Trying to get 5505 to do VOIP, via VPN tunnel. I have the tunnel online, manually configure CUCM settings in the  phone, phone will register, get dialtone, however can't make receive calls. I have two vlans, inside(data), outside(Internet) and the phone is attached to the inside vlans with PC on the network port of the phone. Will I have to create a seperate vlan(/30, just have one phone) for the voice, attached the phone to that port by itself. Can I add the new subnet to the existing object group for Inside interesting traffic. Any sample config would be appreciated. ... View more

This is really a weird one.  I have a VPN tunnel, up/online between ASA5525-X and ASA5505.  The problem I'm experiencing is on the ASA5505 side. The protect network, these are not actual adresses, 192.168.1.0/24. Very small 4 host that are statically assigned to Vlan -X that is the inside network/zone. The switch ports are assigned to Vlan-XX, not Outside, made sure of that. Now when I assign a 192.168.1.x/24/Gw 192.168.1.1(this is the address assigned to Inside Int) the mac address will show up in the arp table, but I can't ping that address from the FW.  If I reload the firewall, all will state to work. Ideas/suggestions.  The code on the ASA5505 is 9.2(4).   ... View more

I have primary and secondary Nexus setup that supports HSRP failover for SVIs. I have enabled PIM mulitcast, but now need to have the PIM in a HSRP backup. Please look at example below and let me know if this is correct:   rimary-Nexus interface Loopback0 no ip redirects ip address 10.11.3.33/29 standby 54 ip 10.11.3.38 standby 54 timers 5 15 standby 54 priority 120 standby 54 name PIM-HSRP ip pim redundancy PIM-HSRP dr-priority 60 no shutdown Secondary-Nexus interface Loopback0 no ip redirects ip address 10.11.3.34/29 standby 54 ip 10.11.3.38 standby 54 timers 5 15 standby 54 priority 110 standby 54 name PIM-HSRP ip pim redundancy PIM-HSRP dr-priority 60 no shutdown What would I define as the RP on the Primary and Secondary Nexus. What IP address would I define on other devices that need to particpate in multicast. ... View more

I need to configure PIM multicast across 4 Nexus, I have the RP configured and I see that ip pim spare-mode is configurable on the L2 and SVI interfaces.  However I don't see that option on Port-channels and vPC interfaces. Is that option available? ... View more

Does anyone know of a way to added the wireless config to a 7925G other than manual entry? ... View more

I experienced this message during a SIP outage, anyone know what this means:   : %VOICE_IEC-3-GW: SIP: Internal Error (1xx wait timeout): IEC=1.1.129.7.59.0 ... View more

During  the VPN negotiation, does anyone know of a way  to force a IKEV1 connection with a policy that has stronger encryption, say AES-256, DH Key 5, rather than reading top down and connecting on the first match, with may be 3DES, DH Key 2.  I know I can re-order the policies, however that would require a drop in multiple B2B tunnels. Trying to avoid that.  This is on an ASA5525-X ... View more

Getting the following log error message, my software ver is:   Base Ethernet MAC Address          : b4:de:31:74:55:00 Motherboard Assembly Number        : 73-15901-06 Motherboard Serial Number          : FDO2146062P Model Revision Number              : Q0 Motherboard Revision Number        : B0 Model Number                       : WS-C3650-48PS System Serial Number               : FDO2146Q0GA Switch Ports Model              SW Version        SW Image              Mode ------ ----- -----              ----------        ----------            ---- *    1 52    WS-C3650-48PS      16.3.5b           CAT3K_CAA-UNIVERSALK9 INSTALL   The flapping messages are:     :56.092: %SW_MATM-4-MACFLAP_NOTIF: Host 7070.0d98.40cf in vlan 677 is flapping between port Gi1/0/2 and port Gi1/1/2 Dec 10 15:29:03.727: %SW_MATM-4-MACFLAP_NOTIF: Host 009d.6b0c.5987 in vlan 677 is flapping between port Gi1/1/2 and port Gi1/1/3 Dec 10 15:34:04.505: %SW_MATM-4-MACFLAP_NOTIF: Host fc18.3c74.c9a5 in vlan 677 is flapping between port Gi1/1/2 and port Gi1/0/2 Dec 10 15:35:01.547: %SW_MATM-4-MACFLAP_NOTIF: Host 5caf.062b.bdb5 in vlan 677 is flapping between port Gi1/0/2 and port Gi1/1/2 Dec 10 15:36:47.316: %SW_MATM-4-MACFLAP_NOTIF: Host fc18.3c74.c9a5 in vlan 910 is flapping between port Gi1/0/3 and port Gi1/1/3 Dec 10 15:41:23.364: %SW_MATM-4-MACFLAP_NOTIF: Host 245b.a738.a9f8 in vlan 677 is flapping between port Gi1/0/2 and port Gi1/0/3 Dec 10 15:42:56.021: %SW_MATM-4-MACFLAP_NOTIF: Host 245b.a738.a9f8 in vlan 910 is flapping between port Gi1/1/2 and port Gi1/0/3 Dec 10 15:45:33.905: %SW_MATM-4-MACFLAP_NOTIF: Host a056.f38e.8398 in vlan 677 is flapping between port Gi1/0/2 and port Gi1/1/3 Dec 10 15:52:21.481: %SW_MATM-4-MACFLAP_NOTIF: Host 4098.ad73.9957 in vlan 910 is flapping between port Gi1/0/1 and port Gi1/1/3 Dec 10 09:56:55.859: %SYS-5-CONFIG_I: Configured from console by thornbt on vty0 (10.11.216.215) Dec 10 09:57:18.980: %SW_MATM-4-MACFLAP_NOTIF: Host d004.012d.3031 in vlan 910 is flapping between port Gi1/1/2 and port Gi1/1/3 Dec 10 09:57:25.475: %SW_MATM-4-MACFLAP_NOTIF: Host f895.ea30.e67e in vlan 910 is flapping between port Gi1/0/4 and port Gi1/0/2 Dec 10 09:57:33.909: %SYS-6-CLOCKUPDATE: System clock has been updated from 09:57:33 Central Mon Dec 10 2018 to 09:57:33 central Mon Dec 10 2018, configured from console by thornbt on vty0 (10.11.216.215). Dec 10 09:58:00.741: %SYS-5-CONFIG_I: Configured from console by thornbt on vty0 (10.11.216.215) Dec 10 10:04:28.820: %SW_MATM-4-MACFLAP_NOTIF: Host 645a.ed1f.4c50 in vlan 677 is flapping between port Gi1/1/3 and port Gi1/0/2 Dec 10 10:06:29.529: %SW_MATM-4-MACFLAP_NOTIF: Host 645a.ed1f.4c50 in vlan 910 is flapping between port Gi1/0/2 and port Gi1/0/4 Dec 10 10:07:36.050: %SW_MATM-4-MACFLAP_NOTIF: Host 5c8d.4ee1.bf2a in vlan 677 is flapping between port Gi1/1/3 and port Gi1/0/4 Dec 10 10:08:38.791: %SYS-5-CONFIG_I: Configured from console by thornbt on vty0 (10.11.216.215) Dec 10 10:08:50.128: %SW_MATM-4-MACFLAP_NOTIF: Host 4491.60ef.2e3e in vlan 910 is flapping between port Gi1/0/5 and port Gi1/1/2 Dec 10 10:14:09.440: %SW_MATM-4-MACFLAP_NOTIF: Host f86f.c180.377c in vlan 910 is flapping between port Gi1/1/2 and port Gi1/0/4 Dec 10 10:15:10.632: %SW_MATM-4-MACFLAP_NOTIF: Host fcc2.de00.4fa4 in vlan 910 is flapping between port Gi1/0/3 and port Gi1/0/5 Dec 10 10:16:45.855: %SW_MATM-4-MACFLAP_NOTIF: Host a407.b6a5.5aa3 in vlan 910 is flapping between port Gi1/0/5 and port Gi1/1/2 Dec 10 10:17:43.382: %SW_MATM-4-MACFLAP_NOTIF: Host a408.ea75.5429 in vlan 910 is flapping between port Gi1/0/5 and port Gi1/1/3 Dec 10 10:32:29.091: %SW_MATM-4-MACFLAP_NOTIF: Host d88f.76b4.12dc in vlan 910 is flapping between port Gi1/1/3 and port Gi1/0/2 ... View more

Attempting to establish tunnel to Palo Alto keep getting failure:    Received encrypted packet with no matching SA, dropping   My cisco crypto map entry: crypto map outside_map 115 match address outside_cryptomap_115 crypto map outside_map 115 set peer 66.119.113.251 crypto map outside_map 115 set ikev1 transform-set ESP-AES-256-SHA   From Palto Alto: Encryption: aes-256-cbc DH Group:5 Hours: 24 Authenticaton: sha         ... View more

I just added a Cisco 3850 to an existing Cisco 3850, same model#/SW version: Switch Ports Model              SW Version        SW Image              Mode ------ ----- -----              ----------        ----------            ---- *    1 56    WS-C3850-48P       03.06.05E         cat3k_caa-universalk9 INSTALL      2 56    WS-C3850-48P       03.06.06E         cat3k_caa-universalk9 INSTALL The problem I have is Redundancy: BTRBRGBBMT1T2_Stack3#sho red Redundant System Information : ------------------------------        Available system uptime = 20 weeks, 6 days, 23 hours, 38 minutes Switchovers system experienced = 0               Standby failures = 0         Last switchover reason = not known                  Hardware Mode = Duplex     Configured Redundancy Mode = SSO      Operating Redundancy Mode = RPR     Reason: Software version               Maintenance Mode = Disabled                 Communications = Up Current Processor Information : ------------------------------                Active Location = slot 1         Current Software state = ACTIVE        Uptime in current state = 21 weeks, 8 hours, 14 minutes                  Image Version = Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.06.05E RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2016 by Cisco Systems, Inc. Compiled Thu 02-Jun-16 09:03 by prod_rel_t                BOOT = flash:packages.conf         Configuration register = 0x102 Peer Processor Information : ------------------------------               Standby Location = slot 2         Current Software state = STANDBY COLD        Uptime in current state = 3 hours, 22 minutes                  Image Version = Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.06.06E RELEASE SOFTWARE (fc1)   What can be the issue? Can I change operating mode to SSO, will it bring down the stack. ... View more

For an Access Point(3802i) switch port configuration, should I used trust COS or trust DSCP.  My uplink  to the core is L2 and I'm trusting COS. ... View more

We have an existing B2-to-B2 tunnel with a partner that is in place working fine for communications between the two networks. Now there is a need to place a workstation and printer from my network on site at this partners office and maintain the ip addressing from my network. Any ideas how/if this can be done via the existing VPN tunnel? ... View more