I have a VPN setup that allows split tunnelling. We currently moved to using Office 365 and Microsoft teams. The issue is when users are connected to VPN the cannot access Teams or Office 365. The theory is that instead of using the tunnel to access the resources they are using the their local internet and not the tunnel. How can I force the connected VPN users to use the tunnel and not the local internet?    ADSM Version 7.5(1) for ASA5525 VPN    ... View more

I'm having issues connectiong to and getting past the  "Test Connectivity"   I'm getting the error message "CDSUser does not have permission to execute a command script or download configs"  ... View more

I am currently moving from ASA 5525 to Firepower 2140 with FMC1000. I am in the process of moving object. I have over 3K objects and I would prefer not to do them all one-by-one. I cannot use the migration method provided by Cisco. Is there a CLI option on the FMC that I can paste a text file or even import/export.    Worse case is the 3rd party application that would help? ... View more

Hello -- I am trying to determine if my psckets are being marked withe correct DSCP value on a 6513 Sup2t. I have put all the output below. My primary question is the traffic coming from port 2/3/23 being marked with DSCP 46?   I am using MS Lync and the phone is Ploycom CX 600:   Interface GigabitEthernet2/3/23 queueing strategy:  Weighted Round-Robin   Port QoS is disabled globally   Queueing on Gi2/3/23: Tx Disabled Rx Disabled Trust boundary disabled   Trust state: trust DSCP   Trust state in queueing: trust COS   Extend trust state: not trusted [COS = 0]   Default COS is 0     Queueing Mode In Tx direction: mode-cos     Transmit queues [type = 1p3q8t]:     Queue Id    Scheduling  Num of thresholds     -----------------------------------------        01         WRR                 08        02         WRR                 08        03         WRR                 08        04         Priority            01     WRR bandwidth ratios:  100[queue 1]   0[queue 2]   0[queue 3]     queue-limit ratios:    100[queue 1]   0[queue 2]   0[queue 3]   0[Pri Queue]     queue tail-drop-thresholds     --------------------------     1     100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]     2     100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]     3     100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]     queue random-detect-min-thresholds     ----------------------------------       1    100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]       2    100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]       3    100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]     queue random-detect-max-thresholds     ----------------------------------       1    100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]       2    100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]       3    100[1] 100[2] 100[3] 100[4] 100[5] 100[6] 100[7] 100[8]     WRED disabled queues:      1  2  3     queue thresh cos-map     ---------------------------------------     1     1      0 1 2 3 4 5 6 7     1     2     1     3     1     4     1     5     1     6     1     7     1     8     2     1     2     2     2     3     2     4     2     5     2     6     2     7     2     8     3     1     3     2     3     3     3     4     3     5     3     6     3     7     3     8     4     1     Queueing Mode In Rx direction: mode-cos     Receive queues [type = 1q2t]:     Queue Id    Scheduling  Num of thresholds     -----------------------------------------        1         Standard            2     queue tail-drop-thresholds     --------------------------     1     100[1] 100[2]     queue thresh cos-map     ---------------------------------------     1     1      0 1 2 3 4 5 6 7     1     2   Packets dropped on Transmit:     BPDU packets:  0     queue thresh             dropped  [cos-map]     ------------------------------------------------------------------     1     1                       0  [0 1 2 3 4 5 6 7 ]   Packets dropped on Receive:     BPDU packets:  0     queue thresh            dropped  [cos-map]     ------------------------------------------------------------------     1     1                       0  [0 1 2 3 4 5 6 7 ] SWITCH# sho run int g 2/3/23 Building configuration... Current configuration : 614 bytes ! interface GigabitEthernet2/3/23  description Dynamic_Auth_Port  switchport  switchport mode access  switchport voice vlan 281  authentication event fail action authorize vlan 801  authentication event no-response action authorize vlan 801  authentication host-mode multi-domain  authentication port-control auto  authentication periodic  authentication timer reauthenticate server  authentication violation replace  mab  no snmp trap link-status  dot1x pae authenticator  dot1x timeout quiet-period 10  dot1x timeout tx-period 15  dot1x timeout supp-timeout 31  dot1x max-req 3  spanning-tree portfast edge end SWITCH# sho int g 2/3/23 GigabitEthernet2/3/23 is up, line protocol is up (connected)   Hardware is C6k 1000Mb 802.3, address is 6c41.6ae9.2df6 (bia 6c41.6ae9.2df6)   Description: Dynamic_Auth_Port   MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation ARPA, loopback not set   Keepalive set (10 sec)   Full-duplex, 1000Mb/s, media type is 10/100/1000BaseT   input flow-control is off, output flow-control is off   Clock mode is auto   ARP type: ARPA, ARP Timeout 04:00:00   Last input 00:00:17, output never, output hang never   Last clearing of "show interface" counters never   Input queue: 0/2000/1/0 (size/max/drops/flushes); Total output drops: 0   Queueing strategy: fifo   Output queue: 0/40 (size/max)   5 minute input rate 17000 bits/sec, 17 packets/sec   5 minute output rate 15000 bits/sec, 9 packets/sec      474958 packets input, 81382436 bytes, 0 no buffer      Received 73543 broadcasts (62798 multicasts)      0 runts, 0 giants, 0 throttles      0 input errors, 0 CRC, 2 frame, 0 overrun, 0 ignored      0 watchdog, 0 multicast, 0 pause input      0 input packets with dribble condition detected      8528364 packets output, 1450314438 bytes, 0 underruns      0 output errors, 0 collisions, 3 interface resets      0 babbles, 0 late collision, 0 deferred      0 lost carrier, 0 no carrier, 0 PAUSE output      0 output buffer failures, 0 output buffers swapped out SWITCH# sho int g 2/3/23 switchport Name: Gi2/3/23 Switchport: Enabled Administrative Mode: static access Operational Mode: static access Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: native Operational Dot1q Ethertype:  0x8100 Negotiation of Trunking: Off Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Administrative Native VLAN tagging: enabled Operational Native VLAN tagging: disabled Voice VLAN: 281 (VoIP) Administrative private-vlan host-association: none Administrative private-vlan mapping: none Operational private-vlan: none Trunking VLANs Enabled: ALL Pruning VLANs Enabled: 2-1001 Capture Mode Disabled Capture VLANs Allowed: ALL Unknown unicast blocked: disabled Unknown multicast blocked: disabled   Thanks.   Greg   ... View more

I just installed a new 6800x with 3 external FEX 6800i and they're currently in burn-in status nothing attached to them. The sho process output is:   CPU utilization for five seconds: 30%/0%; one minute: 32%; five minutes: 32%  PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process  108    60137720  20519094       2930 29.03% 30.05% 30.11%   0 slcp process     Is this normal for the 6800X?   More Output: CORSHE1-LAMR-SW1-G1E#sho processes cpu history     2222233333222223333333333333332222233333333333333333333333     5555599999999998888833333222228888833333111110000000000111 100  90  80  70  60  50  40      *****     *****  30 **********************************************************  20 **********************************************************  10 **********************************************************    0....5....1....1....2....2....3....3....4....4....5....5....              0    5    0    5    0    5    0    5    0    5                CPU% per second (last 60 seconds)     3343443443333343333434333443343433443433334443334333344434     9856008119889738778459988119909277148178991118983699703080 100  90  80  70  60  50   *                  *  40 **********************************************************  30 ##########################################################  20 ##########################################################  10 ##########################################################    0....5....1....1....2....2....3....3....4....4....5....5....              0    5    0    5    0    5    0    5    0    5                CPU% per minute (last 60 minutes)               * = maximum CPU%   # = average CPU%                                                 1     545555555555555555555595665556556565556575660     391001464312792501332997528892991829988918110 100                       *                     *  90                       *                     *  80                       *                     *  70                       * *             * *   *  60        *    ** *     ************************  50 *********************************************  40 ****#########################################  30 #############################################  20 #############################################  10 #############################################    0....5....1....1....2....2....3....3....4....4....5....5....6....6....7.              0    5    0    5    0    5    0    5    0    5    0    5    0                    CPU% per hour (last 72 hours)                   * = maximum CPU%   # = average CPU% ... View more

I am trying to configure static route redistribution on Nexus 5K  using prefix list. I want to redistribute the 0.0.0.0/0 route into EIGRP and well and a host route. Is there an example someone can point me to. ... View more

I'm getting this error message when tryingto configure a port as a trunk: Command rejected: Conflict with port based features The interface I am trying to configure is 6/24 it had been defaulted out and the configuration is blank. When I try and make it a trunk port I get the above error. My other ports hare configured as below: interface GigabitEthernet6/23 description Dynamic_Auth_Port switchport switchport mode access switchport voice vlan 281 authentication event fail action authorize vlan 801 authentication event no-response action authorize vlan 801 authentication host-mode multi-domain authentication port-control auto authentication periodic authentication timer reauthenticate server authentication violation replace mab no snmp trap link-status dot1x pae authenticator dot1x timeout quiet-period 10 dot1x timeout tx-period 15 dot1x timeout supp-timeout 31 dot1x max-req 3 storm-control action shutdown storm-control action trap spanning-tree portfast edge end ... View more

I currently work in hospitality and I am always getting request for dedicated bandwidth. I know there is a product on the market called Cymphonix that says it does bandwidth manangement but I have heard not very successful. I know I can do this with QoS but often time that's too diffucult to troubleshoot and manage for front line support. Does Ciso have a appliance that does this. Scenario: Customer calls in and to an hotel wanting to rent out an meeting room for a video production. The customer need 5 Mbps guaranteed. The hotel has a 75 Mbps metrope circuit and has no problem with that customer requesting the dedicated 5 Mbps. How/What tools or appliances does Cisco have that would loow mw to slice up that 75Mbps circuit on the fly and allocate the 5 Mbps. I know that QoS can give me the ability to slice it up but once again that solution is a bot mor ecompicated. Thanks, Gregory Jackson ... View more

I was doing some speedtest the other day on the Ironport with caching enabled. One of the things we noticed that a .js file was not be cached. the basic question is will the ironport cache a static".js" file? If so is this feature code dependent and if so what code should I be using? Thanks, ~g ... View more