About tobyarnett

tobyarnett · 02-11-2013

I am looking for a script that I can use to help simplify my validation steps when I am doing some work on my devices. I typcially have anywhere from 2 - 10 IP addresses that I need to validate against (typically less than 5 though). My common steps ...

tobyarnett · 08-26-2020

I know this is a very old post but to those that may still come across this topic I wanted to add some insight to the purpose of an ACL of this type. The top lines while they would be covered in the "deny IP any any" statement are placed at the top s...

tobyarnett · 01-28-2019

@Spork Schivago The router configs look good. You have the right encapsulation on the trunk interface - the vlan's are up and trunking. I have not worked on this router specifically, but on the 3850 when working on the WLC you have to issue the wir...

tobyarnett · 01-27-2019

@JPH85 The 224.0.0.1 IP is the all-hosts group multicast. So something is trying to start a multicast message. A few questions: Do you have a VRF and if so is the interface coming in on a VRF or global table?Is that IP a public IP for your DMVPN ...

tobyarnett · 01-27-2019

@Iain, This sounds like an interesting setup, but your provided solution does not sound good at all. There are ways you can work that in, but it is not a good idea. Your router is a router and not a firewall. This setup could best be done on a fire...

tobyarnett · 01-27-2019

I am sure there is a way to architect it like that. It just requires more complex configurations. The static NAT can be changed to do a NAT pool so that you are mapping SubnetA/24 to the SubnetB/24 as a dynamic 1-to-1. To have this done in both direc...

Member Since	‎05-09-2006 08:22 PM
Date Last Visited	‎08-28-2020 06:54 AM
Posts	87
Total Helpful Votes Received	81

User Statistics

User Activity

Validation TcL Script (Ping/Trace)

Re: ACL Best Practice - On the Internet interface

Re: Cannot ping VLAN IP address from built-in AP

Re: IGMP Packet without Input Interface

Re: Advice on bridge with NAT, plus locking down bridge to single IP address

Re: Dynamic Soruce And Destination NAT at the same time.