Hello, Looking at the Cat9000 datasheets (for example https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/datasheet-c78-738977.html) I see this... Seamless software upgrades and patching supports OS resilience. Cisco IOS XE supports patching, which provides fixes for critical bugs and security vulnerabilities between regular maintenance releases. This support lets you add patches without having to wait for the next maintenance release. The word Seamless is interesting. To me, this implies IOS-XE can be patched without a reboot of the switch or stack. This might be wishful thinking though.   So my questions...   Have any patches been released for the Cat9000 series switches?   Is a reboot required to patch IOS-XE?   Thanks!   ... View more

Hello,  We are looking at deploying ISR 4331 routers to replace some older 2811's.  One thing that used to be true, in the 2800/2900's, was that if you had multiple layer 2 cards - like a NM-16ESW and an HWIC-4ESW for example - a physical link was required to extend VLANs between the modules.   Is that still true with the newer items?  Seems like that should have been fixed and I'm hoping that's the case.  In a perfect world, having two NIM-ES2-8 modules would act like a 16 port switch inside the 4331, with interfaces numbered 0/1/x and 0/2/x for example.  They would share an SVI and all that good stuff. Anyone know for sure how this works? Thanks! ... View more

I just configured an nmap scan in the FireSight Management server (version 6.0.0.1) and it worked well, with one issue...there's at least one firewall between the FireSight server and the networks I would like to schedule nmap scans against, so sourcing from the server isn't ideal.  It would be really nifty if we could source the nmap scan from the management interface of the ASA modules.  Is that possible and I'm just not seeing it in the config options or documentation? thanks! ... View more

Hello,  I am fairly new to FireSIGHT and the reporting mechanisms.  The information in the Summary Dashboard > Status tab > Appliance Information and Product Updates widgets would be useful for our compliance mandates, however I cannot see how to add these to a report. Along the same lines, is there a way to report on the status of local users, i.e. the names, roles assigned, last changed password date? Thanks! ... View more

Hello,  We have a few ASR 1001-x routers with SPA-4XT3/E3 cards, which have a smaller connector than we typically see on a DS3 card.  I bought some short jumpers for the staging area, but they don't appear to be be very reliable.   Can anyone recommend a DIN1.0/2.3 to BNC cable manufacturer for me?  About 10' is what we will need in production. Thanks! ... View more

Hi,  I have configured BFD between two routers connected with a PPP Multilink bundle of T1's.  The routers (one ASR 1001-X, one ISR 4331) both take the commands, but the BFD session does not come up.  Both routers are running IOS-XE 3.16.00.  Here's the config and the show bfd neighbors command...   ASR-1001-X#sh bfd nei     IPv4 Sessions NeighAddr                              LD/RD         RH/RS     State     Int Good DS3 Neighbor 1                    12/1          Up        Up        Se0/1/0 Good DS3 Neighbor 2                      2/1          Up        Up        Se0/1/1 Bad PPP Multilink Neighbor           4098/0          Down      Down      Mu1   ASR-1001-X#sh run int multilink 1 Building configuration...   Current configuration : 250 bytes ! interface Multilink1  dampening 10  ip address omitted  ip ospf bfd  mpls ip  ppp multilink  ppp multilink group 1  bfd interval 50 min_rx 50 multiplier 3  service-policy output WAN-OUT end   Any assistance is appreciated.  Also, I tried configuring BFD on the individual T1 ports, but that didn't really do anything, doesn't even show up in the sh bfd neighbor output.   Thanks!   ... View more

Hello,  We are looking at a variety of hardware options for a new MPLS / VPLS deployment.  For our needs, the ASR 1k series contains all the features needed - MPLS / VPLS, TE tunnels, and the ability to select a TE tunnel based on the EXP bit (a feature the ME3600's seem to lack, based on available documentation). Does anyone know if the ISR 4000 series routers have feature parity with the ASR 1k's, specifically MPLS features?  I know the ISR 4000's are marketed to the branch office, but the data sheets seem to indicate they support VPLS, and also mention that they are positioned between the ASR 1k and the ISR G2's.  The ASR's provide more bandwidth than we need for this solution, the 4000's seem to be a good fit. Feature Navigator is often out of date, incomplete, or just flat incorrect, so I thought I'd ask here.   Specifically, we are looking at these features (my apologies if the feature names are not exact) - VPLS with BGP auto discovery - TE tunnel selection based on EXP bit (Class Based MPLS TE Tunnel Selection may be the name of the feature?) - DC power supply (documentation is mixed on this for the ISR 4000's) - MPLS on MLPPP (NxDS1) and T3 interfaces. Thanks! ... View more