Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Kishore Chennupati
Stats
Member since
02-17-2011
814
Posts
339
Helpful
92
Solutions
Created by
Kishore Chennupati
in VPN and AnyConnect
in VPN and AnyConnect
05-26-2016
10:54 PM
05-26-2016
10:54 PM
Thanks a lot for your reply Javier.
- Have the command same-security permit intra-interface disabled
cant do this as the VPN device is one-arm.
- Use a VPN filter in the group-policy allowing the connection to some networks only
Will this stop the remote clients from talking to each other?
- Disable the command sysopt connection permit-vpn
I am assuming this relates to the point above
... View more
Created by
Kishore Chennupati
in VPN and AnyConnect
in VPN and AnyConnect
05-10-2016
06:21 AM
05-10-2016
06:21 AM
Hello vpn experts,
How can we block the remote access vpn users from talking to each other on a Cisco 5516-X ASA appliance running 9.1 image.Lets say the remote pool is in the subnet 192.168.1.0/24. Want to make sure they only talk to the Head Office but not each other. Also, wanting to know if this is a common deployment(best practice). Split tunneling not enabled.
Any help will be appreciated
Thanks
... View more
Labels:
07-16-2014
04:13 PM
Thanks a lot Joe. Will try this and get back to you Regards, Kishore
... View more
Created by
Kishore Chennupati
in Network Management
in Network Management
07-15-2014
09:39 PM
07-15-2014
09:39 PM
Hi experts, I have set up a small script to monitor BGP peering and to failover the HSRP based on the syslog etc. What I noticed is that the event gets triggered but it doesn't make the necessary changes. What I want is to change the HSRP priority upon a BGP peering failure. Below is the script. Can someone please help whats missing here. I have this script on a 3800 series router Cisco IOS Software, 3800 Software (C3845-ADVIPSERVICESK9-M), Version 12.4(25b), RELEASE SOFTWARE (fc1) System image file is "flash:c3845-advipservicesk9-mz.124-25b.bin" event manager applet eBGP-DOWN event syslog pattern "%BGP-5-ADJCHANGE: neighbor 192.168.1.1 Down Peer closed the session" action 1.0 syslog priority critical msg "EEM reconfiguring router for HSRP priority of 90 as BGP neighbour is down" action 2.0 cli command "enable" action 3.0 cli command "config t" action 4.0 cli command "interface gi0/0" action 5.0 cli command "standby 1 priority 90" event manager applet eBGP-UP event syslog pattern "%BGP-5-ADJCHANGE: neighbor 192.168.1.1 Up" action 1.0 syslog priority critical msg "EEM reconfiguring router for HSRP priority of 140 as BGP neighbour is up" action 2.0 cli command "enable" action 3.0 cli command "config t" action 4.0 cli command "interface gi0/0" action 5.0 cli command "standby 1 priority 140" event manager applet eBGP-MANUAL-DOWN event syslog pattern "%BGP-5-ADJCHANGE: neighbor 192.168.1.1 Down Admin. shutdown" action 1.0 syslog priority critical msg "EEM reconfiguring router for HSRP priority of 90 as BGP neighbour is down" action 2.0 cli command "enable" action 3.0 cli command "config t" action 4.0 cli command "interface gi0/0" action 5.0 cli command "standby 1 priority 90" ! end router#sh log | i BGP Jul 16 07:54:29.978: %BGP-5-ADJCHANGE: neighbor 192.168.1.1 Down Admin. shutdown Jul 16 07:54:29.978: %HA_EM-2-LOG: eBGP-MANUAL-DOWN: EEM reconfiguring router for HSRP priority of 90 as BGP neighbour is down Jul 16 10:54:10.988: %BGP-5-ADJCHANGE: neighbor 192.168.1.1 Up Jul 16 10:54:10.992: %HA_EM-2-LOG: eBGP-UP: EEM reconfiguring router for HSRP priority of 140 as BGP neighbour is up
... View more
Labels:
03-07-2013
02:10 AM
Peter, As usual a brilliant explanation from an expert 5 stars to you
... View more
03-07-2013
02:04 AM
I dont know if this is the right forum but hey tomorrow is the last day of Cisco Live in Melbourne. I am there and it would be wonderful to catch up if anyone of you is bound to be there. Please PM me and we can catch up. I had the honor and opportunity to meet Leo Laohoo. He is such a pleasure to talk to. Totally switched on yet so funny as we all know him . Looking forward to meeting more you nice pps out there.
... View more
Labels:
03-07-2013
02:01 AM
I know this is not the right forum but hey tomorrow is the last day of Cisco Live in Melbourne. I am there and it would be wonderful to catch up if anyone of you is bound to be there. Please PM me and we can catch up.
... View more
Labels:
Created by
Kishore Chennupati
in Routing
in Routing
03-07-2013
01:47 AM
03-07-2013
01:47 AM
Hi Yashwant, 1. Buy the cisco press book or download a free pdf copy from the internet. search for it and you will find heaps of sources. 2. Do heaps of labs on GNS3 3. come and visit CSC forums regulalry and post your questions etc. That should be it All the best.
... View more
Created by
Kishore Chennupati
in Routing
in Routing
03-07-2013
01:44 AM
03-07-2013
01:44 AM
Hi, As julio suggested use the ip address and you can configure time based ACL's. Below is a cisco link for it http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml#timebasedtimerange You can also look at this nice blog. http://ardenpackeer.com/tutorials/security/tutorial-time-based-acls/ Regards, Kishore
... View more
02-04-2013
04:18 AM
Hi shijo Shaping is allowed only outbound. You need to use policing on the BO router. Or you can use shaping on the HO router. This is preferred as this will save the bandwidth across the link as well. Shaping is better as it s not aggresive n doesnt drop traffic thereby avoiding tcp retransmits Regards
... View more
Created by
Kishore Chennupati
in Routing
in Routing
02-04-2013
02:52 AM
02-04-2013
02:52 AM
Hi Guiseppe, Thanks heaps for the reply. Hope you are well. So based on my scenario above(Reply to Peter's post) , what could be the recommended solution? I dont have any loopbacks etc. That was just for a simple example. The real example is what I posted in reply to Peter's post. Thanks in advance :-) Regards, Kishore
... View more
Created by
Kishore Chennupati
in Routing
in Routing
02-04-2013
02:38 AM
02-04-2013
02:38 AM
Hi Peter, Thanks for you reply. Appreciate your input anyday. I have just given a simple example here. But below is my actual scenario. So lets say the network is something like this. The ospf area is say 0. BGP OSPF OSPF OSPF BGP R0--------R1-----------R2--------R3---------R4---------R5 On R1,the routes from BGP get redistributed into OSPF using a type E1 and metric 30. The same thing happens on R4 but with a metric of 10 for the same BGP routes. Therefore R2 prefers the route via R3 as it has a lower cost. However, I want to change that i.e I want R2 to go via R1 without changing the metrics on R1 or R4. Is this possible. How can i achieve this if its doable? Regards, Kishore
... View more
05-26-2016
Thanks a lot for your reply Javier. - Have the command same-security
permit intra-interface disabled...
05-10-2016
Hello vpn experts, How can we block the remote access vpn users from
talking to each other on a Cisc...
07-15-2014
Hi experts,I have set up a small script to monitor BGP peering and to
failover the HSRP based on the...
03-07-2013
I dont know if this is the right forum but hey tomorrow is the last day
of Cisco Live in Melbourne. ...
03-07-2013
I know this is not the right forum but hey tomorrow is the last day of
Cisco Live in Melbourne. I am...
03-07-2013
Hi Yashwant,1. Buy the cisco press book or download a free pdf copy from
the internet. search for it...
Created by
Kishore Chennupati
in Routing
03-07-2013
03-07-2013
Hi,As julio suggested use the ip address and you can configure time
based ACL's. Below is a cisco li...
02-04-2013
Hi shijoShaping is allowed only outbound. You need to use policing on
the BO router. Or you can use ...
02-04-2013
Hi Guiseppe,Thanks heaps for the reply. Hope you are well. So based on
my scenario above(Reply to Pe...
Public Statistics
| Date Registered | 02-17-2011 04:10 PM |
| Date Last Visited | 08-18-2017 06:47 PM |
| Total Messages Posted | 814 |
| Total Helpful Votes Received | 339 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 3 | |
| 5 | |
| 5 | |
| 5 |
.png "Arumugam Muthaiah"){kind=avatar}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 10 |
