About sganpat

sganpat · 03-29-2022

I have two Cisco 5585 in a cluster. My understanding of the "show cluster access-list" command is that it shows the hit count as (x+y, x, y), with the first value as the aggregated hit count of the other cluster members. So if I have to cluster membe...

sganpat · 01-24-2016

I'm looking at the At-A-Glance sheet for the Cisco 3650 switches. It says for the WS-C3650-24PD you can have "2 x 10 Gigabit Ethernet with SFP+ (or 4 x Gigabit Ethernet with SFP)" It says for the WS-C3650-24PD you can have "2 x 10 Gigabit Ethernet wi...

sganpat · 11-04-2014

I am implementing GET VPN. I have set my KSs to receive-only mode, so all my GMs are in inbound-only mode. I did this because I want to see if there are problems with registration, I expect that if there are problems it will not affect production tra...

sganpat · 10-16-2013

This is a bit long, so bear with me. I have a strange issue, which I can't say if it is causing any problems. I've configured a hierarchical QoS policy on the hub router of our network. It has a WAN speed of 20Mbps, while the DR site has a speed of 1...

sganpat · 08-31-2013

I'm implementing QoS and encountered a problem where the router is not recognizing the DSCP information from the LAN.On the LAN Switch port connected to the router I have:!interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport m...

sganpat · 10-11-2016

You need to copy the OVA file to the bootflash or the harddisk in order to use the setup. It doesn't appear that you have the file uploaded onto the router.

sganpat · 01-25-2016

Thanks for the info. I found out the 3650 SFP+ models will support either 10 or 1 Gig, but you can't mix them. So you can't have one port at 10G and the other at 1G. Some of the 3850 models can do that though. Sachin

sganpat · 12-14-2015

Sorry I took so long to answer this. The SA Receive_Only allows traffic to be received either in encrypted or in plain text. It is used when rolling out GET VPN when all the routers have not been converted to group members. So you have misunderstood ...

sganpat · 11-04-2014

I can't find anything wrong with your config.Are you network devices configured to use the internal interface of the firewall as the default gateway? Or do you have a route to 10.171.81.0/24 via 10.171.80.1?

sganpat · 11-04-2014

Yes, this is normal behaviour. This is a Phase 2 mismatch. The ACLs must be a mirror match at both sides to allow the IPSec SAs to be created.

Member Since	‎09-17-2006 07:28 AM
Date Last Visited	‎04-01-2022 12:03 AM
Posts	64
Total Helpful Votes Received	10

User Statistics

User Activity

ASA show cluster access-list showing incorrect aggregated result

How many SFP or SFP ports does the WS-C3650-24PD have?

GETVPN GM stops forwarding traffic with CRYPTO-4-RECVD_PKT_NOT_IPSEC after rekey, but it's in inbound-only mode

QoS Policy-Map output does not match settings

WAN QoS and DSCP from LAN not recognised

You need to copy the OVA file

Thanks for the info.

Sorry I took so long to

I can't find anything wrong

Yes, this is normal behaviour