Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ittechk4u1
Stats
Member since
01-14-2015
376
Posts
14
Helpful
2
Solutions
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-30-2019
12:09 AM
09-30-2019
12:09 AM
Excellent. It worked now after deletion of trusted old certs. Thank a lot. you guys are awesome.
... View more
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-29-2019
11:50 PM
09-29-2019
11:50 PM
can you please tell me how can i do it ? I tried but didn't find a way... Thanks
... View more
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-29-2019
10:39 PM
09-29-2019
10:39 PM
Let me try it. Thank for suggestion.
... View more
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-25-2019
09:35 PM
09-25-2019
09:35 PM
Time is correct on both. I installed wildcard CA signed cert on ISE and SSL cert signed by CA on cisoc prime but prime showing error "Mismatched address" as certificate error. I suspect its the issue with TLSV1 handshake. Thanks
... View more
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-25-2019
09:33 PM
09-25-2019
09:33 PM
Even i guess so. I will check if i can raise a TAC case ..
... View more
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-25-2019
02:47 AM
09-25-2019
02:47 AM
Hello Experts, Earlier (Before SSL certificate installation) CPI and ISE was working together but now...I am struggling to get integrate CPI and ISE. ISE version: 2.1.0.474 CPI: 3.5.0.0.55.0 Error(s): You must correct the following error(s) before proceeding: Error: The connection to ISE with IP address "xx.xx.xx.xx" has timed out. Please check the network connectivity and the user account status on the ISE. Thanks
... View more
- Tags:
- cisco prime
Labels:
09-23-2019
01:33 AM
Active(Primary) is running form long time. Secondary : I installed it new last week to pair with Primary. How to do it via GUI ? Can you please help. Thanks
... View more
09-23-2019
12:12 AM
Yes i tried but installation not working. i am getting this error: % Unable to unbundle the package. Package may be corrupt or there is not enough disk space thanks
... View more
09-22-2019
10:42 PM
Hello experts, I want to setup two Cisco prime in HA. Primary server is installed and working. Yesterday i installed a new PI and concurred as secondary PI. Only difference between these two is : Primary has a patch 2.0 and secondary dont. Now while doing HA registration i am getting this error: Error(s): You must correct the following error(s) before proceeding: Error: High Availability Registration cannot be done. Check whether the Primary and Secondary are running with different versions of the product. i try to create a FTP user but is not working : Error : This command cannot be executed on a server in secondary HA mode Any idea why I am getting this and how can i insatlled the same patch on secondary PI? Thanks
... View more
- Tags:
- wlan
Labels:
09-03-2019
04:14 AM
I have in total 5 spoke and these spoke must only communicate with Both HUBs. Thnaks
... View more
09-03-2019
12:44 AM
Hello experts, I am having below config on my HUB and spoke routers: HUB1: interface Tunnel5656 bandwidth 40000 ip address 10.13.198.4 255.255.255.0 no ip redirects no ip next-hop-self eigrp 1 no ip split-horizon eigrp 1 ip nhrp authentication HA18BJ56 ip nhrp map multicast dynamic ip nhrp network-id 4 ip nhrp holdtime 300 ip tcp adjust-mss 1360 delay 1000 tunnel source 195.243.205.120 tunnel mode gre multipoint tunnel key 4 tunnel protection ipsec profile DMVPN HUB2: interface Tunnel5656 bandwidth 40000 ip address 10.13.198.5 255.255.255.0 no ip redirects no ip next-hop-self eigrp 1 no ip split-horizon eigrp 1 ip nhrp authentication HA18BJ56 ip nhrp map 10.13.198.4 195.243.205.120 ip nhrp map multicast 195.243.205.120 ip nhrp network-id 4 ip nhrp holdtime 300 ip nhrp nhs 10.13.198.4 ip tcp adjust-mss 1360 delay 1500 tunnel source 212.185.41.204 tunnel mode gre multipoint tunnel key 4 tunnel protection ipsec profile DMVPN Spoke1(same for all other execpt ISP IP and tunnel IP): interface Tunnel5656 bandwidth 20000 ip address 10.13.198.50 255.255.255.0 no ip redirects ip mtu 1400 ip flow monitor NTAmonitor input ip nhrp authentication HA18BJ56 ip nhrp map 10.13.198.4 195.243.205.120 ip nhrp map multicast 195.243.205.120 ip nhrp map 10.13.198.5 212.185.41.204 ip nhrp map multicast 212.185.41.204 ip nhrp network-id 4 ip nhrp holdtime 300 ip nhrp nhs 10.13.198.4 priority 1 cluster 4 ip nhrp nhs 10.13.198.5 priority 2 cluster 4 ip nhrp nhs cluster 4 max-connections 2 ip nhrp server-only ip tcp adjust-mss 1360 tunnel source GigabitEthernet0/2 tunnel mode gre multipoint tunnel key 4 tunnel vrf ISP1 tunnel protection ipsec profile DMVPN spoke2: interface Tunnel5656 bandwidth 20000 ip flow monitor NTAmonitor input ip address 10.13.198.51 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication HA18BJ56 ip nhrp map 10.13.198.4 195.243.205.120 ip nhrp map multicast 195.243.205.120 ip nhrp map 10.13.198.5 212.185.41.204 ip nhrp map multicast 212.185.41.204 ip nhrp network-id 4 ip nhrp holdtime 300 ip nhrp nhs 10.13.198.5 priority 2 cluster 4 ip nhrp nhs 10.13.198.4 priority 1 cluster 4 ip nhrp nhs cluster 4 max-connections 2 ip tcp adjust-mss 1360 tunnel source GigabitEthernet0/0/0 tunnel mode gre multipoint tunnel key 4 tunnel vrf ISP1 tunnel protection ipsec profile DMVPN Could you please help to stop spoke to spoke communication via tunnel 5656 Thanks in advance
... View more
Labels:
08-25-2019
11:51 PM
Thanks guys, Now its working. I created a DMVPN tunnel . Issue was with NAT-T. I configured NAT on LTE router and it started working. Thanks
... View more
08-11-2019
06:16 AM
Sorry for not giving you the output of these commands. About how to make the new design for a long term solution: If you have GRE Tunnels protected by IPSec as primary and secondary path, you should think of using a p2p GRE tunnel protected by IPSec also for your tertiary path.--> Good Idea, Let me try to do it. I will update you. Thanks for valuable information.
... View more
08-10-2019
11:37 PM
Giuseppe, Thanks for your help. I used route-map to access the spoke route from HUB. (But i cant use these as permanent solution because LTE solution will be used as 3rd number:, first traffic will flow via GRE tunnels and if these tunnels are down then over LTE.) Check my cofnig attached: Now if i use route-map on HUB router ip access-list extended TEST permit ip 10.18.0.0 0.0.255.255 10.99.0.0 0.0.255.255 ! route-map GM_SAP permit 7 match ip address TEST set vrf ISP3 ! int gig0/1 ip policy route-map GM_SAP Then i can ping from 10.18.0.0/16 to 10.99.0.0/16 but cant ssh. I suspect its a issue with routing.
... View more
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
09-30-2019
09-30-2019
Excellent. It worked now after deletion of trusted old certs. Thank a
lot. you guys are awesome.
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
09-29-2019
09-29-2019
can you please tell me how can i do it ? I tried but didn't find a
way... Thanks
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
09-29-2019
09-29-2019
Let me try it. Thank for suggestion.
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
09-25-2019
09-25-2019
Time is correct on both. I installed wildcard CA signed cert on ISE and
SSL cert signed by CA on cis...
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
09-25-2019
09-25-2019
Even i guess so. I will check if i can raise a TAC case ..
Created by
ittechk4u1
in Other Wireless - Mobility Subjects
09-25-2019
09-25-2019
Hello Experts, Earlier (Before SSL certificate installation) CPI and ISE
was working together but no...
09-23-2019
Active(Primary) is running form long time.Secondary : I installed it new
last week to pair with Prim...
09-23-2019
Yes i tried but installation not working. i am getting this error:%
Unable to unbundle the package. ...
09-22-2019
Hello experts, I want to setup two Cisco prime in HA. Primary server is
installed and working. Yeste...
09-03-2019
Hello experts, I am having below config on my HUB and spoke routers:
HUB1:interface Tunnel5656bandwi...
Created by
ittechk4u1
in Routing
08-25-2019
08-25-2019
Thanks guys, Now its working. I created a DMVPN tunnel . Issue was with
NAT-T. I configured NAT on L...
Created by
ittechk4u1
in Routing
08-11-2019
08-11-2019
Sorry for not giving you the output of these commands. About how to make
the new design for a long t...
Created by
ittechk4u1
in Routing
08-10-2019
08-10-2019
Giuseppe, Thanks for your help. I used route-map to access the spoke
route from HUB. (But i cant use...
Public Statistics
| Date Registered | 01-14-2015 10:20 AM |
| Date Last Visited | 10-09-2019 12:10 AM |
| Total Messages Posted | 376 |
| Total Helpful Votes Received | 14 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 144 | |
| 5 | |
| 15 | |
| 25 | |
| 5 |
.jpg "VIP Mentor"){kind=icon}
.jpg "Hall of Fame Expert"){kind=icon}
