Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Muhammad Awais Khan
08-02-2019
Stats
Member since
03-14-2010
26
Posts
10
Helpful
2
Solutions
Created by
Muhammad Awais Khan
in Advanced Threats
in Advanced Threats
07-31-2019
04:32 PM
07-31-2019
04:32 PM
Hi, You need to know the subscription ID for the AMP contract, once you get it you can goto modify/renew subscription option to check the effect for adding new end points ( attached snapshot ) In your scenario, you will get the new contract ending date for the existing end points once you added the new end points. The difference of cost for the old end points will be calculated and need to be considered. In the end you will get the unified subscription ending date. So pricing will be same as per approved discount for new end points most likely, however, additional cost will be added for the existing end points from the old date of expiration to the new date. I would advice to get the actual price from the portal. Regards, Awais
... View more
07-23-2019
09:25 PM
07-23-2019
05:29 PM
Hi, Yes it is possible to apply QOS on the internet links used for IPSEC. You can refer to below as an example. I assumed you created IPSEC tunnels using Cisco ISRs. HO: !!!! Internet Interface - used for IPSEC Conection ) Interface gi0/0/0 bandwidth ( actual bandiwdth provided by ISP ) !!!! put your server address on the source of below ACL access list 101 permit ip any x.x.x.x any class-map SERVER match access-group 101 policy-map P-SERVER class SERVER priority 2000 ! Interface gi0/0/0 service-policy output P-SERVER Branch: !!!! Internet Interface - used for IPSEC Conection ) Interface gi0/0/0 bandwidth ( actual bandiwdth provided by ISP ) !!!! put your server address on the destination of below ACL access list 101 permit ip host any x.x.x.x class-map SERVER match access-group 101 policy-map P-SERVER class SERVER priority 2000 ! Interface gi0/0/0 service-policy output P-SERVER hope above will help full to you!
... View more
Created by
Muhammad Awais Khan
in Advanced Threats
in Advanced Threats
07-18-2019
12:59 AM
07-18-2019
12:59 AM
Hi, You don't need to manually configure it,Its enabled by default. Not all the unknown files will be submitted. Only the low prevalence files may be submitted by AMP if it decided to do so.
... View more
Created by
Muhammad Awais Khan
in Firewalls
in Firewalls
07-04-2019
05:32 PM
07-04-2019
05:32 PM
Hi, Can you share your interface configuration. I beleive some thing wrong with NAT Rules and ACLS. For Example: static (Inside,Outside) tcp interface https 10.10.1.250 https netmask 255.255.255.255 10.10.1.250 seems to be your internal address. And it seems that this address " 108.190.57.161" is your outside interface ? If yes, then modify the NAT rule and ACL as below: static (Inside,Outside) tcp host 10.10.1.250 https interface https Same thing need to be done for other rules also. For ACL: access-list outside_in extended permit tcp any host 10.10.1.250 eq 443
... View more
- Tags:
- ASA ACL
- ASA NAT Rules
07-04-2019
05:21 PM
Hi, It depends what you will be using on the ASA. So for example, if your location will be using ASA as state-full firewall then you will be getting 900 Mbps - 1.8 Gbps which will be fine. If you enable IPS on all the traffic traversing the firewall then you can get throughput upto 600 Mbps overall. And lets say, you are using Statefull inspection + IPS/AVC and decided to configure IPSEC VPNs, then your non-VPN traffic will be having maximum throughput support upto 600 and VPN users will be 250 Mbps.
... View more
Created by
Muhammad Awais Khan
in Unified Computing System Discussions
in Unified Computing System Discussions
10-30-2017
09:29 AM
10-30-2017
09:29 AM
Thanks for the feedback. We have couple of other SNS-3595-K9 appliances but we did not see this problem with those.
The 1st problem is that atleast we should see the vKVM DVD in boot order, we want to boot the same ISO which is currently installed.
... View more
Created by
Muhammad Awais Khan
in Unified Computing System Discussions
in Unified Computing System Discussions
10-30-2017
09:12 AM
10-30-2017
09:12 AM
Hello Experts,
We have Cisco UCS C220 (SNS-3515 bundled), we want to boot some ISO from vKVM but unfortunately in boot order, only pre-installed OS i.e Cisco ISE and network interfaces are showing. We cannot see vKVM DVD option there when goto Boot menu from BIOS.
We can set the boot option with vKVM DVD from CIMC itself but that boot order configured under CIMC is unfortunately not working. Our CIMC version is 2.0(h)
We want to know whether an upgrade is required or should i need to enable some option in the BIOS settings in CIMC ?
Regards,
Muhammad Awais Khan
... View more
Labels:
Created by
Muhammad Awais Khan
in IP Telephony and Phones
in IP Telephony and Phones
06-22-2015
11:15 AM
06-22-2015
11:15 AM
Hello Experts! I recently upgrade firmware for the DX650 Collaboration end points to version sipdx650.10-2-3-33 but i found this unstable in our environment. I then successfully downgrade the firmware to version sipdx650.10-0-2-24 on all the end points except the two end points. The status of two end points only showing me download status failed with "Inactive Load Failure Reason Internal Phone Error". I tried to erase all the security settings and ITL files but still no success. Can any one know work around for it ?
... View more
- Tags:
- dx650
Labels:
Created by
Muhammad Awais Khan
in IP Telephony and Phones
in IP Telephony and Phones
07-16-2014
01:00 AM
07-16-2014
01:00 AM
Hello Experts! We have one HO having CUCM & CUBE while other location have cucme with cue. CME users can reach CUE without any problem, even call from PSTN can also reach to CUE. We have configured transcorder also in Site C. Problem occured when we are calling from CUCM via CUBE, i am getting bellow error: *Jul 16 08:11:07.555: //22/C0B665800000/CCAPI/ccCallDisconnect: Cause Value=96, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=96)
... View more
Labels:
Created by
Muhammad Awais Khan
in Other Security Subjects
in Other Security Subjects
12-24-2013
06:47 AM
12-24-2013
06:47 AM
Hello! I am configuring IOS SSL VPN on my ISR Router, i can open the webvpn and can download the client. Problem occured whever i try to connect from my client, it showed me error on the client that unable to process response from x.x.x.x which is my router address. I dont know what is the possible reason behind this. below is my configuration: webvpn gateway SSLVPN ssl encryption rc4-md5 ssl trustpoint TP-self-signed-2659112499 logging enable inservice ! webvpn gateway SSLVPNGW ip address x.x.x.x port 443 ssl trustpoint MY-TRUSTPOINT inservice ! webvpn gateway mycontext ssl trustpoint MY-TRUSTPOINT no inservice ! webvpn install svc flash:/webvpn/anyconnect-win-2.3.2016-k9.pkg sequence 1 ! webvpn context mycontext ssl authenticate verify all ! ! policy group default functions svc-enabled svc address-pool "mypool" svc keep-client-installed svc split include 192.168.50.0 255.255.255.0 svc split include 192.168.30.0 255.255.255.0 svc split include 192.168.12.0 255.255.255.0 svc split include 142.0.0.0 255.0.0.0 svc split include 192.168.200.0 255.255.255.0 default-group-policy default aaa authentication list SSL gateway SSLVPNGW max-users 25 inservice
... View more
Labels:
Created by
Muhammad Awais Khan
in IP Telephony and Phones
in IP Telephony and Phones
12-18-2013
05:32 AM
12-18-2013
05:32 AM
Ok, what about if we make it H323/SIP GW. How the user licenses can be tracked ?
... View more
Created by
Muhammad Awais Khan
in IP Telephony and Phones
in IP Telephony and Phones
12-18-2013
01:35 AM
12-18-2013
01:35 AM
Hello! I am connecting Some analoge phones to VG350 FXS ports which is configured as a MGCP Gateway in CUCM. I beleive MGCP did not requires any license for it. Can some confirm this ? is there any Cisco doc on it ? Thanks & Regards,
... View more
Labels:
Created by
Muhammad Awais Khan
in IP Telephony and Phones
in IP Telephony and Phones
02-11-2013
05:42 AM
02-11-2013
05:42 AM
Hello Experts ! We are using CUE 8.6 with CUCM, We configured IMAP Clients on Microsft Outlook to read/delete the voice mails. I can read & unread the Voice mail. Problem occurs when I try to delete the Voice mail from OUTLOOK Imap, I received the below errors when I try to delete the Voice mail Error 1 : " the deleted item folder is unavailable " Error 2 : " The operation failed, messaging interface have returened an unknown error " Kindly help me on above. Thanks
... View more
Labels:
Created by
Muhammad Awais Khan
in IP Telephony and Phones
in IP Telephony and Phones
02-10-2013
06:50 AM
02-10-2013
06:50 AM
Hello Experts ! We are using CUE 8.6 with CUCM, We configured IMAP Clients on Microsft Outlook to read/delete the voice mails. I can read & unread the Voice mail. Problem occurs when I try to delete the Voice mail from OUTLOOK Imap, I received the below errors when I try to delete the Voice mail Error 1 : " the deleted item folder is unavailable " Error 2 : " The operation failed, messaging interface have returened an unknown error " Kindly help me on above. Thanks
... View more
Labels:
Created by
Muhammad Awais Khan
in Advanced Threats
07-31-2019
07-31-2019
Hi, You need to know the subscription ID for the AMP contract, once you
get it you can goto modify/r...
07-25-2019
Hi, In that case, you can make a group in ISE with static MAC addresses.
This should work. You can a...
07-24-2019
HI, My understanding for your question is to allow only specified VPN
client devices ( pcs, tablets ...
Created by
Muhammad Awais Khan
in FirePOWER
07-24-2019
07-24-2019
Yes, that's correct. Same IP range and different vlans.
07-23-2019
Hi, Yes it is possible to apply QOS on the internet links used for
IPSEC. You can refer to below as ...
Created by
Muhammad Awais Khan
in FirePOWER
07-23-2019
07-23-2019
Hi, For any transparrent mode deployment, you have to choose different
vlans for the interfaces. in ...
07-18-2019
Hi, You don't need to manually configure it,Its enabled by default. Not
all the unknown files will b...
Created by
Muhammad Awais Khan
in Firewalls
07-04-2019
07-04-2019
Hi, Can you share your interface configuration. I beleive some thing
wrong with NAT Rules and ACLS. ...
07-04-2019
Hi, It depends what you will be using on the ASA. So for example, if
your location will be using ASA...
10-30-2017
Thanks for the feedback. We have couple of other SNS-3595-K9 appliances
but we did not see this prob...
10-30-2017
Hello Experts, We have Cisco UCS C220 (SNS-3515 bundled), we want to
boot some ISO from vKVM but unf...
Created by
Muhammad Awais Khan
in IP Telephony and Phones
06-22-2015
06-22-2015
Hello Experts! I recently upgrade firmware for the DX650 Collaboration
end points to version sipdx65...
Created by
Muhammad Awais Khan
in IP Telephony and Phones
07-16-2014
07-16-2014
Hello Experts!We have one HO having CUCM & CUBE while other location
have cucme with cue. CME users ...
Created by
Muhammad Awais Khan
in Other Security Subjects
12-24-2013
12-24-2013
Hello!I am configuring IOS SSL VPN on my ISR Router, i can open the
webvpn and can download the clie...
Public Statistics
| Date Registered | 03-14-2010 12:20 AM |
| Date Last Visited | 08-02-2019 12:41 AM |
| Total Messages Posted | 26 |
| Total Helpful Votes Received | 10 |
