Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have to upgrade an old PIX running 8.0(4). the new platform is a ASA5515x. I cannot use the automatic upgrade as the 5515x will not load 8.0. I found a reference to http://gypsy.cisco.com/migration.html, but the connection times out. Is the ut...
I am running a number of ASR1001s running 15.1(1)S. I have QoS setup but see drops in some of the queues from time to time. I know we have the bandwidth to accommodate the traffic. There has to be a way to allow the queues to go beyond their bandw...
I am configuring a brand new pair of ASA 5512s running 8.6(1). Traditionally we hae been using the Management port as the dedicated failover link, but that seems to not be possible on the 5512s.ASA (config-if)# no management-onlyERROR: It is not all...
I am running a number of ASRs (and some 3925s) to connect to customer networks. I am running IP SLA to endpoints in their networks to monitor jitter etc.. We have some tools that are supposed to collect IP SLA data, but they usually attempt to conf...
I have 4 ASR1001s and am in the process to put PFD onto them.I am running the following release:Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSAL-M), Version 15.1(1)S, RELEASE SOFTWARE (fc1)License Package Information for Module:'asr10...
So can I simply go ahead and make the changes like below:Current:crypto map Internet_map1 1 match address Internet_cryptomapcrypto map Internet_map1 1 set peer 100.100.100.100 crypto map Internet_map1 1 set ikev1 transform-set ESP-AES-128-SHA ESP-AES...
Vasilis,excellent! That is exactly what I need. However, I just found out that the minimum number of prefixes I can get (besides default rotue only) is 208719. I am pretty sure that would crash my router in a few seconds....Off to find another me...
Julio,I tried this an dI still get a certificate error. I *think* my issue is that the cert refers imported in trustpoint1 references the key of trustpoint0. But I am not quite sure.
Okay, I can see how that would work. Is 8.3 so precise that I need a double pair of NAT statements for each possible conenctivity?In 8.0 I would do something along the following lines:Object network Ahost 1.1.1.1Object network Bhost 2.2.2.1Object n...
