Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About f-cagica
Stats
Member since
04-26-2007
40
Posts
0
Helpful
0
Solutions
Certifications
Created by
f-cagica
in Network Security
in Network Security
03-30-2016
07:53 AM
03-30-2016
07:53 AM
Hello experts,
while configuring some ASA Firewalls for IPv6 dual-stack i've noticed that 9.1(7) doesn't have anymore the option "match header destination-option" (under Policy-map type inspect ipv6) available. Not sure why... also not able to find any bug or mention to it in the release notes... is anyone aware of it?
Thanks,
Fernando
... View more
Labels:
Created by
f-cagica
in Network Management
in Network Management
07-14-2015
07:34 AM
07-14-2015
07:34 AM
Hello, we installed recently Cisco Prime infrastructure 2.2 as virtual appliance in the Company. It is currently monitoring 140 devices (Routers, Switches, Firewalls) distributed by several sites, and due to a Troubleshooting activity, is of special importance the Monitoring of CPU usage and Interface utilization (bw and Errors) on a few devices from one site. It was however noticed in the last few days that at some Point These values stopped being plotted for ALL the devices, The Situation was solved with "ncs stop"+"ncs start" and re-deployment of the Automonitoring policy for device health. I didn't find so far any reference in the documentation about how to troubleshoot the PI appliance to get the cause for this problem. Did anybody already hit this Problem? Is there any troubleshoooting Information for the PI itself? Thanks in advance, Fernando
... View more
Labels:
04-18-2013
07:30 AM
Hello, i have a Supervisor 2T, equiped with a PFC4 V02. Inside, on the PFC 4 card there are two LEDs- CR2 and CR3. LED CR3 is permanently on (RED). I couldn't find a description of its meaning. The power-up diagnostic shows no errors. Doing a deeper diagnostic is at the moment out of question as this is a production system. Does anyone knows the meaning od the internal LEDs on the PFC4? Or at least a link to the documentation that describes it? Thanks in advance, Fernando
... View more
Labels:
10-30-2012
01:44 AM
Hello, while testing the ISSU capabilities of our datacenter, composed by N5k and FEX, the command "show install all impact kickstart bootflash:n5000-uk9-kickstart.5.2.1.N1.2a.bin system bootflash:n5000-uk9.5.2.1.N1.2a.bin" produced the following output: Compatibility check is done: Module bootable Impact Install-type Reason ------ -------- -------------- ------------ ------ 1 yes disruptive reset Non-disruptive install not supported if L3 was enabled 110 yes disruptive reset Non-disruptive install not supported if L3 was enabled 111 yes disruptive reset Non-disruptive install not supported if L3 was enabled 112 yes disruptive reset Non-disruptive install not supported if L3 was enabled 113 yes disruptive reset Non-disruptive install not supported if L3 was enabled since we do not have any layer 3 features enabled, i believe the message is produced by our layer 3 licence...(see also https://supportforums.cisco.com/message/3721631#3721631) since all the Layer 2 checks in this system (STP and LACP) passed, do i have to expect any outage on the Traffic that crosses the Switches on Layer 2? Thanks in advance, Fernando
... View more
Labels:
08-17-2012
09:38 PM
Hello Karim, thank you for your answer. Confirms my suspiction. Will have to analyse all the options to see if the current scenario still allows for PVLAN in the end devices... Thanks and Best regards, Fernando
... View more
08-14-2012
07:23 AM
Hello *, regarding PVLANs and the Nexus, my understanding is that we cannot configure Private VLANs on a FEX trunk port with a NX-OS release older than 5.1(3)N2(1) for the Nexus5548... Is there any known workaround for this limitation (appart from performing a SW upgrade)? Thank you in advance, Fernando
... View more
Labels:
dot1x authentication
in Wireless Security and Network Management
06-17-2012
12:42 PM
06-17-2012
12:42 PM
Hi guys, thank you all for your help. Will have to accept EAP-FAST as access-layer security. Fernando
... View more
07-25-2011
03:23 PM
Hi Leo, i guess my description was not accurate... It is a connection between two site susing a service provider. The connection is done at layer 2 (the SP uses some Optical P2P link). When i ping the neighbor Firewall with packets bigger than 1020bytes they are not answered. I also thought it could be some problem in the Optical link (as i don't know was lays there in the middle), but then i cheched the Interface counters on the receiving FW, and noticed that the Drop counters increase with my long Pings... so either the optical equipment introduces some error on packets bigger than 1020bytes or the interface doesn't like the size. What do you think? When i saw this tread, i started blaming the FW. Br, Fernando
... View more
07-25-2011
04:34 AM
Leo, icmp is already allowed in my case... I can ping the outside interface with packet size till 1020byte. Abobe 1020byte packet size it doesn't answer anymore. Thanks Fernando
... View more
07-25-2011
01:56 AM
Hi Trey, i know this is a 2 year old issue, but perhaps you still remember... I am facing a similar problem at a Customer: 2x ASA5510 8.0(5) connected through a VPN tunnel (outside-outside), drops packets greater than 1020byte (incl. ping between the outside interfaces). Could you tell me how did you solve your problem? IOS upgrade to which version, workaround, etc.. Thank you in advance Fernando
... View more
07-24-2011
10:18 PM
Rick, we are talking about a difference of 380Bytes OH... As far as i know with IPsec i can expect like 56-60Bytes extra OH. Now, from the peer FW i can't run a ping vetween both Outside interfaces with more than 1020Bytes. The ping is not encapsulated and the DF bit is not set. Br, Fernando
... View more
07-24-2011
04:12 AM
Hello experts, i have a strange issue on a link between two ASA5510: both ASAs are interconnected by a P2P Fastethernet link, and the traffic between both ASAs is being secured by a L2L IPsec tunnel. The configured MTUs are 1500, however packets bigger than 1020byte are being dropped. IOS is 8.0(5). I didn't find so far any CAVEAT describing it. Does anyone know about this issue? Thank you Fernando
... View more
Labels:
Created by
f-cagica
in Network Security
03-30-2016
03-30-2016
Hello experts, while configuring some ASA Firewalls for IPv6 dual-stack
i've noticed that 9.1(7) doe...
Created by
f-cagica
in Network Management
07-14-2015
07-14-2015
Hello,we installed recently Cisco Prime infrastructure 2.2 as virtual
appliance in the Company. It i...
04-18-2013
Hello,i have a Supervisor 2T, equiped with a PFC4 V02. Inside, on the
PFC 4 card there are two LEDs-...
10-30-2012
Hello,while testing the ISSU capabilities of our datacenter, composed by
N5k and FEX, the command "s...
08-17-2012
Hello Karim,thank you for your answer. Confirms my suspiction. Will have
to analyse all the options ...
08-14-2012
Hello *,regarding PVLANs and the Nexus, my understanding is that we
cannot configure Private VLANs o...
06-17-2012
Hi guys,thank you all for your help. Will have to accept EAP-FAST as
access-layer security.Fernando
07-25-2011
Hi Leo,i guess my description was not accurate... It is a connection
between two site susing a servi...
07-25-2011
Leo,icmp is already allowed in my case... I can ping the outside
interface with packet size till 102...
07-25-2011
Hi Trey,i know this is a 2 year old issue, but perhaps you still
remember... I am facing a similar p...
07-24-2011
Rick,we are talking about a difference of 380Bytes OH... As far as i
know with IPsec i can expect li...
Public Statistics
| Date Registered | 04-26-2007 06:04 AM |
| Date Last Visited | 08-08-2018 12:02 AM |
| Total Messages Posted | 40 |
