Greetings,
I have a potential issue that has caused several issues for me. On an ASR9001 with 5.3.2, when we put on a BGP peer in a vrf "default-originate", it doesn't seem to re-source" the announcement to my carrier with no as-path information....
Is there intent to make this available for linux hosts?
Also, can I use this to connect to my network management server and then jump to my IOS devices?
best regards,
tim
Hi, Group, Is there a fundamental difference in using the following encryption domains in crypto map configurations: ip access-list extended encdom-custA permit ip host 10.1.1.4 host 192.168.4.1 permit ip host 10.1.1.5 host 192.168.4.1 and ip access-...
DMVPN does not support keepalives as we all know.is there a way to determine if a DMVPN tunnel cannot reach its head-end anymore?Scenario: Site has mpls primary link and thus is reachable. The backup link is current GRE/IPSEC and you can use SNMP t...
If your routers are not iBGP peers then make them so. We have found across our providers in the US that we get roughly a 60-40 inbound traffic split. Most of the outbound does leave Provider 1 but that's because you have to pick your exit somewhere...
ip access-list extended VPN-TRAFFICpermit ip 10.10.10.0 0.0.0.255 10.252.0.0 0.0.0.255 needs to be: ip access-list extended VPN-TRAFFICpermit ip host 1.1.1.1 10.252.0.0 0.0.0.255 In the packet processing of Cisco, it does nat before ipsec. I have se...
In your iBGP configuration, do you have "next-hop-self" set on both sides? Also, Google.com for me resolves to 172.217.6.174 (right now) as opposed to their public DNS of 8.8.8.8 and 8.8.4.4. I suspect that if you are using RFC1918 between your r...