We currently have a /25 network. We’re getting a tenant in who’ll be sharing our connection, and we thought we’d split the /25 and share it. Currently things look like this (IP subnet changed for the example): 80.34.55.128/25 With a configured outside route of 80.34.55.129 ISP – Switch – R1 80.34.55.128/25 What I’m aiming to achieve: 80.34.55.128/26 80.34.55.192/26 ISP Router– Switch – R1 80.34.55.128/26                           |                           |------R2 80.34.55.192/26 Would this be possible without having the ISP to make any changes on their managed router? Any help / clarification, appreciated. Thanks. ... View more

Hi, we have a local Netflow collector working fine. We also have a centralised collector that we’d like to use to send the same Netflow data, but it is not being received. We need to send the data via an IPSEC VPN. When I do a 'show flow-export counters' I can see the packets sent increasing. The local collector is receive netflow data. I am using the below config,  Any pointers of what’s going wrong greatly appreciated. Thanks. ******************************************************************** access-list global_mpc extended permit ip any any ! !IP far end of VPN ! flow-export destination outside 10.xx.10.xxx 2055 !IP local lan flow-export destination inside 10.xx.20.xxx 2055 ! flow-export template timeout-rate 1 flow-export delay flow-create 20 ! class-map global-class match access-list global_mpc !             policy-map global_policy ! class global-class    flow-export event-type all destination 10.xx.10.xxx 10.xx.20.xxx class class-default flow-export event-type all destination 10.xx.10.xxx 10.xx.20.xxx ! ... View more

Any advice greatly appreciated. We’re looking into replacing our aging CSS load balancers with ACE’s. The main difference that I have noted is the throughput. We can buy the unit with options of the following configurations: 0.5, 1, 2, or 4 Gbps throughput. I presume this is aggregated interface throughput – if I monitor the interface throughput on the CSS, I’ll get more of an idea of what I’ll need on the ACE? Thanks, Craig. ... View more

Hi all, We have a Cisco IPS device in monitoring mode, monitoring 2 segments of traffic via spanned ports on two different 3750-x switches (inside and DMZ). After a period of say 2-3 hours the ports just stop passing traffic to the IPS device. To check there still is traffic we have a laptop connected on another port running wireshark and the port connected to the laptop never fails. I need to remove and re-add the span port config in order for the traffic to start flowing to our Cisco IPS again. I am not able to see in your syslog and reason for this. Any comments / suggestions greatly appreciated. Thanks. ... View more