Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About srikanth ath
Stats
Member since
08-17-2011
358
Posts
40
Helpful
8
Solutions
06-01-2015
11:11 AM
Hello Experts, I was looking to upgrade the firewall(5505) and 1900(router) in my network. where both of them have been announced with the EOL by cisco. Can you please provide what is the latest version of IOS versions i can use and these devices support to be upgraded too...As an engineer im week in these aspects so thought to get your reviews. please find the existing IOS version on these devices. 5505# sh version Cisco Adaptive Security Appliance Software Version 7.2(2) Device Manager Version 5.2(2) Compiled on Wed 22-Nov-06 14:16 by builders System image file is "disk0:/asa722-k8.bin" Config file at boot was "startup-config" 5505 up 1 year 200 days Hardware: ASA5505, 256 MB RAM, CPU Geode 500 MHz 1900#sh version Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2011 by Cisco Systems, Inc. Compiled Tue 06-Dec-11 16:02 by prod_rel_team Below are the Critical patches that the security team suggested to remediate their findings 1900# CVE-2011-0935 CVE-2011-3271 CVE-2011-4012 ASA 5505 CVE-2007-2462 CVE-2012-0358 CVE-2010-4675 CVE-2010-4680 Thank you,
... View more
Labels:
05-27-2015
09:19 PM
We have an intermittent issue with the L2L VPN. I couldnt pull the logs the time when the issue occured, but, please suggest some troubleshooting steps which i need to be taken care of if the issue persist again. 1. No Internet connectivity issue at either end of the VPN endpoints. 2. The interesting traffic host are responding well from inside the network. 3. The other end VPN device is Netgear and ours is Cisco ASA. Experts, please provide your valuable points so that it can help me in troubleshooting the VPN issue if this occurs again. Thank you,
... View more
Labels:
Created by
srikanth ath
in Switching
in Switching
05-11-2015
11:58 PM
05-11-2015
11:58 PM
Will changing the TCP Keepalive parameter to 120, from 40320, on two servers have any negative effects on overall networking? keepalive setting was raised to 40320 on 2 servers during debugging. Will there be any effect to overal networking by changing this back?
... View more
Labels:
03-02-2015
04:27 AM
Looking to enable ssl VPN- Anyconnect for my environment. I see few of the below package installed on my firewall. But, the sh version doesnt show me with the licenses enabled. LmL# sh webvpn svc 1. disk0:/anyconnect-win-2.4.1012-k9.pkg 1 dyn-regex=/Windows NT/ CISCO STC win2k+ 2,4,1012 Thu 12/17/2009 15:47:55.45 1 SSL VPN Client(s) installed LmL# sh version Cisco Adaptive Security Appliance Software Version 8.2(5) icensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES : Enabled VPN-3DES-AES : Enabled Security Contexts : 5 GTP/GPRS : Disabled SSL VPN Peers : 2 Total VPN Peers : 750 Shared License : Disabled AnyConnect for Mobile : Disabled AnyConnect for Cisco VPN Phone : Disabled AnyConnect Essentials : Disabled Advanced Endpoint Assessment : Disabled UC Phone Proxy Sessions : 2 Total UC Proxy Sessions : 2 Botnet Traffic Filter : Disabled Please reply back.
... View more
Labels:
02-18-2015
08:58 AM
Hello Need help on Exempting Nat I'm looking to configure a nat exempt for couple of Hosts in X-DMZ to any interface. so, what would be the correct way in 9.1 version of ASA. object-group network Sensors network-object host 10.14.X.X network-object host 10.14.X.X 1. nat ( X-DMZ ,any) source static Sensors Sensors destination static any any description nat exempt or 2. nat exempting for each of the interfaces nat (X-DMZ, Leveraged) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, Inside) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, Outside) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, VDMZ) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, AND) source static Sensors Sensors destination static any any description nat exempt Below are the security levels applied. Cisco Adaptive Security Appliance Software Version 9.1(3) context. ASA# sh nameif Interface Name Security Outside Outside 0 Inside Inside 100 TenGigabitEthernet1/1.X Leveraged 50 TenGigabitEthernet1/1.Y AND 50 TenGigabitEthernet1/3.Z X-DMZ 40 TenGigabitEthernet1/3.L VDMZ 60 Thanks in advance
... View more
Labels:
02-18-2015
08:40 AM
Hello Need help on Nat exempt. I'm looking to configure a nat exempt for couple of Hosts in X-DMZ to any interface. so, what would be the correct way in 9.1 version of ASA. object-group network Sensors network-object host 10.14.X.X network-object host 10.14.X.X 1. nat ( X-DMZ ,any) source static Sensors Sensors destination static any any description nat exempt or 2. nat exempting for each of the interfaces nat (X-DMZ, Leveraged) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, Inside) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, Outside) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, VDMZ) source static Sensors Sensors destination static any any description nat exempt nat (X-DMZ, AND) source static Sensors Sensors destination static any any description nat exempt Below are the security levels applied. Cisco Adaptive Security Appliance Software Version 9.1(3) context. ASA# sh nameif Interface Name Security Outside Outside 0 Inside Inside 100 TenGigabitEthernet1/1.X Leveraged 50 TenGigabitEthernet1/1.Y AND 50 TenGigabitEthernet1/3.Z X-DMZ 40 TenGigabitEthernet1/3.L VDMZ 60 Thanks in advance
... View more
Labels:
02-10-2015
05:44 AM
Can you please provide the configuration guide as well with difference in nexus and cisco switch/router models.
... View more
02-10-2015
05:43 AM
hello Experts, I'm bit confused whether the Cisco model 3500 (cisco WS-C3548-XL ) has the CRWS tool which provides GUI interface for configuring the switch. The reason i ask is the Security team have found the vulnerability in this device and suggested me to upgrade the current Crws version to CRWS 3.3.0 build 31. I see this tool is used in soho and 800 series router but not in cisco 3500. Yet, Im puzzled it might use in cisco 3500 series switches too and suggest if it is used ? sh version cisco WS-C3548-XL (PowerPC403) processor (revision 0x01) with 16384K/1024K bytes of memory. Processor board ID FAB0547Y1DL, with hardware revision 0x00 Last reset from power-on sh flash: Directory of flash:/ 2 -rwx 1749748 Apr 30 2001 10:54:49 c3500XL-c3h2s-mz-120-5.3.WC.1.bin 3 -rwx 94375 Apr 30 2001 10:54:49 c3500XL-diag-mz-120-5.3.WC.1 4 drwx 10176 Feb 28 1993 20:00:55 html 5 -rwx 272 Dec 31 1969 20:00:20 env_vars 165 -rwx 25 Oct 06 1993 22:00:58 snmpengineid 166 -rwx 7680 May 28 2010 09:39:03 vlan.dat 167 -rwx 12217 Jan 08 2013 11:05:34 config.text 3612672 bytes t In reference i found this document for the CRWS 3.3.0 build http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060712-crws#software
... View more
Labels:
01-22-2015
11:53 AM
Hello, I Just realised how nexus model switches are important in networking profession as many of the companies alredy deployed these. Can you please share the basic documents as a startup what to know about nexus and where to start from?
... View more
Labels:
01-20-2015
05:13 AM
First, we are not clear in what you are trying to achieve. If you are looking for just alternate option then HSRP can track the interfaces.But, it mostly depends on the network setup you have and what you try to achieve.please read the below document http://www.cisco.com/c/en/us/support/docs/ip/hot-standby-router-protocol-hsrp/13780-6.html
... View more
08-12-2014
01:36 PM
What does the below Nat means access-list PAT_EXTRANET_HEALTH extended permit ip object-group RFC1918 host 1.1.1.1 nat (INSIDE) 25 access-list PAT_EXTRANET_HEALTH route EXTRANET 1.1.1.1 255.255.255.255 10.10.10.10 1
... View more
Labels:
04-10-2014
06:29 PM
1. This is a very old switch commands like dot1q doesnt work on this. RKVSGSW111T5(config)#int fa 0/24 RKVSGSW111T5(config-if)#swi RKVSGSW111T5(config-if)#switchport mo RKVSGSW111T5(config-if)#switchport mode ? access Set trunking mode to ACCESS unconditionally multi Set trunking mode to multi-VLAN mode RKVSGSW111T5(config-if)#switchport t RKVSGSW111T5(config-if)#switchport t? % Unrecognized command RKVSGSW111T5(config-if)#switchport trunk? % Unrecognized command RKVSGSW111T5(config-if)#switchport trunk 2. Vlan creation is entirely different in 2924 switches, where this has to be created in the exec mode under vlan database. This is vast network and i have just given example as we are of running two vlans, in real time there are arround 50 vlans. RKVSGSW111T5#vlan dat? % Unrecognized command RKVSGSW111T5#vlan? % Unrecognized command RKVSGSW111T5#vlan Trunking :
... View more
04-10-2014
05:39 PM
Experts, 2924 XL switch connecting to 2960 switch 1. the switch 2924 running with IOS version 11.2 standard version. As of now it is running on default vlan1 and the connected port to 2960 is also on default vlan. I wish to make this port as trunk port but the (config line doesnt accept switchport mode trunk). . can you please help me on how can i configure the connected port to 2960 as trunk port I can see this version support multi-vlan but can i use this multi-vlan concept as like a trunk port to connect the switches. 2. the same switch 2924 doesnt support configuring vlans as like vlan database in exec mode. Im running couple of vlans on my network and i got to make this switch as vtp transparent and configure all the ports as switch port with vlans. Is there a way to configure vlans, vtp on this switch. Thanks,
... View more
Labels:
06-01-2015
Hello Experts, I was looking to upgrade the firewall(5505) and
1900(router) in my network. where bot...
05-27-2015
We have an intermittent issue with the L2L VPN. I couldnt pull the logs
the time when the issue occu...
05-11-2015
Will changing the TCP Keepalive parameter to 120, from 40320, on two
servers have any negative effec...
03-02-2015
Looking to enable ssl VPN- Anyconnect for my environment. I see few of
the below package installed o...
02-18-2015
Hello Need help on Exempting NatI'm looking to configure a nat exempt
for couple of Hosts in X-DMZ t...
02-18-2015
Hello Need help on Nat exempt.I'm looking to configure a nat exempt for
couple of Hosts in X-DMZ to ...
02-10-2015
Can you please provide the configuration guide as well with difference
in nexus and cisco switch/rou...
02-10-2015
hello Experts, I'm bit confused whether the Cisco model 3500 (cisco
WS-C3548-XL ) has the CRWS tool ...
01-22-2015
Hello, I Just realised how nexus model switches are important in
networking profession as many of th...
01-20-2015
First, we are not clear in what you are trying to achieve. If you are
looking for just alternate opt...
08-12-2014
What does the below Nat meansaccess-list PAT_EXTRANET_HEALTH extended
permit ip object-group RFC1918...
04-10-2014
1.This is a very old switch commands like dot1q doesnt work on this.
RKVSGSW111T5(config)#int fa
0/2...
Public Statistics
| Date Registered | 08-17-2011 05:50 AM |
| Date Last Visited | 04-26-2018 03:11 AM |
| Total Messages Posted | 358 |
| Total Helpful Votes Received | 40 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 33 | |
| 5 | |
| 5 | |
| 5 | |
| 8 |
Helpful Votes From
