Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About p.hruby
Stats
Member since
05-23-2002
90
Posts
19
Helpful
3
Solutions
Created by
p.hruby
in Application Centric Infrastructure
in Application Centric Infrastructure
08-01-2019
05:31 AM
08-01-2019
05:31 AM
Is it possible to add a new spine into the existing fabric even if the spine is not conected to all leaves? I know this is not a valid design but I'd like to know if this works. Is there a document which describes ACI behaviour when some cables are not connected between spine and leaves? For example when path from a source leaf to a target leaf must go over an another leaf (source leaf - spine1 - leafX - spine2 - target leaf) because of improper (faulty) cabling between source/target leaves and spines.
... View more
Labels:
Created by
p.hruby
in Application Centric Infrastructure
in Application Centric Infrastructure
07-19-2019
05:22 AM
07-19-2019
05:22 AM
Could anyone point me to a documentation where the role of CSR routers used in cAPIC deployment is explained? cAPIC design guide or something similar.
... View more
Labels:
Created by
p.hruby
in Application Centric Infrastructure
in Application Centric Infrastructure
07-11-2019
05:54 AM
07-11-2019
05:54 AM
Thanks. For reference here is the link which describes how to configure static route on a BD. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L3_config/b_Cisco_APIC_Layer_3_Configuration_Guide/b_Cisco_APIC_Layer_3_Configuration_Guide_chapter_01000.html
... View more
Created by
p.hruby
in Application Centric Infrastructure
in Application Centric Infrastructure
07-10-2019
05:56 AM
07-10-2019
05:56 AM
What if VIP subnet is configured only inside of load balancer and external interface of the loadbalancer uses different IP subnet? Is such a scenario supported with ACI? In standard DC network I'd use a static route for VIP range towards the external LB interface.
... View more
06-30-2017
12:42 AM
I haven't inserted whole configuration. The static route is there.
ip route vrf Internet 0.0.0.0 0.0.0.0 10.178.2.1
The issue happens in IPsec Phase 2. Communication between hub and spoke works well.
... View more
06-29-2017
04:52 AM
I'd like to configure DMVPN hub behind static NAT. When Internet interface and Tunnel interface are in the same VRF on the hub, everything works well. But when I put Internet interface into separate VRF, IPsec fails during phase 2.
Hub configuration:
crypto keyring DMVPN vrf Internet pre-shared-key address 0.0.0.0 0.0.0.0 key pass ! ! ! ! crypto isakmp policy 10 authentication pre-share
crypto isakmp profile DMVPN keyring DMVPN match identity address 0.0.0.0 Internet local-address GigabitEthernet0/1 ! ! crypto ipsec transform-set DMVPN esp-3des mode transport ! crypto ipsec profile DMVPN set transform-set DMVPN set isakmp-profile DMVPN !
interface Tunnel21 ip address 10.188.1.1 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication HQpass ip nhrp network-id 210 ip nhrp redirect ip tcp adjust-mss 1360 if-state nhrp tunnel source GigabitEthernet0/1 tunnel mode gre multipoint tunnel key 210 tunnel vrf Internet tunnel protection ipsec profile DMVPN
interface GigabitEthernet0/1 ip vrf forwarding Internet ip address 10.178.2.2 255.255.255.0
*Jun 29 10:50:43.972: ISAKMP: (1004):Checking IPSec proposal 1 *Jun 29 10:50:43.973: ISAKMP: (1004):transform 1, ESP_3DES *Jun 29 10:50:43.973: ISAKMP: (1004): attributes in transform: *Jun 29 10:50:43.974: ISAKMP: (1004): encaps is 4 (Transport-UDP) *Jun 29 10:50:43.974: ISAKMP: (1004): SA life type in seconds *Jun 29 10:50:43.975: ISAKMP: (1004): SA life duration (basic) of 3600 *Jun 29 10:50:43.975: ISAKMP: (1004): SA life type in kilobytes *Jun 29 10:50:43.975: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 *Jun 29 10:50:43.979: ISAKMP: (1004):atts are acceptable. *Jun 29 10:50:43.981: ISAKMP-ERROR: (1004):IPSec policy invalidated proposal with error 32 *Jun 29 10:50:43.983: ISAKMP-ERROR: (1004):phase 2 SA policy not acceptable! (local 10.178.2.2 remote 193.5.1.10) *Jun 29 10:50:43.984: ISAKMP: (1004):set new node -1103950591 to QM_IDLE *Jun 29 10:50:43.986: ISAKMP: (1004):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 238628864, message ID = 3191016705
When I put tunnel21 into Internet vrf, it works fine.
interface Tunnel21 ip vrf forwarding Internet ip address 10.188.1.1 255.255.255.0
Is there anything missing in my configuration?
Petr
... View more
Labels:
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
03-07-2017
01:24 AM
03-07-2017
01:24 AM
The red lines are the missing links. I used screenshot from previous discovery, that's why connections are visible underneath some lines. Sorry for confusion. Today I performed rediscovery. Nothing has changed. All devices are in inventory with status "managed". Only one device has status "UNKNOWN", but this device has correctly displayed all links to it's neighbors. 2017-03-07 9:16 GMT+01:00 aradford <community@cisco.com>: Cisco Communities <https://communities.cisco.com/> Connection lines are missing in Topology Map reply from aradford <https://communities.cisco.com/people/aradford> in *DevNet APIC EM* - View the full discussion <https://communities.cisco.com/message/248370#248370>
... View more
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
03-06-2017
10:36 AM
03-06-2017
10:36 AM
Hi Adam, the 3k are connected by one 1Gb link. CDP from one side: Gig 0/3 129 S I WS-C3560- Gig 0/1 CDP from the opposite one: Gig 0/1 133 R S I WS-C3560- Gig 0/3 Today I've performed new fresh installation of APIC-EM 1.4. Even more links are missing after CDP based discovery ... Petr 2017-03-05 0:24 GMT+01:00 aradford <community@cisco.com>: Cisco Communities <https://communities.cisco.com/> Connection lines are missing in Topology Map reply from aradford <https://communities.cisco.com/people/aradford> in *DevNet APIC EM* - View the full discussion <https://communities.cisco.com/message/248207#248207>
... View more
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
03-04-2017
03:40 AM
03-04-2017
03:40 AM
Hi Adam, I checked cdp entries on affected switches and it seems to me correct. Switches at the bottom are N5K's with synchronized configuration. In the meantime I tried the same with 1.3.0.4383 and the result was similar (other links were not displayed). Then I deleted all devices and performed rescan but the result was even worse. Lot of lines missing ... I allocated for this test instalation 150 GB only and the disk performance is slower that minimum recommended but I don't think this could cause such issue ... $ dd if=/dev/zero of=/tmp/foo bs=1M count=512 conv=fdatasync 512+0 records in 512+0 records out 536870912 bytes (537 MB) copied, 2.95471 s, 182 MB/s (grapevine)
... View more
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
03-03-2017
01:05 AM
03-03-2017
01:05 AM
I installed APIC-EM 1.4.0.1959. When I perform network discovery using CDP and seed device all devices are properly discovered but some links are missing. I've tried it several times but there were always some link missing. In one case there was dispayed link which doesn't exist. I attach screenshot of APIC-EM topology. Missing links are red hand-drawn. Do you have any idea what I'm doing wrong or how to fix it? Petr
... View more
- Tags:
- apic-em
- topology_map
Labels:
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
11-01-2016
01:18 AM
11-01-2016
01:18 AM
It looks like my problem was caused not only by disk performance but also by CPU resources. As soon as I configured 16 CPUs my installation was successful (on 3rd attempt ..) >
... View more
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
10-30-2016
06:48 AM
10-30-2016
06:48 AM
Yes, the controller is growing services. But timeout is reached after 21 of 37 services are successfuly grown.
... View more
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
10-29-2016
02:20 AM
10-29-2016
02:20 AM
I allocated exactly 500GB. I think that disk performace is the only problem in my case.
... View more
Created by
p.hruby
in Automation and Analytics
in Automation and Analytics
10-29-2016
02:05 AM
10-29-2016
02:05 AM
Slow disk is the only weekness of my setup. I have 64GB of RAM and 8 CPUs. I think that I obtained number 50 during disk performance test. I was able to install v 1.1 after several attempts. But installation of versions 1.2 and 1.3 ends always with timeout of 3600 s.
... View more
03-24-2020
If MPLS/PE is not supported on vEdge, is the mentioned design possible
when VRF-lite is used on vEdg...
03-21-2020
Is it possible to configure WAN edge on a router which is also
configured as a MPLS PE towards inter...
08-01-2019
Is it possible to add a new spine into the existing fabric even if the
spine is not conected to all ...
Created by
p.hruby
in Application Centric Infrastructure
07-19-2019
07-19-2019
Could anyone point me to a documentation where the role of CSR routers
used in cAPIC deployment is e...
Created by
p.hruby
in Application Centric Infrastructure
07-11-2019
07-11-2019
Thanks.For reference here is the link which describes how to configure
static route on a BD.
https:/...
Created by
p.hruby
in Application Centric Infrastructure
07-10-2019
07-10-2019
What if VIP subnet is configured only inside of load balancer and
external interface of the loadbala...
06-30-2017
I haven't inserted whole configuration. The static route is there. ip
route vrf Internet 0.0.0.0 0.0...
06-29-2017
I'd like to configure DMVPN hub behind static NAT. When Internet
interface and Tunnel interface are ...
Created by
p.hruby
in Automation and Analytics
03-07-2017
03-07-2017
The red lines are the missing links. I used screenshot from
previousdiscovery, that's why connection...
Created by
p.hruby
in Automation and Analytics
03-06-2017
03-06-2017
Hi Adam,the 3k are connected by one 1Gb link.CDP from one side:Gig 0/3
129 S I WS-C3560- Gig 0/1CDP ...
Created by
p.hruby
in Automation and Analytics
03-04-2017
03-04-2017
Hi Adam,I checked cdp entries on affected switches and it seems to me
correct.Switches at the bottom...
Created by
p.hruby
in Automation and Analytics
03-03-2017
03-03-2017
I installed APIC-EM 1.4.0.1959. When I perform network discovery using
CDP and seed device all devic...
11-01-2016
It looks like my problem was caused not only by disk performance but
alsoby CPU resources. As soon a...
10-30-2016
Yes, the controller is growing services. But timeout is reached after 21
of37 services are successfu...
Public Statistics
| Date Registered | 05-23-2002 03:47 AM |
| Date Last Visited | 03-31-2020 02:59 AM |
| Total Messages Posted | 90 |
| Total Helpful Votes Received | 19 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
