Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
HiWe need to use the same user IDs for both 802.1X and VPN access: 802.1X authentication request from local switch will use AD VPN authentication request from VPN device will use RSA I am OK with NDG to determine what device request comes from....
We currently have the interfaces configured with 'mtu 9216'. Now we are adding a policy-map type network for the data and iSCSI classes. Where do we set mtu - see exampleinterface e8/1 mtu 9216 << with this set, do we need to specify mtu in the po...
We are using EEM to increase OSPF cost on primary link if OSPF flaps a couple of times in 5-minutes or IPS SLA detects an issue. The traffic then uses an alternate link until OSPF cost is retutned to normal.Now we want to automate restoring OSPF cos...
HiTrying to trigger EEM when 'ip sla reaction-configuration <nnn> react timeout threshold-type consecutive 5' is exceeded.If not using consecutive, can use syslog or snmp mib to detect when RTT threshold is exceeded. Cannot work out how to detect wh...
HiUsing CBWFQ with access-lists to match traffic assigned to classes. If access-lists are not very specific, what happens to traffic that is matched by 2 or more access-lists i.e. traffic could be put multiple classes?What is the process for the rou...
Thanks Reza.I configured: policy-map type network-qos CONVERGED-DATA-ISCSI-NQ class type network-qos C-NQ-DATA-DROP congestion-control tail-drop class type network-qos C-NQ-ISCSI-NODROP pauseBut a show:sh policy-map type network-qos ...
Thanks Joseph. Your solution sounds great.I cannot work out how to install a timer countdown policy. On a test router tried:event manager applet OSPFCOSTTIMER description OSPF RESTORE COST TIMER event timer countdown name TIMER time 300 action 1.0 ...
We have configure rfc1583compatibility. In our network the N7K's (x2) are ASBR with the core routers in area 0. When testing prior to deploying, found that if an SVI was shutdown on one N7K, traffic was no long load balanced from the core routers to...