Folks,              We have company laptops that are using Peap to connect to the corporate Wireless network. Recently we are getting a lot of tickets where he users are complaining that they can not connect to the wireless network. When I tell them to remove the wireless network from their laptop(windows 10 and 7) their laptop connects to the SSID after relearning it.   Any ideas why such a thing is happening. Mutiple laptops and multple locations running different version of windows are complaining about the same problem and removing the SSID from the known list fixes the problem.   Helpful post will be rewarded. ... View more

Folks,              We are implementing site to site VPN with NAT since there are overlapping subnets. is there issues with SNMP polling and traps that i need to worry about since i am natting? ... View more

Folks,            I am a bit confused about the following statement from CAT 9300 QOS guide.   Note that the default trust mode for a port is DSCP based. The trust mode ‘falls back’ to CoS if the incoming packet is a pure Layer 2 packet.   what is classified as a pure layer 2 frame?   All helpful posts will be rated. ... View more

Folks,               I have a  simple site to site vpn setup using ASA's. We had overlapping address space on both sides therefore we are doing NAT as the traffic traverses over the IPSEC tunnel.   Since the VPN tunnel is between two different organizations they do not want to point to each other's DNS for resolution as safeguard themselves.   My question is what is the most scale able solution for this problem? Creating LMHost files on the hosts is not an option as there are many hosts.   I will surely rate any helpful answer. ... View more

Folks,           I have the following AAA commands on my router in production. I am  trying to console in and unable to get into enable mode. When i login it askes me for a username/password which i proviode, then it asks me for an enable password when i type in enable. i tried all the passwords( enable password, enable secret, line con password) they all failed. Any ideas?         username cisco privilege 15 password 7 0822455D0A16 aaa new-model aaa authentication login LOREAL-TACACS group tacacs+ local aaa authentication login LOCAL-ACCESS local aaa authentication enable default group tacacs+ enable aaa authorization config-commands aaa authorization exec default group tacacs+ if-authenticated aaa authorization commands 0 default group tacacs+ if-authenticated aaa authorization commands 1 default group tacacs+ if-authenticated aaa authorization commands 15 default group tacacs+ if-authenticated aaa accounting exec default start-stop group tacacs+ aaa accounting commands 0 default start-stop group tacacs+ aaa accounting commands 1 default start-stop group tacacs+ aaa accounting commands 15 default start-stop group tacacs+     line con 0 exec-timeout 0 0 password 7 120D46461C021813 logging synchronous login authentication LOCAL-ACCESS ... View more

Folks,                 I have the following command enabled on a 9300. I see portfast enabled on the access ports but i do not see bpduguard. Any ideas?   spanning-tree portfast bpduguard default   ... View more

Folks,          I have these commands defined in the global config mode. But I do not see these commands show up underneath an access port interface. I am running a 9300.   spanning-tree portfast default spanning-tree portfast bpduguard default ... View more