Hi,   I am new to using Cisco CMX and it's capabilities, so apologies if this has been answered previously, but I couldn't find it anywhere.   Is it possible to get Cisco CMX to provide wireless coverage heatmaps (similar to what Cisco Prime Infrastructure can do)?   Also, is it possible to use Cisco CMX without having Cisco Prime Infrastructure. Can you just create the maps and add the WAPs direct into CMX without using Cisco Prime?   Thanks in advance. ... View more

Hi, We have installed a new copy of Cisco Prime (v3.1) and have migrated across all devices and Wireless heat Maps. The one thing I am having trouble migrating (export form old version and import to new version) is all of the scheduled reports that we have created. Does anyone know how to do this easily? Thanks, Cameron ... View more

Hi, I was wondering if anyone has been able to (of knows how to) export a map from Prime Infrastructure (we are running v3.0) to include a heat map. At the moment I have just taken screenshots, but this is pretty clumsy and time consuming. It would be a great feature for many reasons but I just can't seem to find out if it is possible. Hopefully someone out in the Cisco community has had better luck than me! Thanks, Cameron ... View more

Hi, It seems we have run into this bug with our deployment of the 3850 switches. Bug ID is:  CSCuv84149 We are currently running IOS XE version 3.03.03 and have had 3 switch stacks with this bug in the last 2 weeks and we are now concerned that it will continue to happen. What experience have other people had with this issue? Did you do an upgrade or have found another way to resolve? Whicih version did you upgrade to? 3.7.1E or the recommended release 3.6.3E? We are hesitatnt to upgrade as it is a major disruption to our clients and we have lots of switch stacks which makes it a large parcel of work. I look forward to hearing what other people have done. Thanks, Cam ... View more

Hi,   We are trying to copy a file (that contains output from a show tech command) from a ASR 9006 running IOS-XR v4.3.4 to our TFTP server (or a USB stick) but are having issues.   We have tried various combinations of the copy command, but none of them seem to be allowing us to copy the files. Is anyone able to point us in the right direction or to some Cisco documentation for this?   Thanks in advance. Regards, Cam ... View more

Hi All,   I am having trouble removing a Device Group from within a Group in Cisco Prime. In short, there is a group called 'Cisco 3850 Series Ethernet Stackable Switch' which exists under both the 'Wireless Controller' group and the 'Switches and Hubs' group. I want to remove it from the 'Wireless Controllers' group as we are not using the controller functionality of the deivce.   Can anyone help on this issue?   Thanks, Cameron ... View more

Hi, In short, we are trying to create a Anyconnect profile on our Cisco ASA that authenticates against our LDAP (AD), but will only authenticate against a particular group. So, if your user account is a member of the group you are authenticated, if not, authentication fails. Our current setup is 2 x Cisco ASA 5525-x running in HA, version 9.1(2). They are working to provide remote access via the Cisco AnyConnect for all of our remote users. Currently we have a AAA server setup to authenticate against the LDAP directory and that is working perfectly. As mentioned we wanted to create another AnyConnect policy that would authenticate against the same LDAP directory but only provide successful authentication is the user account was a member of that particular group.   Any help/direction would be greatly appreciated. Please let me know if you need more information. Thanks, Cam ... View more

Hi All, We are having some issues with getting hairpinning working for our SSL VPN connections on the Cisco 5585 ASA. Our setup is that we have configured and enabled SSL VPN for our remote useres. This works fine and as expected, but at the moment we have split tunneling turned on so only internal company traffic goes through the tunnel, and all other traffic goes through the users local connection. We have a need to enable additional traffic to go through the SSL VPN tunnel, which means that the traffic flow will be from the users device, to our ASA (via outside interface) and then back out the outside interface on the ASA to the destination. We understand that this is hairpinning and have done the following to enable it: Added the following command to allow the same interface to be the ingress and outgress interface: same-security-traffic permit intra-interface We then created the following NAT rule: nat (outside,outside) source static SSL_VPN_Client_Pool SSL_VPN_Client_Pool destination static SSL_VPN_Client_Pool SSL_VPN_Client_Pool We are also bypassing access-lists for VPN traffic. Even after doing all of this we still cannot get the hairpinning to work. Has anyone else done all of this and still have trouble? If so, what other things can we try? (In other words we have followed the Cisco documentation and still, it does not work) The ASA version is 9.1 ... View more