About m.kafka

m.kafka · 06-21-2017

Hi all, Scenario: - | link down +---- + /-----\ |---------X-| SW1 |---------| RT1 |--\ | +-----+ \-----/ \ | no updates for X -->| /-----\ |Netw X | RT3 |---- | ...

m.kafka · 07-12-2016

Hi everybody, I can't find any decent guide how ASA for FXOS (aka Asa for Firepower) operates together with Firepower Threat defense. The "Quick Start Guides" available in the ASA documentation section (http://www.cisco.com/c/en/us/td/docs/security/a...

m.kafka · 08-13-2015

We have an exotic network issue: A src sends high volume directed broadcast traffic towards a destination network, where one or more receivers process the data. We experience high packet loss for directed broadcasts, the same traffic volume as unicas...

m.kafka · 12-19-2013

Hi everybody,I can't find the detailed information which attributes are exactly needed for the Anyconnect 3.1 client to correctly identify the VPN server -ASA 8.4(4)1I have added two servers in the client connection profile:IP address, primary protoc...

m.kafka · 09-27-2012

The following policy-map is rejected on copper interfaces running at 10Mbit/s, other interfaces (1Gbit/s or 100Mbit/s accept the same policy):switch#sh policy-map Qos-VoIP-Output-Policy_access_port Policy Map Qos-VoIP-Output-Policy_access_port Cl...

m.kafka · 06-23-2017

Sorry, I am not aware of any time-based or conditional VLAN-assignment which can be configured locally on the switch. You could write a script e.g. in powershell which puts the accessports in a special VLAN for updating. That's all I can contribute i...

m.kafka · 06-23-2017

Dynamically learned MAC-table entries will be cleared if the switchport goes down, regardless of aging-time. Only solution I can think of is port security with sticky learning: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/r...

m.kafka · 06-21-2017

Depends on your RADIUS Server, you would need to return a different VLAN based on time-of-day.

m.kafka · 06-21-2017

Does this happen repeatedly?

m.kafka · 06-21-2017

Hi Georg, the link you sent is rather the other way round: the tracking object depends on the routing table entry, I wanted the routing advertisement depending on the tracking state. I have seen that feature. Thx for your answers, MiKa

Member Since	‎03-16-2004 05:36 AM
Date Last Visited	‎02-06-2023 05:35 PM
Posts	287
Total Helpful Votes Received	35

User Statistics

User Activity

Can I control routing updates through IP SLA or a tracking object?

Integrating ASA for Firepower (running on FXOS) with Firepower Threat defense

Directed broadcast packet loss with high traffic volume

ASA self-signed certificate for Anyconnect 3.1, which attributes?

SUP7-E QoS: service policy output not accepted when priority class has no policing

Sorry, I am not aware of any

Dynamically learned MAC-table

Depends on your RADIUS Server

Does this happen repeatedly?

Hi Georg,