About kishanpatel500

kishanpatel500 · 05-19-2020

Hi,I have a very specific requirement as so:When a object-group of Source IPs accesses Webserver_1, permit without NATWhen a object-group of Source IPs accesses Webserver_2, permit without NATWhen anyone else accesses Webserver_1, then permit without...

kishanpatel500 · 05-23-2019

I'm ordering new FPR4110s to replace me ASA5585x HA pair which is currently running 9.6(4)25. When ordering the FPR4110, i have the option of getting it with FXOS 2.2 (with ASA 9.8.2 image) or FXOS 2.0 (with ASA 9.6.2 image).I want to be able to cop...

kishanpatel500 · 11-07-2014

Hi,I'm using a policer within a class on an egress WAN interface of a remote site router.The policer guarantees a minimum of 1Mbps of interesting traffic using bandwidth 1024.The policer also remarks to default for any traffic exceeding this amount.D...

kishanpatel500 · 09-24-2014

I have the following policy applied on a 1941:policy-map QOS_OUT class HTTPS bandwidth 1024 police 1024000 192000 384000 conform-action set-dscp-transmit af31 exceed-action set-dscp-transmit default violate-action set-dscp-transmit 0 fair-queue cl...

kishanpatel500 · 10-28-2022

I get the same issue. Packet capture also proves that the proxy is sending back a 407 with Proxy-Authenticate using NTLM, but Anyconnect keeps trying BASIC auth.Tried on:4.10.010754.10.040654.10.06079I'll raise a case and see what TAC say.

kishanpatel500 · 05-24-2019

Sorry i meant, should i then upgrade from the default 2.2 to 2.6(1)

kishanpatel500 · 11-07-2014

The remarking will occur on egress however, what i mean is that will the remarked packet add to the queue-depth of the HTTPS queue or the class-default queue.

kishanpatel500 · 09-25-2014

The problem i'm seeing with FQ is that with a queue-limit of 256 packets, the per-flow Q size is 64 packets.This is not enough for, lets say, a simple TCP file upload as packets start to tali-drop pretty much immediately.I could increase this but i'm...

kishanpatel500 · 09-25-2014

Thanks for your help Joseph,So you would recommend getting rid of WRED or FQ for class-default? If i should get rid of FQ, do i need to amend my max thresholds for WRED?

Member Since	‎09-24-2014 02:02 AM
Date Last Visited	‎02-13-2024 05:26 AM
Posts	10

User Statistics

User Activity

Asymmetric NAT - Twice NAT

ASA 5585x to FPR4110 (ASA only) migration upgrade path

[QoS] Does using set-dscp-transmit in a policer re-queue the packet?

output drops using cbwfq - amending queue-limit on 1941

Re: AnyConnect 4.10.04065 broken browser proxy auth

Re: ASA 5585x to FPR4110 (ASA only) migration upgrade path

The remarking will occur on

The problem i'm seeing with

Thanks for your help Joseph