About Bruce Reed

Bruce Reed · 01-13-2015

A couple of weeks back we experienced a packet storm on one of our vlans. At the time looked like a broadcast storm and we thought we had a bad device, so we swapped it out. Yesterday morning it occurred again on the same C3750x switch port with the ...

Bruce Reed · 05-28-2014

We're seeing high CPU utilization on a 3750x core switch. A few days ago this issue was more critical as we were seeing CPU averaging 80+%, with many spikes in the 90's. After some cleanup we're now averaging between 40-50%, with spikes rarely over t...

Bruce Reed · 07-17-2013

I have secondary Internet service dedicated for the most part to some wireless VLANs for guest and developer use. Right now a PIX is serving as the gateway and this works nice as I can DMZ the vlans and supply one-way inside access from our core to d...

Bruce Reed · 05-28-2013

I have a L2L tunnel that provides limited access to subnets on the remote end. One of my subnets at the main site, 10.3.1.0/24 has unlimited access to a remote net (192.168.100.0/24) via ACL for the tunnel on the remote ASA. I have a new requirement ...

Bruce Reed · 05-06-2013

I'm firewalling several DMZ like networks on a PIX running 8.0 and I've just tried to move to an ASA 5510 running 8.2. The config moved over verbatim, but after bringing up the network on the ASA I started to see odd DHCP issues on one of the DMZ ne...

Bruce Reed · 01-13-2015

Yes, I had researched that on the first event. I thought that was odd since an Apple Thunderbolt display was connected to the port. Even so, it did reoccur and I believe report same exact src mac address on another switch, another port. Aside from th...

Bruce Reed · 05-29-2014

Thanks, here is what show controllers cpu-interface showed (current time):cpu-queue-frames retrieved dropped invalid hol-block stray----------------- ---------- ---------- ---------- ---------- ----------rpc 5906891 0 ...

Bruce Reed · 05-28-2013

Yes, an ASA pool is used for the 10.254.1 block. We use radius for auth and LDAP for group check that assigns a dynamic access policy.

Bruce Reed · 05-28-2013

That's what I thought I needed for natting, but that will map all of my 10.154.1 anyconnect clients to 10.3.1.254 for all access, correct? That's a problem as it will give all anyconnect clients access to the 192.168.100 network since they are nattin...

Bruce Reed · 05-06-2013

Oh, and another question would be, why doesn't this occur on the PIX using the same config? I checked sysopt there and did not find noproxyarp set.

Member Since	‎04-06-2012 11:03 AM
Date Last Visited	‎08-18-2017 04:00 AM
Posts	20

User Statistics

User Activity

Packet storm on C3750x

High CPU utilization on 3750x core

L3 device recommendation

VPN client nat for remote tunnel access

ASA and proxy arp

Yes, I had researched that on

Thanks, here is what show

VPN client nat for remote tunnel access

VPN client nat for remote tunnel access

ASA and proxy arp