Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dal
Stats
Member since
01-21-2004
199
Posts
50
Helpful
3
Solutions
01-22-2020
06:43 AM
Hi. As the title say, I have enabled 802.1x (and MAB) via 3CPL and policies on a switchport, and it works fine. Until the computer falls asleep. Then the switchport starts to generate error logs like this: Jan 22 14:16:34.492: %SESSION_MGR-5-FAIL: Switch 1 R0/0: sessmgrd: Authorization failed or unapplied for client (13e2.1e14.a20a) on Interface GigabitEthernet1/0/13 AuditSessionID FA64320A00015AFCCD99EA23. Failure reason: Authc fail. Authc failure reason: Cred Fail. every 60 seconds. I have found that this happens when the NIC on the computer has enabled the "Allow the computer to turn off this device to save power" option... which is enable by default on all Windows computers. And it needs to stay that way to enable WoL. So how can I get rid of the error messages in the switch? Thanks.
... View more
Labels:
12-03-2019
06:46 AM
Hi. I don't know if you found a solution for this, but I think you need to install a root ca when using PEAP. Same as with EAP-TLS Username and password only is not enough. If you want to use username / password only, you need to choose MD5 as authentication protocol.
... View more
Created by
dal
in Network Management
in Network Management
11-29-2019
05:48 AM
11-29-2019
05:48 AM
Hi I want to use domain names when doing traceroutes or show ip ospf neighbor commands, but with the complete FQDN, the names can be unnecessary long. Example: traceroute 10.0.2.1
Type escape sequence to abort.
Tracing the route to Site6.loopback.lan (10.0.2.1)
VRF info: (vrf in name/id, vrf out name/id)
1 Site1<->Site2.linknett.lan (10.0.254.146) [MPLS: Label 29 Exp 0] 2 msec 1 msec 1 msec
2 Site3<->Site1.linknett.lan (10.0.254.137) [MPLS: Label 78 Exp 0] 1 msec 2 msec 1 msec
3 Site4<->Site3.linknett.lan (10.0.254.65) [MPLS: Label 27 Exp 0] 2 msec 1 msec 1 msec
4 Site6<->Site4.linknett.lan (10.0.254.17) 1 msec * 2 msec or sh ip ospf nei
Site3.loopba 1 FULL/DR
172.20.0.12 1 FULL/DR
Site5.loopbac 1 FULL/BDR You see, the OSPF command isn't able to list the whole FQDN anyway. So, it there a way to "strip" the domain name from FQDN? I know I can use the ip host command, but using a DNS server just seems more elegant. Thanks.
... View more
Labels:
Created by
dal
in Other Network Architecture Subjects
in Other Network Architecture Subjects
06-11-2019
11:39 AM
06-11-2019
11:39 AM
Very nice! Would you mind sharing your config on those two switches? Thanks
... View more
Created by
dal
in Other Network Architecture Subjects
in Other Network Architecture Subjects
05-28-2019
02:02 PM
05-28-2019
02:02 PM
Thank you for your answer. So it's not possible to set up between 2 Catalyst switches?
... View more
Created by
dal
in Other Network Architecture Subjects
in Other Network Architecture Subjects
05-28-2019
12:28 PM
05-28-2019
12:28 PM
Hi. Did you find an answer to this? I'm facing the same situation my self, and would love to see some working configs betweeen Catalyst switches. All examples I have found involves Nexus switches, which I don't have. Thank you
... View more
11-30-2018
01:40 AM
Hi.
I'm trying to add my ISE servers to Prime Infrastructure v.3.4, but it says I have the wrong username or password.
Admin login to ISE is set to use AD. I tried my own username that I know works, but it says wrong username or password. I also tried to create an internal Admin User in ISE, but same error
I run ISE v3.4 with patch 5, and Prime Infrastructure v3.4 with PI 3.4.1 patch
Any ideas?
Thanks.
... View more
- Tags:
- prime
Labels:
06-19-2018
01:46 PM
Is this possible? I have several hundred buildings, each with a set of unique VLAN ID's tied to unique VLAN names For example: Building1_Teacher Building1_Student Building1_Health Building1_Management Building2_Teacher Building2_Student Building2_Health Building2_Management and so on.. This will of course give a lot of rules in ISE if I was to use VLAN ID's. Then I read that it is possible to use VLAN Names to assign the correct VLAN But is it possible to use partial names when setting up the rule, for example Teacher or Students? Since that part is the same in all buildings. If not, is it possible to implement? If would save me (an other with similar name regimes) a lot of time if it was possible. I also kinda like having unique names tied to unique VLANs Thank you
... View more
Labels:
01-22-2018
04:38 AM
Hi, and thank you for your answer.
But it seems the problems is much more complex than a bug.
It turns out that the backplane is only 80G, so we can only have 2x40G ports and 0x10G port active, or 1x40G port and 4x10G ports active. Or 0x40G ports and 8x10G ports active.
As seen here: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/hardware/sup_install/b-c9400-sup-note.html#id_53674
Unfortunately, it gets worse.
I have 2 supervisors, and even though my understanding was the each module had a 80G backplane, it seems that my 2 supervisors shares the backplane?
Because when i enable the ports fo5/0/9 and fo6/0/9, all other ports go inactive.
So, I have 2 options: Have only 1 usable 40G port on each supervisor or 4 10G port on each supervisor.
All other ports become unusable..
Come on Cisco, of all ridiculous things you are doing, this must go into the top 10 list!
Why not put on oversubscription or something instead?
Sometimes (almost always) the number of ports is more important than speed. It'not like we are running a constant stream of 40G traffic on multiple ports (yet)
... View more
01-19-2018
04:01 PM
The switch is running Cisco IOS XE Software, Version 16.06.02a.
I have of course tried shut / no shut.
No message at all when inserting modules. I'm guessing that's because, you know, the port is inactive?
No offence, but why bother to answer with a cut 'n' paste answer when you clearly don't know the answer?
Thanks.
... View more
01-19-2018
05:28 AM
Hi. We recently purchased a Cisco 9400 with 2 Supervisor-1 modules, and I want to use the 40G ports.
But the ports (along with 4 of the 8 10G ports) are set as Inactive.
How do I activate them?
I have tried:
interface FortyGigabitEthernet5/0/10 switchport mode trunk enable
But the port still says Inactive.
So how to enable all the inactive ports?
Thanks.
... View more
Labels:
08-31-2017
12:21 AM
Does any of the firmware releases for the ME3600 series switches support Netflow now? Thanks.
... View more
Labels:
06-16-2017
04:07 AM
Excellent, that did the trick!
So, on to the next question: If I want to copy the file from TFTP to running-config, I can just reverse these two lines:
snmpset -v:2c -c:private -r:1.1.1.1 -o:.1.3.6.1.4.1.9.9.96.1.1.1.1.3.52 -tp:int -val:4 - Source file = running-config snmpset -v:2c -c:private -r:1.1.1.1 -o:.1.3.6.1.4.1.9.9.96.1.1.1.1.4.52 -tp:int -val:1 - Destination file = network file
?
Thanks again
... View more
06-15-2017
02:13 PM
Hi.
I have lost contact with one of my switches due to error in an vty ACL.
As I can read from other posts on this forum, it should be possile to read and write the running-config into/onto the switch using SNMP. As can be read here: https://supportforums.cisco.com/document/10046/how-copy-configuration-files-and-cisco-ios-routers-use-snmp
But I get an error:
Here is what I'm running:
snmpset -v:2c -c:private -r:1.1.1.1 -o:.1.3.6.1.4.1.9.9.96.1.1.1.1.2.52 -tp:int -val:1 - Telling that TFTP shall be used snmpset -v:2c -c:private -r:1.1.1.1 -o:.1.3.6.1.4.1.9.9.96.1.1.1.1.3.52 -tp:int -val:4 - Source file = running-config snmpset -v:2c -c:private -r:1.1.1.1 -o:.1.3.6.1.4.1.9.9.96.1.1.1.1.4.52 -tp:int -val:1 - Destination file = network file snmpset -v:2c -c:private -r:1.1.1.1 -o:.1.3.6.1.4.1.9.9.96.1.1.1.1.5.52 -tp:ip -val:172.20.225.55 - IP to TFTP-server snmpset -v:2c -c:private -r:1.1.1.1 -o:.1.3.6.1.4.1.9.9.96.1.1.1.1.6.52 -tp:str -val:"filename"
I get an OK on all of the above. But when I try to execute the file copy with this line: snmpset -v:2c -c:private -r:1.1.1.1 -o:..1.3.6.1.4.1.9.9.96.1.1.1.1.14.52 -tp:int -val:4 - Copies the file to TFTP
It fails with this error message:
%Failed to set value to SNMP variable. Inconsistent Value (inconsistentValue(12))
Any ideas what could be wrong?
Thanks.
... View more
Labels:
01-22-2020
Hi.As the title say, I have enabled 802.1x (and MAB) via 3CPL and
policies on a switchport, and it w...
Created by
dal
in Cisco Digital Network Architecture (DNA)
01-11-2020
01-11-2020
What if I have a test environment?Or want to server more than one
company.
Created by
dal
in Cisco Digital Network Architecture (DNA)
12-08-2019
12-08-2019
Even in 1.3? Why can we STILL not add 2 different ISE clusters to
DNAC?What on earth are you doing?
12-03-2019
Hi.I don't know if you found a solution for this, but I think you need
to install a root ca when usi...
Created by
dal
in Network Management
11-29-2019
11-29-2019
HiI want to use domain names when doing traceroutes or show ip ospf
neighbor commands, but with the ...
09-18-2019
DNA Center stops working.The web interface is not responding to either
the cluster ip address or the...
Created by
dal
in Other Network Architecture Subjects
06-11-2019
06-11-2019
Very nice!Would you mind sharing your config on those two switches?
Thanks
Created by
dal
in Cisco Digital Network Architecture (DNA)
06-06-2019
06-06-2019
Hi.I'm trying to configure my first DNA Center, but have questions?Why
on earth do I have to configu...
Created by
dal
in Other Network Architecture Subjects
05-28-2019
05-28-2019
Thank you for your answer.So it's not possible to set up between 2
Catalyst switches?
Created by
dal
in Other Network Architecture Subjects
05-28-2019
05-28-2019
Hi.Did you find an answer to this?I'm facing the same situation my self,
and would love to see some ...
Created by
dal
in Policy and Access
11-30-2018
11-30-2018
Hi. I'm trying to add my ISE servers to Prime Infrastructure v.3.4, but
it says I have the wrong use...
06-19-2018
Is this possible?I have several hundred buildings, each with a set of
unique VLAN ID's tied to uniqu...
01-22-2018
Hi, and thank you for your answer. But it seems the problems is much
more complex than a bug. It tur...
01-19-2018
The switch is running Cisco IOS XE Software, Version 16.06.02a. I have
of course tried shut / no shu...
Public Statistics
| Date Registered | 01-21-2004 02:04 AM |
| Date Last Visited | 01-22-2020 06:33 AM |
| Total Messages Posted | 199 |
| Total Helpful Votes Received | 50 |
Helpful Votes Given To
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
