Hello! I'm trying to deploy ISR-WAAS in our CHlNA's branch but i'm getting following error: service waas enable ************************************************************************** ****  Entering WAAS service interactive mode.                         **** ****  You will be asked a series of questions, and your answers       **** ****  will be used to modify this device's configuration to           **** ****  enable a WAAS Service on this router.                           **** ************************************************************************** Continue? [y]: y At any time: ? for help, CTRL-C to exit. Select a WAAS image to install: 1. harddisk:/ISR-WAAS-5.3.5b.14.ova 2. harddisk:/ISR-WAAS-5.3.5b.14-npe.ova 3. Enter your own image Select option  [2]: 2 Extracting profiles from harddisk:/ISR-WAAS-5.3.5b.14-npe.ova, this may take a couple of minutes ...  Failed to match exact application name.      Tried with both OVA above and same error. Chosen this version because it is the same that we are running in our physical inline appliances.  This is the 1st ISR-WAAS deployment, others are all inline appliances, so maybe I'm doing something wrong.    I'm following Cisco Design Guide (Aug 2014) and I've chosen this scenario: ISR-WAAS at a Single-Router Remote Site Configured Using EZConfig (750 connections)  As it is a single router remote branch, it seems to fit.    Check bellow details of the router:      System image file is "bootflash:isr4300-universalk9.03.15.04.S.155-2.S4-std.SPA.bin" Last reload reason: Reload Command  Technology Package License Information: ----------------------------------------------------------------- Technology    Technology-package           Technology-package               Current       Type           Next reboot ------------------------------------------------------------------ appx             appxk9           Permanent        appxk9 uc               uck9             Permanent        uck9 security         securityk9       Permanent        securityk9 ipbase           ipbasek9         Permanent        ipbasek9 cisco ISR4351/K9 (2RU) processor with 7809729K/6147K bytes of memory. Processor board ID ----------- 3 Gigabit Ethernet interfaces 32768K bytes of non-volatile configuration memory. 16777216K bytes of physical memory. 13807615K bytes of flash memory at bootflash:. 20971520K bytes of SATA hard disk at harddisk:. 30497632K bytes of USB flash at usb0:. sh virtual-service Virtual Service Global State and Virtualization Limits: Infrastructure version : 1.6 Total virtual services installed : 0 Total virtual services activated : 0 Machine types supported   : KVM, LXC Machine types disabled    : none Maximum VCPUs per virtual service : 6 Resource virtualization limits: Name                         Quota     Committed     Available -------------------------------------------------------------- system CPU (%)                  75             0            75 memory (MB)                  10240             0         10240 bootflash (MB)                1000             0          1000 harddisk (MB)                20000             0         17412 volume-group (MB)           190768             0        170288 dir harddisk: Directory of harddisk:/    11  drwx            16384   Oct 3 2018 05:20:58 +00:00  lost+found 1769473  drwx             4096   Oct 3 2018 05:21:21 +00:00  virtual-instance    12  -rw-        941916160   Oct 3 2018 09:25:38 +00:00  ISR-WAAS-5.3.5b.14.ova    13  -rw-        861665280   Oct 3 2018 11:44:49 +00:00  ISR-WAAS-5.3.5b.14-npe.ova 21137846272 bytes total (18258722816 bytes free) Didn't configured DNS/SRV in our DNS server because design guide stated that i could configured WCM IP manually during the installation. Is this mandatory? Thanks in advance. Daniel ... View more

Hello!   I'm trying to deploy an ISR-WAAS in our China's branch, but i'm getting following error:   Only one WAAS image found locally (harddisk:/ISR-WAAS-5.3.5b.14.ova) - using as default Extracting profiles from harddisk:/ISR-WAAS-5.3.5b.14.ova, this may take a couple of minutes ...  Failed to match exact application name   This is the 1st ISR-WAAS deployment (others are inline appliances), so maybe I'm doing something wrong.   RTCNCZX022#sh virtual-service Virtual Service Global State and Virtualization Limits: Infrastructure version : 1.6 Total virtual services installed : 0 Total virtual services activated : 0 Machine types supported   : KVM, LXC Machine types disabled    : none Maximum VCPUs per virtual service : 6 Resource virtualization limits: Name                         Quota     Committed     Available -------------------------------------------------------------- system CPU (%)                  75             0            75 memory (MB)                  10240             0         10240 bootflash (MB)                1000             0          1000 harddisk (MB)                20000             0         18235 volume-group (MB)           190768             0        170288     System image file is "bootflash:isr4300-universalk9.03.15.04.S.155-2.S4-std.SPA.bin" Last reload reason: Reload Command   Technology Package License Information: ----------------------------------------------------------------- Technology    Technology-package           Technology-package               Current       Type           Next reboot ------------------------------------------------------------------ appx             appxk9           Permanent        appxk9 uc               uck9             Permanent        uck9 security         securityk9       Permanent        securityk9 ipbase           ipbasek9         Permanent        ipbasek9 cisco ISR4351/K9 (2RU) processor with 7809729K/6147K bytes of memory. Processor board ID xxxxxxxxxxxxxxxxxxxxxx 3 Gigabit Ethernet interfaces 32768K bytes of non-volatile configuration memory. 16777216K bytes of physical memory. 13807615K bytes of flash memory at bootflash:. 20971520K bytes of SATA hard disk at harddisk:. 30497632K bytes of USB flash at usb0:.   Any idea? It is a single router in a remote branch, so I was planning to deploy as ISR-WAAS at a Single-Router Remote Site—Configured Using EZConfig Following this design guide: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Aug2014/CVD-ApplicationOptimizationUsingCiscoISR-WAASDesignGuide-AUG14.pdf   Chosen version 5.3.5b because it is the same we are running on all the others. Didn't configured the SRV and DNS entries for WCM, as design guide stated that WCM could be set manually during the OVA istallation proccess.   THanks in advance :) ... View more

Good Day.   I created AD groups like NETWORK_BRANCH_SW_RW, NETWORK_BRANCH_SW_RO, NETWORK_BRANCH_RT_RO, NETWORK_BRANCH_RT_RW and configured the ACS to allow the access using TACACS+   I've already created the Group Mapping and the Authorization, but when an user has for example the NETWORK_BRANCH_SW_RW and the NETWORK_BRANCH_RT_RO AD group and trying to access a router the ACS is matching on the NETWORK_BRANCH_SW_RW and denying the access.   Someone knows how to avoid this kind of overlap?     ... View more

Hi,   I just downloaded the latest version of DCNM and tryed to deploy it on Amazon AWS but got no luck, after the machine starts it stucks on the login page and no user and pass do work. I then deployed it locally on our vCenter and I got the options to create a username/pasword and stuff, I was able to log in. I then shutdown the machine and uploaded it to AWS, then the same problem happened, stuck on the username page. Has anyone tried to deploy the DCNM on the Cloud? Is there any limitation or maybe a different version to be deployed there?   Thanks! Cristiano Volz ... View more

Hello guys! I've been searching a while for tools or a method to identify/document service paths within our enterprise environment. Our managers are asking for visibility, they'd like to know where each critical service is passing through, in order to analyze the impact of a link disconnection, low performance etc. As we have two datacenters with redundant infrastructure (FW, routers, links, etc), QOS and dynamic routing (IBGP and EBGP), we are facing some problems doing that "visibility work". The result should look like this: ERP Gold Traffic Datacenter 1 Link of Career X E-mail Bronze Traffic Datacenter 2 Link MPLS 1 I'd do that dynamically, so I'd probably need to log into and issue some commands (maybe on HQ and branch side) if I try to gather those info by myself (without using a tool). If there's any tool capable of doing that close to perfection, I'd be glad to buy it :) I see that this is not easy task, but maybe some of you have already been through it. Thanks in advance, Daniel ... View more

Hello! We are facing problems while applying shape policies in our GRE tunnels. 1st problem: It lets you remove a policy from a interface, but when you try to reenter same line it accepts the command but doesn't apply: E.g: ASR1K_DG_RTR_I#sh run int tu211230 ! interface Tunnel211230 description *** Tunel VPN Principal 30 - Linhares *** bandwidth 10000 ip vrf forwarding TUNEIS ip address 10.254.112.29 255.255.255.252 ip mtu 1420 qos pre-classify keepalive 20 6 cdp enable tunnel source Loopback30 tunnel destination 10.2.112.30 tunnel vrf TUNEIS end ASR1K_DG_RTR_I#conf t ASR1K_DG_RTR_I(config)#int tu211230 ASR1K_DG_RTR_I(config-if)#service-policy out SHAPE_10000 ASR1K_DG_RTR_I(config-if)#do sh run int tu211230 ! interface Tunnel211230 description *** Tunel VPN Principal 30 - Linhares *** bandwidth 10000 ip vrf forwarding TUNEIS ip address 10.254.112.29 255.255.255.252 ip mtu 1420 qos pre-classify keepalive 20 6 cdp enable tunnel source Loopback30 tunnel destination 10.2.112.30 tunnel vrf TUNEIS ???? end ASR1K_DG_RTR_I#sh policy-map interface Tunnel211230 ASR1K_DG_RTR_I# ???? 2nd problem: In the interfaces that we already had the policy configured it shows the line, but the policy remains suspended E.g: interface Tunnel201230 description *** Tunel VPN Principal 30 - RIB_PRETO *** bandwidth 920 ip vrf forwarding TUNEIS ip address 10.254.12.29 255.255.255.252 ip mtu 1420 qos pre-classify keepalive 20 6 cdp enable tunnel source Loopback30 tunnel destination 10.2.12.30 tunnel vrf TUNEIS service-policy output SHAPE_1000_VOZ_100 ! ASR1K_DG_RTR_I#sh policy-map interface Tunnel201230 Tunnel201230 Service-policy output: SHAPE_1000_VOZ_100 Service policy SHAPE_1000_VOZ_100 is in suspended mode 3rd problem: Some interfaces are working! E.g: interface Tunnel205230 description *** Tunel VPN Principal 30 - Hisa-Escritorio *** bandwidth 4096 ip vrf forwarding TUNEIS ip address 10.254.52.29 255.255.255.252 ip mtu 1420 qos pre-classify keepalive 20 6 cdp enable tunnel source Loopback30 tunnel destination 10.2.52.30 tunnel vrf TUNEIS service-policy output SHAPE_4000 ASR1K_DG_RTR_I#sh policy-map int Tunnel205230 Tunnel205230 Service-policy output: SHAPE_4000 Class-map: class-default (match-any) 9744 packets, 467712 bytes ! Here are the policies configuration for further reference: policy-map SHAPE_1000_VOZ_100 class class-default shape average 920000 service-policy QOS_VOZ_100 policy-map QOS_VOZ_100 class CLASS_QOS_OURO bandwidth remaining percent 40 class CLASS_QOS_PRATA bandwidth remaining percent 30 class CLASS_QOS_BRONZE bandwidth remaining percent 20 class class-default fair-queue policy-map SHAPE_4000 class class-default shape average 3680000 service-policy QOS_PADRAO policy-map SHAPE_10000 class class-default shape average 9200000 service-policy QOS_PADRAO policy-map QOS_PADRAO class CLASS_QOS_OURO bandwidth remaining percent 40 class CLASS_QOS_PRATA bandwidth remaining percent 30 class CLASS_QOS_BRONZE bandwidth remaining percent 20 class class-default fair-queue Router version: Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(1)S1, RELEASE SOFTWARE (fc1) cisco ASR1002-X (2RU-X) processor (revision 2KP) with 3743195K/6147K bytes of memory. Thanks in advance! Daniel ... View more