Joseph,   Are there SLA/packet delivery implications to utilizing the boost features?  Cisco previously conveyed that licensing limitations and performance capping strongly protected one IOS-XE feature, service, micro-service, or daemon from impacting another, by putting strong resource protections in place.  This supposedly provided higher performance predictability when enabling features such as NAT, IPSEC, PBR, NetFlow/FnF, etc.  Are we as safe from an SLA guarantee perspective in an environment with these enhanced features enabled along side active boost licensing?   Pete    P.S.  Colin, I hope all is going well my friend!  Keep in touch ... View more

I have seen this issue exist in multiple flavors of IOS-XE, to include the current recommended.  This impact PnP in both APIC-EM and DNA-C.  Here's what appears to be a workaround:   Wipe and reload the switch, ensuring you answer no if asked if you would like to save the startup config after issuing the reload command.  After reboot, simply paste the following script and watch the terminal for it to kickoff the PnP process.  This may take a couple minutes:   conf t int vlan 1   no shut   ip address dhcp ! !   wait for interface VLAN 1 to come up and the switch to pull an IP address, then continue ! pnp profile test   transport http ipv4 {IP of APIC-EM or DNA-C} port 80    end !   Good luck! Pete It may take a few minutes, but nothing else should be needed.     ... View more

So Leo, Cisco will no longer have a free tool for PnP? I see they added limited 9500 support last year, just not the higher end models. ... View more

Have you remedied the active, not in use license issue:   Router#sh license all | b throughput StoreIndex: 2 Feature: throughput Version: 1.0 License Type: Permanent License State: Active, Not in Use   <--   Did you reboot after applying the throughput command, as required?   ... View more

Interesting that we see:   Router#sh license all | b throughput StoreIndex: 2 Feature: throughput Version: 1.0 License Type: Permanent License State: Active, Not in Use   <--   Did you reboot after applying the throughput command, as required?   ... View more

First, I would not worry about EIGRP for now.  Point-to-point tunneled IP connectivity is a prerequisite for end-to-end EIGRP connectivity, so let's resolve that first.  Do a "show ip route {remote tunnel IP}" from each router.  Let's make sure that it shows as directly connected to interface Tunnel100 on both ends.  Next, let's see if an old bug is in play; change the tunnel source from the IP address of the routers' local interfaces to the interface name that it will be egressing to arrive at the remote destination.  Next, do a "show ip route {remote tunnel destination IP}" on each router, to validate both ends are actually egressing the predicted interface to arrive at the remote destination public IP.       ... View more

Please remove your "line vty" and "enable password" sections or hashes if sensitive.  You are using old type 7 password security, which means we can easily decrypt your passwords in seconds.  There are a lot of things in that config that can be greatly improved, but just to start, let's look at licensing.  To enable 100Mbps on a 4321, you must own the "throughput" license or be on the eval period (with time remaining).  Try this command:    sh license all | b throughput     then send us the output.   ... View more

How'd it work out for you Patrick?   Cheers, Pete ... View more

I have always gone by the no more than 20 rule.  You can potentially do more, but I wouldn't.   Cheers, -Pete ... View more

Let me know if this is what you are looking for:   https://www.vandyke.com/support/tips/chatsendcom.html   ... View more

There are a lot of ways to accomplish this, depending on the tools you have on-hand.  This does require an automation platform. This can be something you already have for monitoring, i.e. Cisco Prime LAN Management, Solarwinds NCM, KiwiKat Tools, DNA-C, or other....  If you don't, you can look Ansible.  Really being able to make Ansible do complex tasks does require some programming and scripting understanding.  What do you uses today for graphical network management, reporting, and alerting?   -Pete ... View more