Another bad day..time for RMA if you have contract. ... View more

what was the version it was running before..looks like you hitting with Memory Bug, time for RMA. ... View more

admin user always have higher level access. suggest to not to change any policies for the admin user (since this is super user for ASA)   instead you can make close admin user for different purpose.   ... View more

here is one of the test with full reference :   http://www.balajibandi.com/?s=vpc     ... View more

Personally i do not belive so, this require more investigation, capturing the packets why this delay in the network.   ... View more

setting up CSR1Kv on AWS follow the below document :   https://www.cisco.com/c/en/us/td/docs/routers/csr1000/software/aws/b_csraws/deploying_the_cisco_csr_1000v_on_amazon_web_services.html   VPN follow below guide :   https://medium.com/tensult/vpn-configuration-aws-c60d9eb0059d   Hope this helps you to resolve your issue.     ... View more

You need to follow below approach :   1. what is the IP address range for the L2TP clients get from your remote VPN. 2. if your L2TP client requires to access to protected remove site ipsec tunnel site. 3. make sure you allow both the side intrested traffic of the VPN IP range. 4. i am in assumption your undelay routing can able to reach in the network, if not you required some staticcor dynamic routing to go out for that IPSEC range IP address.   example :  remote vpn users get 10.10.10.x/24, this need to be allowed in IPSEC tunnel to access the resources.   make sense ?   ... View more

we need more information on the FW how the rules setup done.   if VLAN 1 try to reach VLAN 10 IP, they go vial PFSENSE. since the Switch actinng as Layer 2, all the request go to PFSENSE.   interface GigabitEthernet1/0/48 description Uplink-Firewall switchport mode trunk switchport trunk encapsulation dot1q   if still have issue show full config of switch and screenshot of pfsense FW rules.   show vlan from switch also to verify ... View more

Since your Gateway is FW ( PFSENSE ) you need to look at the FW rule and make necesary rule for the IP range of VLAN 10 and VLAN 20 can have access.     ... View more

Do you have high level diagram how these device connected and what port   as per the below is this connected like daisy chain ?   switch6a---->switch6b---->router6a---->router6b---->switch6c---->switch6d   what is the modesl of the Switches and routers, what is version of IOS it is running. ( i know you mentioned 2960 switch).     ... View more

Since your source of the IP changed (going via server) you need to have ACL to block that.   example :   any connect IP x.x.x.x x.x.x.x rdp to y.y.y.y    since y.y.y.y has access to z.z.z.z ( you need to see if this can be controlled)   ... View more

you remember what firmaware it was running, how long was the uptime of this RV kit.   if possible reboot the RV and test. ... View more

Glad it worked well, yes made your note so i would recommend any new user have same issue. if this resolved can you mark as solution for the benifit of new community members. ... View more

When you upgrade the stack they reboot required, if not you see version mismatch and not work.   best approach to reboot stack after upgrade.   https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9200/software/release/16-11/release_notes/ol-16-11-9200.html#task_eld_g4n_4gb ... View more