So I re-imaged an ASA 5506-X to a Firepower Threat Defence image 6.1 with the new FirePower Device Manager. This is very appealing for small customer Internet connections without the need for running a separate Firepower Management Centre so I was k...
I'm looking at provisioning a Catalyst 4500 with a WS-X4712-SFP+E module to allow for future 10Gb connectivity via 10Gb SFP+ interfaces. These cards are backwards compatible with standard 1Gb SFP interfaces but I'm wondering about the other way arou...
I have a problem I'm struggling to understand from a design point of view and would be grateful for any help that could put me on the right track here. I have attached a diagram depicting the topology I will explain now, as well as my logic (flawed ...
I am currently trying to set up a site-to-site VPN between an SRP527W and a Cisco 1841 but am failing to negotiate a connection at level 1. The isakmp appears to be failing with the dreaded MM_NO_STATE message prominent in the crypto isakmp debug ou...
I am currently trying to set up a site-to-site VPN between an SRP527W and a Cisco 1841 but am failing to negotiate a connection at level 1. The isakmp appears to be failing with the dreaded MM_NO_STATE message prominent in the crypto isakmp debug ou...
thanks for the effort Florian. I was 95% sure that would be the case. Was just after that 5% confirmation!ThanksSent from Cisco Technical Support iPhone App
Thanks for the feedback Florian. Appreciate your input. I don't have one to test out but would probably be reluctant to even if I did. I'd be cautious of frying the SFPs as I assume the SFP+ power outputs would be more than the 1Gb modules. Would...
Thanks Milan. I take your point and agree its valid. I'm going to look at redesigning that setup so I'm not redistributing the BGP routes through EIGRP and back out BGP again. You guys have been great. I at least understand now why it is behaving...
Varun, that makes total sense to me now! Thank you so much for the clarification. I will try that and let you know how it goes. Will take me a week or so though unfortunately to get required change approvals (you know how it is...).One thing I'm n...
Hi Milan. Thanks for your response, it's much appreciated. As per the reply above, you can see that CPE1 is getting the route from PE1. I did however forget to include the EIGRP topology output as you suggested, so here is that:CPE1show ip eigrp t...
