Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Rob Cluett
02-04-2019
Rob Cluett
Beginner
Motivated IP Network Engineer in the Telecommunications, Plastics, Consumer Goods, Information Technology Services, and Management Consulting industries. Expansive technical skill set and knowledge of mainstream and leading edge technologies to deliver a broad range of business enhancing technical solutions. Results driven with a focus on continuous improvement and IT process automation.
Motivated IP Network Engineer in the Telecommunications, Plastics, Consumer Goods, Information Technology Services, and Management Consulting industries. Expansive technical skill set and knowledge of mainstream and leading edge technologies to deliver a broad range of business enhancing technical solutions. Results driven with a focus on continuous improvement a
Recent Badges
Stats
Member since
06-16-2002
117
Posts
58
Helpful
1
Solution
08-14-2017
09:59 AM
Can you paste in what you're attempting to apply for the "service-policy output" command?
... View more
08-14-2017
09:57 AM
Yes, it's VIRL again. I'm hoping the next release fixes the issues I've run into.
... View more
08-13-2017
04:18 PM
I mentioned "rate-limiting" because my virtual router wouldn't accept "traffic shape". That's all.
... View more
08-13-2017
01:33 PM
Thanks Paul. When adapting the configuration example I ran into a few items of interest. Just pointing out where an IOS command is missing or should be changed.
... View more
08-13-2017
11:25 AM
Paul, I just want to understand what you did here. Correct me if I'm wrong but you are limiting VLAN 5 to 3 Mbps while capping the entire WAN interface at 10 Mbps. Thereby leaving VLAN 7 with the remaining bandwidth of 7 Mbps? What's the need for mls qos vlan-based under the trunk interface. I'm unfamiliar with the command.
... View more
08-11-2017
11:39 AM
I'm running it as a bare-metal cluster with two PowerEdge 2950's. Total is 16 cores and 32 MB's RAM. It's heavy on the RAM usage no doubt.
... View more
08-11-2017
10:41 AM
My understanding is that it can be done without DHCP Snooping enabled and the manner in which I implemented it without came by way of a Cisco doc. I'm finding that in my environment that some features do not work as they should (Cisco VIRL) so I'm not expecting anything spectacular.
... View more
08-10-2017
09:11 AM
If you are looking to lock down ports to their respective hosts mac address you can use port-security. What you'll be doing is assigning the MAC address of a host to the port that it's connected to. All other ports should be set into a shutdown state preventing an attacker from connecting to any port that doesn't have a host connected. See below:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-4SY/config_guide/sup6T/15_3_sy_swcg_6T/port_security.html?dtid=osscdc000283
The above port-security command will shutdown the interface if any host is attached that does not have fa16.3e23.8161 as it's MAC address.
... View more
08-10-2017
08:06 AM
Dynamic ARP Inspection should accomplish what you're looking to do. Here's a chapter from Cisco Press that acts as good overview:
http://www.ciscopress.com/articles/article.asp?p=1181682&seqNum=8
... View more
08-10-2017
08:04 AM
If you're targeting a secure environment it would be worthwhile to put encryption on your /30's.
... View more
08-10-2017
07:58 AM
I've set up Dynamic ARP Inspection (DAI). Any idea's on the best way to test if it's working?
... View more
08-10-2017
07:32 AM
I stand corrected. You can create a mask for the MAC address implying multiple hosts.
... View more
08-10-2017
07:29 AM
can you copy the output from the following?
"permit ip host 10.10.20.20 mac host ?"
I'm guessing the host command is not necessary and is there for backward compatibility.
... View more
08-09-2017
05:28 PM
Example :
vlan 11 name vLAN0011 ! vlan 12 name vLAN0012 !
interface GigabitEthernet0/0 switchport trunk allowed vlan 1,11,12 switchport trunk encapsulation dot1q switchport mode trunk media-type rj45 speed 100 duplex full no negotiation auto !
... View more
08-14-2017
Can you paste in what you're attempting to apply for the "service-policy
output" command?
08-13-2017
I mentioned "rate-limiting" because my virtual router wouldn't accept
"traffic shape". That's all.
08-13-2017
Thanks Paul. When adapting the configuration example I ran into a few
items of interest. Just pointi...
08-13-2017
Paul, I just want to understand what you did here. Correct me if I'm
wrong but you are limiting VLAN...
08-11-2017
I'm running it as a bare-metal cluster with two PowerEdge 2950's. Total
is 16 cores and 32 MB's RAM....
08-11-2017
My understanding is that it can be done without DHCP Snooping enabled
and the manner in which I impl...
08-10-2017
If you are looking to lock down ports to their respective hosts mac
address you can use port-securit...
08-10-2017
Dynamic ARP Inspection should accomplish what you're looking to do.
Here's a chapter from Cisco Pres...
08-10-2017
If you're targeting a secure environment it would be worthwhile to put
encryption on your /30's.
08-10-2017
I've set up Dynamic ARP Inspection (DAI). Any idea's on the best way to
test if it's working?
08-10-2017
can you copy the output from the following? "permit ip host 10.10.20.20
mac host ?" I'm guessing the...
Public Statistics
| Date Registered | 06-16-2002 06:10 PM |
| Date Last Visited | 02-04-2019 08:09 AM |
| Total Messages Posted | 117 |
| Total Helpful Votes Received | 58 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 15 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
Helpful Votes From
