Hi Richard, I observing in my environment that we are learning route 10.10.10.0/24 on RR from router 1 (Router id 192.168.10.1 ) and router 2 (router id 192.168.10.2 ) with same AS path.    RR is propagating route received from router 1 due to lowest router id but if if due to some reason if router 1 is not receiving (from neighbor) route and sending to RR  , the RR is refreshing the route in RR client i.e route from Router 2. But when router 1 again learn the roue from neighbor and advertised to RR , RR send Router 1 route to RR client.     My question is if route learning from Router 2 in RR routing table for more time period then why RR send R1 router route to RR client      ... View more

Thanks Richo, Do you have link or reference document to understand step by step config. I have gone through youtube video created by Anubhav swami, but that also did not give clear idea.   ... View more

Thanks for looking in my issue ..   Any idea how to configure FTD in HA in Azure or any reference link. ... View more

Thanks Jimholla, The referred link is for ASAv and we have FTD in Azure..what i understand that in HA agent supported on ASAv and not FTD. ... View more

That means we will face issue with APIC management only or for all other nodes like Spine and Leaf. I think VRF will be present on Leaf switches. ... View more

Thanks Rich, but Per my understanding APIC is VRF aware as we are using different VRF with Tenant. Also Overlay-1 Vrf is part of Infra Tenant which includes VTEP IP range and Managemet ip are in Management tenant VRF, then how they will overlap.     ... View more

Hi Chris,   Recently started learning ACI and per my understanding VTEP address falls under Infra/overlay-1 VRF and management address in management VRF and both should be maintaining different routing table and there should not be any issue while using same subnet IP.   Here also in netstat output VTEP pool IP use interface bond0.3967 in overlay-1 VRF and Management subnet use interface oobmgmt in mgmt VRF. Then why both VTEP pool and management subnet should be different?   Thanks, Surya     ... View more

Have you configured  GigabitEthernet0/1 interface recently. Please check whether there is really traffic on this interface because of this interface config there is asymmetric routing for VPN user subnet. You can check sh arp for verify whether there is any user connected through interface.  You can shut   GigabitEthernet0/1 interface (if there is no traffic or no one connected through this interfcae) and test the VPN connectivity, I believe it will work. ... View more

Hi Arvin,  Both 10.34.16.0/24 and 10.34.17.0/24 are part of same subnet 10.34.16.0/20 i.e 10.34.16.1 --10.34.31.254 and this should be learn from one direction only. With your configuration 10.34.16.0/20 is on directly connected interface GigabitEthernet0/1  and alway prefered. So when user with ip 10.34.17.1 tring to ping/connect 10.34.16.1 it is hitting a router and while reply is going via interface  GigabitEthernet0/1, although user 10.34.17.1 is rechable via GigabitEthernet0/0. I will suggest you to use separate subnets for VPN user other than subnet already used in network. Regards, Surya ... View more

As per diagram, you have configured/learning subnet 172.34.16.0/20 from inside on router whcih also include the ip range/subnet (172.34.17.0/20) which you have configured for VPN users. So traffic is coming on router but reply is not getting as router is learning VPN  User subnet from inside. Please enable ip accounting on router and capture ip accounting logs while internal network from VPN. Also share sh ip route output from router Regards, Surya ... View more

Hi slice, To give metric was in my mind but without metric eigrp redistribut directly and static route with interface metric on which it Shows in routing table. Do not understand if it is bug then why it redistributing one static route and not other while both are in routing table and allowed by Distribution list, also why only one route is place in topology table why other miss. ... View more