Hi Gaurav, Check if below links help with your Q. https://docs.umbrella.com/deployment-umbrella/v1.0.5/docs/enable-the-intelligent-proxy https://learn-umbrella.cisco.com/ https://support.umbrella.com/hc/en-us/articles/230563527-Using-Umbrella-with-an-HTTP-proxy   I also suggest reaching out to your preferred Cisco vendor or AM and they will be able shed more light. hth MS ... View more

Hi, You don't need to buy EOL router. Go  with 800 series teleworker model routers that support this feature.  4xxx ISRs are powerful with more add-on features- that may be one reason for their dedicated server role. hth MS ... View more

Hi Harold,   4351 does not support Easy vpn client mode. That may be the reason your provider suggested 29xx. Check below link (goto Advanced security tab)..   https://www.cisco.com/c/en/us/products/routers/4000-series-integrated-services-routers-isr/models-comparison.html hth MS  ... View more

Hi, Please check if beloe posting helps.. https://community.cisco.com/t5/routing/time-based-default-route/td-p/1300076   Thx MS PS: If this helps, please rate the original post. Thanks :).   ... View more

Hi, AFAIK.. there is no way can find unless you control 100% pointA ->PointB - in which case you got complete control on entire path and devices in the path (+ physical access control). The technologies you use 1. L1 encryption 2. VPN. However L1 encryption is more efficient. Search online and you'll find more information (including some L2 encryption etc). hth MS ... View more

Hi Dean,   I'm afraid you cannot. You may read this but below is hw requirement for HA pair.. " The two units in a failover configuration must be the same model, have the same number and types of interfaces, the same SSMs installed (if any), and the same RAM installed."   hth MS ... View more

Hi, I don't have experience in multicasting.. but your issue may not be L1 hardware related. Here is my take.. 1. From 'Show int' output, the interface counters on both ends (core & access) were never cleared- that accumulates errors when your interface down/up or you replace SFPs. 2. When you bring down interface for replacing sfp or t-shoot - it appears that some multicast related queue (remember I do not have m/c exp :)) getting cleared and start build up to the point your issue resurfacing.   When was the issue started and any change made. Guess 6500s are no longer supported but see if you can find any bugs related to your code and try upgrade. Also check if this below link helps..   https://puck.nether.net/pipermail/cisco-nsp/2014-January/094736.html   hth MS     ... View more

Hi, Check the software version. Protocol/feature support mostly based on software. Per below link 900 series does support BGP.   https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-3s/asr903/irg-xe-3s-asr903-book/irg-bgp4.html   hth MS ... View more

Hi,   "The only thing we've found so far that does help is to shut/no shut the gateway interface on the 3850's for the affected VLAN.  The affected IP works straight away after this, but new bad IP's show up soon after."   (Assuming there are no bugs in the code that may cause this issue).  > When the issue occurs, are you able to ping affected hosts with in the same vlan (from other hosts in the same vlan)? > Can you post vlan interface confis from core switch for couple of vlans that shows this issue?   Thanks, MS ... View more

Hi Philip, You may already have this command..just wanted to make sure.. 'media-type sfp' command  under interface configuration. hth MS   ... View more

Hi, I do not have 9300 to test but here is what I suggest (basic steps)...   1. Assign host name to the switch  2. Create local admin with password 2. feature ssh 3. Crypto key generate rsa modulus 2048 (if that does not work try what listed in doc -ssh key rsa 2048) Test ssh access from management workstation (make sure management workstation able to reach switch).   hth MS ... View more

Hi,   Check the below link.. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_chapter_01000.html#con_1064158   You need to issue 'feature ssh' to enable this and rest is same as IOS.   hth MS ... View more