About m.kafka

m.kafka · 10-23-2023

We have a very small and simple setup (the network is too small for a classic leaf-and-spine setup): 3 Nexus 93180YC FX3 in a triangle, one VLAN mapped to a L2-VNI, BGP-EVPN and Distributed Anycast Gateway, no VRFs, no PIM. We opted for this design t...

m.kafka · 06-21-2017

Hi all, Scenario: - | link down +---- + /-----\ |---------X-| SW1 |---------| RT1 |--\ | +-----+ \-----/ \ | no updates for X -->| /-----\ |Netw X | RT3 |---- | ...

m.kafka · 07-12-2016

Hi everybody, I can't find any decent guide how ASA for FXOS (aka Asa for Firepower) operates together with Firepower Threat defense. The "Quick Start Guides" available in the ASA documentation section (http://www.cisco.com/c/en/us/td/docs/security/a...

m.kafka · 08-13-2015

We have an exotic network issue: A src sends high volume directed broadcast traffic towards a destination network, where one or more receivers process the data. We experience high packet loss for directed broadcasts, the same traffic volume as unicas...

m.kafka · 12-19-2013

Hi everybody,I can't find the detailed information which attributes are exactly needed for the Anyconnect 3.1 client to correctly identify the VPN server -ASA 8.4(4)1I have added two servers in the client connection profile:IP address, primary protoc...

m.kafka · 10-26-2023

Hi f00z, Thank you for the reply! Which lab do you use, CML, Hardware? DAG is only necessary if you have IP mobility (VM migration) to keep the MAC of the default gateway and want it simple. EVPN will (should) announce the gateway MACs of VTEPs to al...

m.kafka · 10-26-2023

Hi f00z thank you, the DAG was preventing a successful ARP to IPs on other VTEPs. We don't have IP mobility inside the VLAN (e.g. Virtual Machine migration) so removing the DAG gives us full connectivity. I think, I missed a config step "send-communi...

m.kafka · 10-26-2023

Hi f00z, First your question from the original post: 1. The documentation always uses multiple VRFs. Is this required in an enterprise where there is one tenant? No, you don't need VRFs always, only for multiple tenants with duplicate/overlapping L2 ...

m.kafka · 10-23-2023

Hi Neil, I'm afraid, this will not work smoothly. Overlay VLANs (VXLAN, VNI) are configured like this: vlan 123 name [choose your name] vn-segment 4567 I doubt, whether such a VLAN can be operated in both ways, VXLAN overlay and classic L2-VLAN, simu...

m.kafka · 10-23-2023

Hi Cristian, the SFP ports can be equipped with any Cisco transceiver: single mode, multi mode or copper. "Fixed" only means, that the uplink SFP receptacles are not modular (on other models you can choose uplink, e.g. SFP, SFP+). You have to order t...

Member Since	‎03-16-2004 05:36 AM
Date Last Visited	‎11-27-2023 02:48 AM
Posts	293
Total Helpful Votes Received	38

User Statistics

User Activity

N9k3 FX3, VXLAN EVPN and DAG: local SVI can't ARP IPs on remote VTEPs

Can I control routing updates through IP SLA or a tracking object?

Integrating ASA for Firepower (running on FXOS) with Firepower Threat defense

Directed broadcast packet loss with high traffic volume

ASA self-signed certificate for Anyconnect 3.1, which attributes?

Re: Migration from HSRP to VXLAN

Re: N9k3 FX3, VXLAN EVPN and DAG: local SVI can't ARP IPs on remote VT

Re: Migration from HSRP to VXLAN

Re: Migration from HSRP to VXLAN

Re: C9300L-24T-4G-E built-in 1G SFPs (SM or MM ?)