Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About paulwoodsy
Stats
Member since
02-08-2008
18
Posts
0
Helpful
0
Solutions
12-10-2013
04:59 AM
Thanks for your reply Edison. I have tried this today & can see matches under the CAT1_APPS_ACL & I also see pkts incrementing under my class-map too. (sh policy-map int *** output class EXISTING_CLASS_MAP) This is evidence enough that these key apps no longer fall in the default class
... View more
12-09-2013
08:36 AM
I'm wanting to clean up the default class-map. At the moment the key apps are not grouped into a manual class-map & fall under the "default" class. It is concerning that during congestion key apps have to scrap for bandwidth. I'm looking to distinguish key applications & move them into existing class-maps. My proposal is to match on destination IP addresses. The proposed router config looks like this:- ip access-list extended CAT1_APPS_ACL remark *** Category 1 Applications - Destination IP's *** permit ip any host 1.1.1.1 permit ip host 1.1.1.1 any ! class-map match-any EXISTING_CLASS-MAP match access-group CAT1_APPS_ACL ! policy-map EXISTING_OUT_POLICY class EXISTING_CLASS-MAP set dscp cs3 ! int *** service-policy output EXISTING_OUT_POLICY Other than creating a span session is there a way to view relevant IP details within the default class? I need to verify/create a baseline of what is currently visible in the default class, then post implementation check again to ensure they've been migrated to the EXISTING_CLASS-MAP. To add, we dont have netflow either. Any thoughts are appreciated.
... View more
- Tags:
- qos
Labels:
11-26-2013
12:27 AM
I am looking for assistance to implement Qos for Lync 2013 across a number of sites without the need for Microsoft's Call Admission Control (CAC). There are 4 sites in question which have varying bandwith links. See attached. The primary path in/out of the MPLS WAN is pretty much maxed most of the time with the majority of traffic being guest web as the bursty culprit. These sites already have daisy chained PCs/Cisco IP phones, which encompass catalyst switches utilising autoqos & marked as dscp ef with cs3 & af31 for controlling & no seperate voice vlan. I'm not expecting qos to work miracles here since we only have a small amount of bandwidth to play with but would like some assistance with a sample, simple QoS policy. Since IP phones are more business critical I would like Lync audio to mark as cs5 & video as af41. Lync should be rate limited to burst into available bandwidth ahead of guest web traffic. Also, having a seperate voice vlan makes life easier too. Any sample configuration or pointers would be appreciated. Thanks.
... View more
- Tags:
- qos
Labels:
10-18-2013
01:40 PM
License features were mis-matched. I quickly upgraded the license on the copper 3750X to ipbase then upon reload the switches formed the stack.
... View more
08-29-2013
06:55 AM
Hi, Can you run 1Gbps over an SFP+ interface or are my hands tied to 10Gbps only? I have only one spare port on an ME-3600X-24TS-M & the new provisioned circuit is 1Gbps presented as fibre. I take it you can only use SFP+ transceivers & not the bog standard SFP transceiver's too.... Cheers
... View more
- Tags:
- sfp
Labels:
08-23-2013
01:25 AM
During POST I get the following:- *Mar 1 00:00:24.335: %STACKMGR-5-MAJOR_VERSION_MISMATCH: Major Version Mismatch (Local 6 - Received 1) with neighbor-0 *Mar 1 00:00:24.335: %STACKMGR-5-MAJOR_VERSION_MISMATCH: Major Version Mismatch (Local 6 - Received 1) with neighbor-1 Checking the stack versions using “sh platform stack manager all” I notice differences see below:- Switch#sh platform stack manager all | b Stack State Machine View Stack State Machine View ============================================================== Switch Master/ Mac Address Version Current Number Member (maj.min) State ----------------------------------------------------------- 2 Master 7cad.74e5.4b80 6.45 Ready Switch#sh platform stack manager all | b Stack State Machine View Stack State Machine View ============================================================== Switch Master/ Mac Address Version Current Number Member (maj.min) State ----------------------------------------------------------- 1 Master c08c.6028.ce80 1.45 Ready Fibre switch is ipbase & copper switch is lanbase. According to official Cisco doc I’ve found it states “Switches with different major version numbers are incompatible and cannot exist in the same switch stack http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/12.2_55_se/configuration/guide/swstack.html#wp1223384. Now I need to align the stack versions the same…....but how is the question?
... View more
08-23-2013
12:04 AM
Hi, In a nutshell:- I have 2 x 3750x switches both running identical IOS - 12.2(55)SE5 & both connected using stackwise cables. WS-C3750X-12S is priority 15 & switch number 1 ws-c3750x-24 is priority 1 & is switch number 2 I have enabled each switch stack port via "switch X stack port X enable" I have replaced the stackwise cables & phsyically checked them to ensure they are tight. Reloaded on numerous occassions but still no sign of the stack appearing? They appear as seperate Masters.... I'm thinking it maybe something to do with the IOS revision as I've seen a similar post so next step maybe to downgrade/upgrade 12.2(55)SE5.....Any help here would be appreciated?
... View more
- Tags:
- 3750x
Labels:
08-22-2013
11:59 PM
Hi Anderson, Did you manage to resolve your stack issue? I too have encountered the same issue, in a nutshell:- I have 2 x 3750x switches both running identical IOS - 12.2(55)SE5 & both connected using stackwise cables. WS-C3750X-12S is priority 15 & switch number 1 ws-c3750x-24 is priority 1 & is switch number 2 I have enabled each switch stack port via "switch X stack port X enable" I have replaced the stackwise cables. Reloaded on numerous occassions but still no sign of the stack appearing? They appear as seperate Masters.... Any help here would be appreciated? I'm thinking it maybe something to do with the IOS revision so next step maybe to downgrade/upgrade 12.2(55)SE5...
... View more
04-23-2013
11:39 PM
Hi, We've setup a 2951 router as the hub & am now ready to set a config standard for connecting multiple spokes. I've seen DMVPN around in the past but never had chance to configure. So basically I'm looking to create a configuration template going forward. The 3rd party test spoke is running a 3845 router. Attached is config. Many thanks.
... View more
Labels:
Created by
paulwoodsy
in VPN and AnyConnect
in VPN and AnyConnect
04-08-2013
04:31 AM
04-08-2013
04:31 AM
Thanks Jouni. Under group policy I've added :- split-tunnel-policy tunnelall split-tunnel-network-list none I'm happy with the above config but when I test this out using Cisco Anyconnect from my web browser I don't see the " SSL_VPN_ALL" group from the dropdown menu. I only get the "Employee_VPN" group instead. I do have split-tunneling with another group called Employee_VPN which is more redstrcitive with acl's etc. Employee_VPN conf below: group-policy GroupPolicy_Employee-VPN internal group-policy GroupPolicy_Employee-VPN attributes wins-server none dns-server value *.*.*.* vpn-tunnel-protocol ssl-client split-tunnel-policy tunnelspecified split-tunnel-network-list value sslvpn_split_tunnel default-domain value test123.com split-tunnel-all-dns disable webvpn anyconnect profiles value employees_general type user tunnel-group Employee-VPN type remote-access tunnel-group Employee-VPN general-attributes address-pool sslvpn_pool1 default-group-policy GroupPolicy_Employee-VPN tunnel-group Employee-VPN webvpn-attributes group-alias Employee-VPN enable Any ideas on how to get anyconnect working with my test123 username Thanks in advance.
... View more
Created by
paulwoodsy
in VPN and AnyConnect
in VPN and AnyConnect
04-04-2013
02:08 PM
04-04-2013
02:08 PM
Hi, I'm looking to create a group that will route all traffic over an SSL VPN rather than split tunnelling? So far I've created the following:- define group policy: group-policy SSL_VPN_ALL attributes vpn-tunnel-protocol svc Define tunnel group: tunnel-group SSL_VPN_ALL type remote-access tunnel-group SSL_VPN_ALL general-attributes address-pool sslvpn_pool1 default-group-policy SSL_VPN_ALL User settings: username test123 password test123 encrypted username test123 attributes vpn-group-policy SSL_VPN_ALL group-lock value SSL_VPN_ALL service-type remote-access Attached is config. Any ideas on how to finish this off would be much appeciated. cheers
... View more
Labels:
06-28-2011
06:39 AM
I have a large number of SVI's on my distribution switches & I'd like to ensure they are being packet switched using cef. The MSFC in use houses a PFC2 daugther board which can only accomodate up to 16 HSRP group instances before routing overheads kicks in. I have breached this quota, so I would like to renumber & consolidate these HSRP group instances without causing an impact? Any advice on how best to prepare this bearing in mind I can't allow any service impact? Thanks in advance.
... View more
Labels:
05-20-2011
12:47 AM
Hi, I have a 6509 running dual sups - (WS-X6K-SUP1A-2GE, WS-F6k-PFC). If I configure sso or rpr redundancy will the sup's automatically syncrohnise? Ultimately what I want to ahieve is if I amend configuration on the active sup then save to startup will this config change also replicate to the standby sup? I have used feature navigator to determine what redundancy features are available & it seems my MSFC IOS - c6msfc2-dsv-mz.121-8a.E4.bin does not support rpr or sso? Is there a command to show me if sso or rpr is available? Thanks in advance.
... View more
Labels:
05-17-2011
12:49 PM
Hello, I am looking at implementing an SSL VPN solution for an international "semi-trusted" company. My aim is to utilise existing ASA 5520 & enable the clientless WebVPN feature using ASDM. I would like to avoid increased administrative duties like creating new user accounts for clients logging into the WebVPN. Is there any functionality to integrate into active directory for the clients? Thanks in advance.
... View more
Labels:
12-10-2013
Thanks for your reply Edison.I have tried this today & can see matches
under the CAT1_APPS_ACL & I a...
12-09-2013
I'm wanting to clean up the default class-map. At the moment the key
apps are not grouped into a man...
11-26-2013
I am looking for assistance to implement Qos for Lync 2013 across a
number of sites without the need...
10-18-2013
License features were mis-matched. I quickly upgraded the license on the
copper 3750X to ipbase then...
08-29-2013
Hi,Can you run 1Gbps over an SFP+ interface or are my hands tied to
10Gbps only? I have only one spa...
08-23-2013
During POST I get the following:-*Mar 1 00:00:24.335:
%STACKMGR-5-MAJOR_VERSION_MISMATCH: Major Vers...
08-23-2013
Hi,In a nutshell:-I have 2 x 3750x switches both running identical IOS -
12.2(55)SE5 & both connecte...
08-22-2013
Hi Anderson,Did you manage to resolve your stack issue? I too have
encountered the same issue, in a ...
04-23-2013
Hi, We've setup a 2951 router as the hub & am now ready to set a config
standard for connecting mult...
Created by
paulwoodsy
in VPN and AnyConnect
04-08-2013
04-08-2013
Thanks Jouni.Under group policy I've added :-split-tunnel-policy
tunnelall split-tunnel-network-list...
04-04-2013
Hi,I'm looking to create a group that will route all traffic over an SSL
VPN rather than split tunne...
06-28-2011
I have a large number of SVI's on my distribution switches & I'd like to
ensure they are being packe...
05-20-2011
Hi,I have a 6509 running dual sups - (WS-X6K-SUP1A-2GE, WS-F6k-PFC).If I
configure sso or rpr redund...
Public Statistics
| Date Registered | 02-08-2008 04:56 AM |
| Date Last Visited | 04-11-2018 12:18 AM |
| Total Messages Posted | 18 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 3 | |
| 3 | |
| 3 | |
| 4 | |
| 3 |
.jpg "Hall of Fame Community Legend"){kind=icon}
