Hi Jatin, Please find attached printscreen. Can you please verify the Vendor Specific Attriburtes ... View more

Hi, I'm trying to setup the group-lock using NPS Server & having trouble with it. If you have more information regarding above configuration in the radius server, please let me know. Regards, ... View more

Hi Sweetu Patel, I created your diagram in GNS3 & configured the Core & Dis A switches using your config. I also experienced the same problem & I found the solution for the problem. Solution: Lets take Core switches. Shut down all the trunk links in Core01, Core03 & Core04. Then you can see that Core02 switch become the HSRP active & then you can ping the HSRP Virtual IP Address frm Core02 switch. After start the trunk links in the Core01 switch & you can see that Core01 & Core02 switches speak & Core01 become HSRP active again. After few secs, you can see that you can ping the HSRP virtual ip address from both Core 01 & Core 02 switches. Then you can enable the uplinks in Core03 & you can see that you can ping the HSRP Virtual IP Address. Do the same for Core 04. You can continue same way for Dist A switches also.. Like that you can fix this problem easily. I attached the GNS3 lab which I created to fix your problem. I only configured Core Switches & Dist A switches. Hope this will help you to fix the problem. Best Regards, Dasuntha ... View more

Hi Edison, I m not sure about below comment, Yes, but a trunk port can provide connectivity to another device  configured as access mode. It doesn't necessarily need to be configured  as trunk at both ends. Actually both side sides should be configured as trunk to communicate each other. If one side is configured as trunk & the other side as access mode, devices cant communicate each other. Regards, Dasuntha ... View more

Hi, I like to see the config for the interface which connecting to ISP. Hope to Help Dasuntha ... View more

Hi Jon, I didnt run this in real physical switches & planning to try it very soon. I'll let you know if there's any update after that. Of course you can post it in LAN Switching & Routing. We can get more ideas from others & it'll help us to understand. And I also agree with you that, always better to clarify & fully understand if we have any doubts in the mind. For sure, I'll let u know if i have some information regarding this problem. Have a Nice Weekend. Regards, Dasuntha ... View more

Jon, If you say that switches are not working like that, How can it work like this. And switch B dont want to know the traffic passing by, because switch B dont have Vlan 100 active. Switch B is passing all the traffic through the trunk ports. And I searched alot & I was unable to find any where Cisco mentioned that, if you want to pass the vlan traffic from one switch to another switch through another switch, you need to create all the vlan in all the switches. Because it's not practical in real environment. Every one knows that. And some times remember that, the theory side can be different from the practical side. I really dont want argue with you about this matter, because I tested it & I know that's working fine in Real Environment. Anyway, nice to exchange the information like this. Best Regards, Dasuntha ... View more

Jon, From below output showing the active vlans in the switch. Port        Vlans allowed and active in management domain Fa0/5       1 Fa0/6       1 This output showing the allowed vlans in trunk. Port        Vlans allowed on trunk Fa0/5       1-1005 Fa0/6       1-1005 So, vlan 100 is allowed in the list & no need to configure vlan 100 in the switch B. Dasuntha ... View more

Hi Jon, As you know, by default Trunk Links are carrying all the VLAN traffics. That's why we dont need to create Vlan 100 in switch B. If you tested this scenario, you'll see it for sure. Regards, Dasuntha ... View more