Hello,   Following this document  https://www.cisco.com/en/US/technologies/tk648/tk362/technologies_white_paper09186a00800a3db9.html, it seems that SRC_AS and DST_AS fields in Netflow v9 used for BGP ASN information are by default in 2 Bytes format.   As a result, every 4-Bytes ASN that are on the router appears as reserved ASN 23456 (2 bytes ASN comptibilty)   Anyone can help changing the default template to modify SRC_AS and DST_AS field from 2 to 4 bytes ?   Thanks Regards   ... View more

Hello, I have 2 sites interconnected by a H323 trunk. Site A has dial plan 32x site B has 3xxx. When on site A I want to dial a number on site B with for example number 3257 it will dial 325 in site A. This happen if I dial on-hook or off-hook Is there a way (without changing dial plan) on CME of site A to not automtically dial the first 3 digit. Dial-peers are OK if I type "sh dialplan number 3257" it well show the H323 trunk. The problem appears on the dialing phone itself. Thanks for your help. Regards ... View more

Hello, I experience since a couple of days a very strange behaviour on our 2 access routers facing internet : I have two 7204VXR with NPE-G2 and 1Gb of ram. One router has 2 eBGP peers and the other has 3. The routers receive all internet routes from the 5 peers and send 2 internal routes. There is an iBGP peering between both routers. On all peers I have a route-map to send only our routes. All was working fine since a couple of months when I suddenly saw an increase of memory on one of the router (router B), 1 hour later the memory was 100% and router crash and reboot. The other router (router A) with the same hardware capacity, same ram and same amount of routes was working good. After router B restart, I shut all eBGP peering on it, keeping only iBGP with router A, ram used was the same as router A (about 50% used) but CPU was about 30% used by process Router BGP whereas router A which has active traffic and active eBGP is only 20% and bgp process i almost 0%. Restarting peers one by one on router B cause the same issue, increase of memory then crash, even with only one peer. What I suspected : - A peer on router B but I can't isolate one because the problem appears with each taken one by one - Not enough memory,  but router A has the same number of routes and don't have any problem - IOS version ? same on both 12.4.(15)T1 - Why process router BGP use 30% on router B when all eBGP peers are shut except iBGP and no traffic pass. - A routing loop but I only send internal routes to peers and only have one iBGP session with no sync nor redistribution with an IGP Of course I can't run any debu ip bgp on routers as the number of routes is very large (300K). I would appreciate if you have any clue on what could be the cause. Thanks in advance Regards ... View more

Hello, We are migrating our ACS 5.1 to ISE 1.0.4. - On ACS we were doing 802.1x Authentification over an Activedirectory, assigning Vlan according to computer/user group. In some case the user vlan could be different from the computer vlan (ex admin account connecting to a user account). This works great with ACS I tested the same function with ISE and the behaviour is a bit different : - When the computer boot, I can see the computer account being authenticated on ISE. The logs show the AD groups the computer belongs to and the Authorization profile is well applied according to the AD group. - When the user login, I can see the user account being authenticated on ISE, BUT the logs show the AD groups of the previous authentication, the one belonging to the computer not the user. So the authorization profile is the one from the computer not the user. It seems that the AD group attributes are not well updated : - AD logs show the second authentication doesn't engage a new group parsing from AD - Shutting down the switch port when user is logged engage a new authentication a AD group are well updated. - Bug toolkit reference the same bug but for WLC CSCto83897 so I suspect it's present in other case. The NAS is Catalyst 3750 12.2.58(SE2) Thanks much for your reply. ... View more

Hello, For security reason, I'd like only my Administrator lan be able to connect to the CUCM Page. ( https://cucm:8443/ccmadmin) I cannot filter by acl on my router as the port 8443 is also used by the ccmuser page ( https://cucm:8443/ccmuser) Is there a way to do that on CUCM 6 ? Thanks for your answer ... View more

Hello, I need to archived all emails going through the ironport gateways. For this purpose I'd like to use an linux dedicated archive box. This box needs to receive a copy of all email going thrue ironport. My question is : How on ironport can I duplicate the mail to 2 mailhost. (Putting to mailhost on smtp route doesn't work because it's treated in a round-robin fashion.) Thanks for your idea. Regards. ... View more

Hello, According to 7965G user guide, 7914 modules are compatible with new 79x5 phones. I've tried that and 7914 buttons stay red. The 7965 is well configured with a module type of 7914 and a template with BLF on the module buttons. The phone version is 8.5.3S and 7914 firwmare is S00105000300. On the phone Settings -> Status -> Module : the module is not seen. Connecting the same module on a 7961G same configuration works perfectly. Is  7914 really compatible with 7965 ? Thanks for your help ... View more

Hello, According to 7965G user guide, 7914 modules are compatible with new 79x5 phones. I've tried that and 7914 buttons stay red. The 7965 is well configured with a module type of 7914 and a template with BLF on the module buttons. The phone version is 8.5.3S and 7914 firwmare is S00105000300. On the phone Settings -> Status -> Module : the module is not seen. Connecting the same module on a 7961G same configuration works perfectly. Is  7914 really compatible with 7965 ? Thanks for your help ... View more

Hello, I have configured multiple Anyconnect TunnelGroup profiles with each is own policy (ip pool, radius ...) Each TunnelGroup is forced under the .xml file deployed with annyconnect under the <UserGroup>tunnelgroup</UserGroup> section of the .xml file. Good news it works great ! But now activating Cisco Secure Desktop everyuser felt under the DefaultWEBVPNGroup and the <UserGroup> section of the xml doesn't seems to be used anymore. Is there a way to continue to have automatic profile selection with CSD working ? Of course if I enable the manual choice of profile at login this works even with CSD. Thanks for your help ... View more