDE-3850-0
G 2/0/17
DMZ-5512-1
GE 0/3
9
INSIDE-3850-0
G 1/0/18
DMZ-5512-0
GE 0/2
9
INSIDE-3850-0
G 2/0/18
DMZ-5512-1
GE 0/2
- two 3850 48 port are in stack with IP Base Image
- both firewall are in Active/Standby mode.
Configuration is as follows:
3850:
interface Port-channel9 no switchport ip address 10.181.11.3 255.255.255.0
interface GigabitEthernet1/0/17 description connected to F-PK-LHR-DMZ-5512-0 GE 0/3 no switchport no ip address channel-group 9 mode auto interface GigabitEthernet1/0/18 description connected to F-PK-LHR-DMZ-5512-0 GE 0/2 no switchport no ip address channel-group 9 mode auto
interface GigabitEthernet2/0/17 description connected to F-PK-LHR-DMZ-5512-1 GE 0/3 no switchport no ip address shutdown channel-group 9 mode auto interface GigabitEthernet2/0/18 description connected to F-PK-LHR-DMZ-5512-1 GE 0/2 no switchport no ip address shutdown channel-group 9 mode auto
Regards,
Abdul Rafay
... View more
Labels:
Created by
abdulrafayessan
in Other Service Provider Subjects
05-28-2014
09:51 PM
05-28-2014
09:51 PM
Carlos, I'm not sure whether websense has declared EoS for CPA, but better contact following Knepher, Jonathan [mailto:jknepher@websense.com further contact your local cisco team, as there were plans of Cisco Business unit to integrate SCE with Cisco WSA for content filtering, further you can also look for bright cloud webroot solution as there were plans to integrate this with SCE8K by end of this quarter.
... View more
Created by
abdulrafayessan
in Other Service Provider Subjects
05-28-2014
04:22 AM
05-28-2014
04:22 AM
Dear, Content filtering is possible with websense, you need to have CPA server/services from websense which will be served to your local server, and your SCE will be communicating with your local server for controlling. regards, Abdul rafay essani
... View more
Created by
abdulrafayessan
in Other Service Provider Subjects
05-28-2014
03:55 AM
05-28-2014
03:55 AM
Hi Carlos, Is your problem solved or still stuck in this? let me know I can help you in this Regards, Abdul Rafay
... View more
Created by
abdulrafayessan
in IP Telephony and Phones
05-12-2014
02:25 AM
05-12-2014
02:25 AM
can you please share any document in against?
... View more
Created by
abdulrafayessan
in IP Telephony and Phones
05-12-2014
01:37 AM
05-12-2014
01:37 AM
Is SW-CCME-UL-ENH= for CP-7911G-RF is mandatory? if base system is C2921-CMESRSTK9-RF although we intend to use this only for basic voice.
... View more
- Tags:
- Cisco IPT Solution
Labels:
08-29-2013
01:39 AM
Faisal Bhai, Please note that you can not configure ASA5550 with ASA555 in failover scenario. Hardware Requirements The two units in a failover configuration must be the same model, have the same number and types of interfaces, and the same SSMs installed (if any). Both units must have the same amount of RAM memory installed. If you are using units with different Flash memory sizes in your failover configuration, make sure the unit with the smaller Flash memory has enough space to accommodate the software image files and the configuration files. If it does not, configuration synchronization from the unit with the larger Flash memory to the unit with the smaller Flash memory will fail. Software Requirements The two units in a failover configuration must be in the same operating modes (routed or transparent, single or multiple context). They must have the same major (first number) and minor (second number) software version. However, you can use different versions of the software during an upgrade process; for example, you can upgrade one unit from Version 7.0(1) to Version 7.0(2) and have failover remain active. We recommend upgrading both units to the same version to ensure long-term compatibility. See "Performing Zero Downtime Upgrades for Failover Pairs" section on page 78-5 for more information about upgrading the software on a failover pair. Licensing Requirements The licensed features (such as SSL VPN peers or security contexts, for example) on both units participating in failover must be identical. http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/general/ha_failover.html#wp1077521
... View more
Re: AP Operational status DOWN
in Wireless and Mobility
04-01-2013
10:10 PM
04-01-2013
10:10 PM
Marty, Which power injector are you using and what is the length of the cable from power injector to AP? Abdul
... View more
04-01-2013
10:00 PM
Collin, Thanks for your input but if you see the first inventory details of ASA it doesn't show anything related to anyconnect, is this due to old IOS Version?
... View more
03-31-2013
11:15 PM
I have one confusion please confirm. I got two firewalls 5540 both of them have SSL VPN Premium license, one of them have software version of 8.0(2) with SDM version of 6.1(5) Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 200 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 2 GTP/GPRS : Disabled VPN Peers : 5000 WebVPN Peers : 2 Advanced Endpoint Assessment : Disabled This platform has an ASA 5540 VPN Premium license. and other have 8.2(2) with SDM version of 6.3(1). Maximum Physical Interfaces : Unlimited Maximum VLANs : 200 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 2 GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 5000 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Disabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled This platform has an ASA 5540 VPN Premium license. now since Cisco VPN client is End of Sale and i've to shift my existing user base to cisco anyconnect client (which will be installed first time when the users hits the IP address) So now the question is should i need to upgrade or purchase any new anyconnect license type like essential or premium? or my existing setup is sufficient enough for any connect?
... View more
Labels:
Created by
abdulrafayessan
in Other Security Subjects
07-11-2012
12:03 AM
07-11-2012
12:03 AM
One of my customer is interested in upgrading their existing windows based ACS 4.0 to 5.3 Now in order to do so should the customer order upgrade part number CSACS-5.3-VM-UP-K9 or they have to order new part number L-CSACS-53VM-K9. So far i know is that CSACS-5.3-VM-UP-K9 is only applicable for version limited to 4.1 only and for previous versions we have to first upgrade to 4.1 and if i do so then is their need to order seperate upgrade from 4.0 to 4.1? Customer do not have SAS contract. Suggestions/Answers shall be welcomed
... View more
Labels:
05-10-2008
02:47 AM
i'm having similar problem in my network. Dear Mr. Alvin, please verify your process utilization as i'm having my process utilization to 100%. Regards,
... View more
Created by
abdulrafayessani
in TelePresence and Video Infrastructure
04-01-2018
04-01-2018
Hi,Since earlier sx20 support multisite conference internally and after
going through the datasheet ...
10-19-2017
we are trying to design a solution where customer is not running any
LDAP services in their infrastr...
02-12-2016
Thanks Philip for your quick response. but as per ASA 9.1.2
Configuration guide it says etherchannel...
Created by
abdulrafayessani
in Firewalls
02-11-2016
02-11-2016
Hi, I' m making an Etherchannel from my Cisco ASA5512X using following
interfaces and devices but th...
Created by
abdulrafayessani
in Other Service Provider Subjects
05-28-2014
05-28-2014
Carlos, I'm not sure whether websense has declared EoS for CPA, but
better contact following Knepher...
05-28-2014
Dear,Content filtering is possible with websense, you need to have CPA
server/services from websense...
05-28-2014
Hi Carlos,Is your problem solved or still stuck in this? let me know I
can help you in thisRegards,A...
Created by
abdulrafayessani
in IP Telephony and Phones
05-12-2014
05-12-2014
Is SW-CCME-UL-ENH= for CP-7911G-RF is mandatory? if base system is
C2921-CMESRSTK9-RF although we in...
08-29-2013
Faisal Bhai,Please note that you can not configure ASA5550 with ASA555
in failover scenario. Hardwar...
04-01-2013
Marty,Which power injector are you using and what is the length of the
cable from power injector to ...
04-01-2013
Collin,Thanks for your input but if you see the first inventory details
of ASA it doesn't show anyth...
03-31-2013
I have one confusion please confirm.I got two firewalls 5540 both of
them have SSL VPN Premium licen...
07-11-2012
One of my customer is interested in upgrading their existing windows
based ACS 4.0 to 5.3Now in orde...
Public Statistics
| Date Registered | 03-24-2008 12:25 PM |
| Date Last Visited | 07-04-2018 12:05 AM |
| Total Messages Posted | 17 |
