Hi All, I have to NAT my internet router (191.120.250.61) to an internal IP (10.102.40.5) on my Cisco ASA 5510 (8.4(7)), I have to monitor the router with an internal application.   I made the following configuration, but it doesn't work...   object network Internet_router     host 191.120.250.61 object network Internet_router   nat (outside,inside) static 10.102.40.5   access-list from_outside extended permit ip host 191.120.250.61 any access-list from_inside extended permit ip any host 191.120.250.61   same-security-traffic permit intra-interface   Router------------------------[ASA]--------------------------Server (monitor)  191.120.250.61                                                         10.102.40.100   What did I wrong?   Thank you         ... View more

We have a C4507R-E with Sup7 Card (slot 4) (WS-X45-SUP7-E) with ipbase license.  As the supervisor engine is hot swappable we are planning  to replace it with a newer one without outage by putting the new Sup7 Card to the free slot 3.   The new one (same type) has the same ipbase licence, but has no config. Will the config load automatically to the new one from the operational one without outage and without impact on the connections ? The answer is Seamless Switchover happened yesterday according to this documentation> http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/01xo/configuration/guide/config/RPR.html Main points for future reference> Since we need SSO mode ( fully initialized state ) - ipbase license needed on both SUP Cards If you are booting the image in LAN Base mode, only RPR redundancy mode is available. - IOS should to be the same ( it is easier to work with identical IOS-s ) Before inserting the 2nd Card, switch the mode from RPR to SSO. Invoking   show redundancy after each step helps you identify the roles.  The 2nd card  booted to  Hot-Standby, then we did a manual switchover, while we  were  connected to both SUP cards  on console ports. Swithover Happened seamlessly with no interruption on connections. Currently we are running both cards just to be sure the new Active SUP works fine. Thanks ... View more

Hi Guys,   I have a strange issue and I have to admit I have never dealt with something like this before.   Here is the problem:    One server is reachable from everywhere in the building, including from our secondary building over P2P links.It pings, telnets, trace etc , everything is fine. Except from one cat 4506 switch. None of the PCs connected to this switch can ping this server( suddenly) even tho' it was working fine till now.    I need to mention that the PCs connected to this switch can access everything else, except this server.    There was not STP topology change, no errors in the logs and I am kind of lost as in where to look anymore.    There is no loop, no err-disabled port, the root switch is properly elected, no UDLD detection Thanks, Vlad ... View more

Hi All, I have found some threads on this , but very vague. We use AVAYA phones throughout the company , but we are looking into changing AVAYA Cm with Cisco Cm . Are they compatible, can the AVAYA phones work fine with Cisco CM ? Does anyone have this kind of setup working? Thank you, Best Regards, Vlad ... View more

Hi guys, I am sure this was previously discussed , but I would really appreciate some help. We have got two sites connected with ethernet links attached to cisco routers , running OSPF.Recently we have aquired APs fro wifi in both building , but we only bought one WLC, which puts me in the unpleasing situation of having to extend a vlan for the APs to speak to the WLC. How can I do it without technologies like MPLS and others ? Thanks, ... View more

Hello All,    We have recently enabled DAI in our LAN and we have no DAI restrictions on the ports, but for some reason , DAI puts the ports in err-disable if they exceed the default rate limit of 15 pps .I don't know why these machines make more ARP traffic then the rest .   PCs are connected to the AVAYA IP Phones .   This issue is there only for few machines , not a general problem.   Any idea  how to solve it , without allowing them unlimited ARP traffic? Thanks, Vlad ... View more

     Hi Guys ,        I am having a VPN tunnel and I want my ASA Inside interface to be reachable from the far end over the tunnel.        I have enabled the management-access inside and the NAT 0 looks like this management-access Inside nat (Inside,Outside) source static Local Local destination static Remote Remote route-lookup   For some reason it is not working.    Tried with packet tracer and it gets dropped by acl , which I guess its implicit as I have no other access-list , except the crypto ACL , applied anywhere Phase: 5 Type: VPN Subtype: ipsec-tunnel-flow Result: DROP Config: Additional Information: Result: input-interface: Outside input-status: up input-line-status: up output-interface: NP Identity Ifc output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule Does manyone know what is the reason for this? Thanks, Vlad ... View more

Hi Guys,   I am required to set a switchport as it follows and I am not sure it will work.     swi mode access     swi acc vlan 10     swi voice vlan 10     spanning-tree portfast Will the same VLAN ID work for voice and data ? I am having a Cisco Phone connected. Thanks, Regards, ... View more

Guys , Does any of you know , if there is a PDLM that identifies TeamViewer? I would very much want to block it at the router. Thanks, Vlad ... View more