Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About yasirirfan
yasirirfan
Member since
10-17-2005
Enthusiast
Basically from Bangalore, India. Since 1998 been in Middle East and worked for various organisation and segments, started with an entry level job in 1998 and was responsible for design and implementing network cabling solutions. Spotted quite early by an Engineering Manger and promoted to implement Network Projects for various customers. Migrated many non Cisco Switches like Cabletron, Foundry, Fore systems, Nortel etc to Cisco Switches. Started routing career with IPX and then evolved with various opportunities. Currently working as Network & Security Manager for one of the leading innovative company in Riyadh for their Managed Services Department. Still involved in various technical tasks, day to day operations, Firewall migrations from traditional to Next generation firewalls. Have experience on routing, switching, Data Centre and Security domains. Technical blogging is my passion and been blogging for IT Knowledge Exchange since 2008. Believes in sharing and actively involved in mentoring young professionals.
Expertise:
Switching, Routing, Network Security, Nexus, Data Center Design,Next Generation Firewalls, Load Balancers, SSL Decryption, Project managent, techical writing, Proxies, Email Security
Basically from Bangalore, India. Since 1998 been in Middle East and worked for various organisation and segments, started with an entry level job in 1998 and was responsible for design and implementing network cabling solutions. Spotted quite early by an Engineering Manger and promoted to implement Network Projects for various customers. Migrated many non Cisco S
Personal Web Page : http://itknowledgeexchange.techtarget.com/network-technologies/
02-14-2018
02:40 PM
Hi Xuehau Try to clear any pending tasks from Deploy > tasks tab and the try. It should work. Cheers Yasir
... View more
Created by
yasirirfan
in Security Documents
in Security Documents
02-24-2017
12:05 PM
02-24-2017
12:05 PM
Thanks a lot for sharing this wonderful info , I am in the planning stage of ISE 2.2 deployment in our Organisation. Do you recommend me some thing or some kind of templates which help me to come out with a best implementation plan for this project. Once again thanks a lot imbashir.
... View more
01-09-2017
10:57 PM
Dear Xin Li Can FMC manually update the signature? What is the best practice of signature update? Yes FMC is capable of updating the signature manually. So far its hard to find a best security practice documents from Cisco. Based on experience the signature updates should be automatically done. You can refer to following link for more details Firepower Management Center Configuration Guide, Version 6.0 - System Software Updates [Cisco Firepower Management Cen… Is there any Portal or Mail services to notify the customer for when/what signature applied? You can fine tune the FMC using the custom report part no sure about the signature. How can we exclude the specific signature on FirePower to be applied Simple don't update the specific signature your don't want and this url can further guide you Firepower Management Center Configuration Guide, Version 6.0 - System Software Updates [Cisco Firepower Management Cen… What is frequency of signature update, do we have any statistics for signature update frequency? You have an option to chose the update daily, weekly or monthly and even you can customise the updates to the particular day of the week. Hope this will help you Cheers Yasir
... View more
01-25-2016
08:24 PM
Dear Mehdi
Yes it can be done
Check this article from Cisco
http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/interfaces/configuration/guide/if_cli/if_basic.html#pgfId-2266337
You can change the LACP timer rate to modify the duration of the LACP timeout. Use the lacp rate command to set the rate at which LACP control packets are sent to an LACP-supported interface. You can change the timeout rate from the default rate (30 seconds) to the fast rate (1 second). This command is supported only on LACP-enabled interfaces. To configure the LACP fast time rate, see Configuring the LACP Fast Timer Rate .
Cheers
Yasir
... View more
01-25-2016
12:47 PM
Hi Carlo
Make sure your firewall is not hitting the bug CSCug88962, as I had issues with 9.1 version . the most stable version will be 9.2(4). you may consider upgrading the Firewall to much stable version. For your platform Cisco recommends 9.2.4.SMP IOS version.
Cheers
Yasir
... View more
Created by
yasirirfan
in VPN and AnyConnect
in VPN and AnyConnect
04-20-2013
04:09 AM
04-20-2013
04:09 AM
Dear All We have site to site vpn with one of our client. Our client wants to monitor some of the servers located in our data center. The asked us to open IMCP and SNMP ports. We opened them , IMCP is working fine, where as SNMP is not working, the site to site vpn is also working fine we have allowed the traffic from our access list from outside to inside network access-list Inside_In remark Allow ICMP traffic to AGXX servers access-list Inside_In extended permit icmp 10.100.x.0 255.255.255.0 134.x.x.0 255.255.255.0 log disable access-list Inside_In remark Allow SNMP traffic to AGXX servers access-list Inside_In extended permit udp 10.100.x.0 255.255.255.0 134.x.x.0 255.255.255.0 eq snmp from inside to outside network access-list Outside_Out remark Allow ICMP traffic to AGXX servers access-list Outside_Out extended permit icmp 10.100.x.0 255.255.255.0 134.x.x.0 255.255.255.0 log disable access-list Outside_Out remark Allow SNMP traffic to AGXX servers access-list Outside_Out extended permit udp 10.100.x.0 255.255.255.0 134.x.x.0 255.255.255.0 eq snmp Can any one please help me to torubleshoot this problem. BR Yasir
... View more
Labels:
Created by
yasirirfan
in Policy and Access
in Policy and Access
08-26-2012
04:30 AM
08-26-2012
04:30 AM
Dear All We have out of band NAC implementation, our implementer is telling us we cannot configure NAC on any devices whihc are configured with static IP address. We have to bypass them is this right? Best regards, Yasir
... View more
Labels:
05-26-2011
10:36 AM
You can you xmodem command to transfer the IOS image from your system. Check Cisco web site for xmodem Sent from Cisco Technical Support iPhone App Sent from Cisco Technical Support iPhone App
... View more
05-24-2011
10:07 PM
May be the supervisor engine crashed check with TAC Sent from Cisco Technical Support iPhone App
... View more
05-24-2011
10:05 PM
No third party SFP,s work with any of the Cisco Devices. Be careful you may lose the Cisco warranty or support for using non Cisco SFP Regards Yasir Sent from Cisco Technical Support iPhone App
... View more
08-03-2007
10:16 PM
Here is the link for MRTG and the tools required http://oss.oetiker.ch/mrtg/ active perl http://aspn.activestate.com/ASPN/Downloads/ActivePerl/ MRTG tutorials http://www.netmon.org/dummies.htm and sample online MRTG link If you want more details please let me know. Also if u have a managable switch then u can monitor all users connected to the switch. Also you try cacti which is more efficient than MRTG .You can download from here & now its easier to install. http://forums.cacti.net/about14946.html Cheers Yasir
... View more
07-31-2007
12:46 AM
Hi Experts We are having two cisco 6513 switches with SUP 720. One with IOS 12.2.17d-SXB11 and other with 12.2(18)SXD7b. I have configured netflow in both the switches. The switch with IOS 12.2.17d-SXB11 is working fine and I am able collect netflow statistics for both in and out where as I am using the same configuration with my other switch with IOS 12.2(18)SXD7b, it can only recive the netflow for in but not for out. So what do you think the problem might be , is the configuration has to be changed ? becoz of other IOS ? please let me know. Here is config SWITCH with IOS 12.2.17d-SXB11 - WORKING for in and out mpls ldp logging neighbor-changes mls flow ip interface-full no mls flow ipv6 mls cef error action freeze interface Vlan1 no ip address shutdown ! interface Vlan50 description NETMANG ip address 50.0.0.2 255.255.255.0 ip helper-address 10.0.1.100 ip helper-address 10.0.1.101 ip nbar protocol-discovery ip route-cache flow standby 52 ip 50.0.0.1 standby 52 timers 5 15 standby 52 preempt ! interface Vlan100 ip address 10.0.0.54 255.255.248.0 ip directed-broadcast 101 ip nbar protocol-discovery ip route-cache flow standby 10 ip 10.0.0.10 standby 10 timers 5 15 standby 10 preempt ip flow-export source Vlan100 ip flow-export version 5 ip flow-export destination 10.0.0.1 9996 ip flow-export destination 10.0.0.6 9996 ip http server ! ! logging trap notifications logging 10.0.0.2 logging 10.0.0.6 logging 10.0.0.5 access-list 101 permit udp host 10.0.0.6 any eq echo ! snmp-server community xxx RO snmp-server community xxxr RW snmp-server ifindex persist SWITCH with IOS 12.2(18)SXD7b - NOT WORKING (Working only for IN) mls ip multicast flow-stat-timer 9 mls aging long 128 mls aging normal 32 mls flow ip interface-full no mls flow ipv6 mls nde sender mls cef error action freeze interface Vlan1 no ip address shutdown ! interface Vlan50 description NETMANG ip address 50.0.0.3 255.255.255.0 ip helper-address 10.0.1.100 ip helper-address 10.0.1.101 ip nbar protocol-discovery ip route-cache flow standby 52 ip 50.0.0.1 standby 52 timers 5 15 standby 52 priority 50 standby 52 preempt ! interface Vlan100 ip address 10.0.0.55 255.255.248.0 ip directed-broadcast 101 ip nbar protocol-discovery ip route-cache flow standby 10 ip 10.0.0.10 standby 10 timers 5 15 standby 10 priority 50 standby 10 preemp ip flow-export source Vlan100 ip flow-export version 5 ip flow-export destination 10.0.0.6 9996 ip flow-export destination 10.0.0.1 9996 ip http server snmp-server community xxx RO snmp-server community xxx RW snmp-server ifindex persist Cheers Yasir
... View more
Labels:
03-19-2007
03:44 AM
Hi Mahmood I did tried the above link, the first thing I did search cisco web site and later on when I found no solutions then I posted the question here. Thanks Yasir
... View more
03-19-2007
02:07 AM
Hi Prem I tried every thing I did tried from the above link. No luck i think i need to order flash memory for the supervisor engine regards, Yasir
... View more
Created by
yasirirfan
in Firewalls
02-14-2018 02:40 PM
02-14-2018 02:40 PM
Hi XuehauTry to clear any pending tasks from Deploy > tasks tab and the
try. It should work.CheersYa...
Created by
yasirirfan
in Identity Services Engine (ISE)
04-19-2017 09:53 PM
04-19-2017 09:53 PM
Hi chyps thanks for your valuable feedback. Really appreciate your
inputs. I will look into that.Hi ...
Created by
yasirirfan
in Identity Services Engine (ISE)
04-19-2017 02:12 AM
04-19-2017 02:12 AM
Hi AllI have a query related to ISE deployment for 10 K users.We have a
set of dedicated ISE applian...
Created by
yasirirfan
in Security Documents
02-24-2017 12:05 PM
02-24-2017 12:05 PM
Thanks a lot for sharing this wonderful info , I am in the planning
stage of ISE 2.2 deployment in o...
Created by
yasirirfan
in Identity Services Engine (ISE)
02-18-2017 11:31 PM
02-18-2017 11:31 PM
Hi I am in the process of deploying ISE 2.2 waiting for the hardware
delivery. I am thinking of usin...
01-09-2017 10:57 PM
Dear Xin LiCan FMC manually update the signature? What is the best
practice of signature update?Yes ...
01-25-2016 08:24 PM
Dear Mehdi Yes it can be done Check this article from Cisco
http://www.cisco.com/c/en/us/td/docs/swi...
01-25-2016 12:47 PM
Hi Carlo Make sure your firewall is not hitting the bug CSCug88962, as I
had issues with 9.1 version...
Created by
yasirirfan
in VPN and AnyConnect
04-20-2013 04:09 AM
04-20-2013 04:09 AM
Dear AllWe have site to site vpn with one of our client. Our client
wants to monitor some of the ser...
Created by
yasirirfan
in Policy and Access
08-26-2012 04:30 AM
08-26-2012 04:30 AM
Dear AllWe have out of band NAC implementation, our implementer is
telling us we cannot configure NA...
05-26-2011 10:36 AM
You can you xmodem command to transfer the IOS image from your system.
Check Cisco web site for xmod...
05-24-2011 10:07 PM
May be the supervisor engine crashed check with TACSent from Cisco
Technical Support iPhone App
05-24-2011 10:05 PM
No third party SFP,s work with any of the Cisco Devices. Be careful you
may lose the Cisco warranty ...
Public Statistics
| Date Registered | 10-17-2005 12:27 AM |
| Date Last Visited | 11-06-2018 12:51 PM |
| Total Messages Posted | 43 |
| Total Helpful Votes Received | 4 |
Helpful Votes Given To
