About Garry Cross

Garry Cross · 03-27-2025

We installed a bunch of C9K switches running version 17.12.4. I have noticed the following message whenever I login with putty. %SSH-5-SSH_COMPLIANCE_VIOLATION_HOSTK_ALGO: SSH Host-key Algorithm compliance violation detected.Kindly note that weaker ...

Garry Cross · 06-20-2023

I am creating the post to help others solve a problem that we encountered on the subject. We had a working SAML configuration using Azure as the IDP. There is a large mixture of documentation on the subject. A few guides I found useful are as follows...

Garry Cross · 06-30-2022

I need some help to understand the output of show environment power on a Nexus 7010 with 2 x 6K AC power supplies. The objective being what is going to happen when I plug 2 N7K-M224XP-23L into slot 7 & 8. Based on the power calculator and the redunda...

Garry Cross · 03-03-2022

Hi have version 6.6.5.1 running on a 4115 and a 2130.The copy capture: command is no longer working.Here is the capture in memory.> show capturecapture testpc type raw-data interface inside [Buffer Full - 524225 bytes]match ip host 10.180.122.12 anyT...

Garry Cross · 12-14-2021

I have tried to find an answer to my issue but have failed to do so.Originally I had Anyconnect 4.9.06037 installed and working fine on my system.I am setting up ISE Posture for a client for the first time. This is for an FTD deployment but I don't t...

Garry Cross · 03-25-2025

Thanks for the feedback Jon. I see two things wrong with pre-filter rule. If as suggested to pre-filter https, then catagory filtering cannot be done. If being managed by FDM, as I understand, no prefiltering built into the GUI.

Garry Cross · 03-25-2025

I just ran across this discussion. It seems related to my clients issue. The topic, and all the bugs are discussing fragmented client hellos related to the above mentioned browsers. What we have is a dropped server hello packet. The packets are not ...

Garry Cross · 03-03-2025

And it is a waste of peoples time when this error appears and you try to fix it, only to find out you can't zeroize it. There isn't any message. And if you try to change it as above, only then you find out if it is reserved. Cisco; stop generating me...

Garry Cross · 09-01-2023

I have the ap back on the C9800-CL. The tag summary now indicates "Default" tag assignment. I have renamed it again. I will try the ap tag revalidate command first before doing the reset capwap command. Rich, I do have the priority set ap filter prio...

Garry Cross · 08-31-2023

Hi, it seems the above should work, but it does not seem to be working in my config.We are testing and using 17.9.3 because it supports the 3702. This is also a C9800-CL in Azure. In order for the 3702 to join we have been reseting the config in the ...

Member Since	‎11-25-2010 12:47 PM
Date Last Visited	‎03-28-2025 01:02 AM
Posts	128
Total Helpful Votes Received	113

User Statistics

User Activity

Host-key Algorithm 'ssh-rsa' will be disabled

Anyconnect Azure AD SAML SSO Issue

Nexus 7010 Power

Firepower Threat Defence CLI copy capture: no longer working.

ISE Posture Module Installation fails

Re: FTD's - Firepower dropping HTTPS traffic using TLS 1.3 Hybridized

Re: FTD's - Firepower dropping HTTPS traffic using TLS 1.3 Hybridized

Re: Cisco 9300 CISCO_IDEVID_CMCA_SUDI weak RSA Key

Re: automatically apply tag policy, tag rf, tag site on cisco 9800 wlc

Re: automatically apply tag policy, tag rf, tag site on cisco 9800 wlc