Hi Luke, how was your upgrade ? Did you need to upgrade the firmware before the IOS or could you go from 15.2 to 15.5 with no problems? Best Alessio
... View more
Yeah, Between routers I did not have problems myself either. That is why I am surprised about the ospf keyword missing under the tunnel interface... Anyone heard anything from Cisco? I tried to contact them but still waiting for a reply. Thanks
... View more
at the moment this seems to be true for routers only. The ASA have apparent restrictions on this. If anyone ever configured OSPF over VTI then please post how. Best Alessio
... View more
HI Guys, i have the same problem and i could not find your links to the bug or to the technology any longer. I have an ASAv and a Cisco router and i set up an IPSec/IKEv2 tunnel between them that is up and stable. I need now to run OSPF over this VTI VPN and it is a nightmare. Do you have any working configuration sample? Could you share? Thanks!
... View more
Hi Aleksander,
but what is it the max label stack depth on these machines? In particular do you have documentation about the ASR9k , CRS-X and the GSR12k? HOw many labels are supported in a stack (bottom to top) ?
Many thanks
Alessio
... View more
As i heard, Stackwise Virtual is de facto replacing pretty well VSS-like systems. So this might not be a true cons..
@Toivo wrote:
One con is the lack of VSS or VPC on the 9300 and 9400 Catalysts, so you need a L3 routed path from your closets to the core switches. Can't do multi-chassis LACP. Hoping this will get fixed sooner rather than later, but it's a pretty huge limitation right now.
... View more
Pros is mainly hardware and possibility to develop customized solution if you are a customer big enough to Cisco. The cons are: - it is a new machine - The 9400 series still hasn't reached the best of its capabilities in terms of design and modules/blades available - The 9500 series are meant to be an aggregation layer device so no more than 2 unit x stack-wise virtual can be allocated - Operating systems still excessively unstable and unsecure although big steps ahead done Pros? Many and a wide variety too (from full SDA support to UAD) .. regardless what you are going to choose Cisco is investing much in this program and i believe that sooner or later this gear will be in your monitoring systems too.
... View more
Great question. My answer would because you can control every single bit of your communications and security events and because every single possibility with cloud can be realized with DC/Internal solutions. I know a billion people who believe that data going to the cloud "disappear" and no concern is required anymore and this is the reason why I am always inviting colleagues and customers to be prudent on their choices. Having said this, again I have nothing against clouds especially because all the last developments made this solution more and more interesting. Best, Alessio
... View more
I see your point but when you choose cloud you know that your data will be transferred to an external DC where "clever" services are available. Those clever and outsourced services are managed by people you have no control over and this is why I would like more people approaching clouds with more caution. Your Titanic example is not really fitting because the Titanic had its own crew and made its own mistake. Imagine if the Titanic was led by somebody that was not on the Titanic ... this is what cloud is today. Cloud solutions are amazing in their simplicity and flexibility because much of the brain power (man or machine) is outsourced. Lately, I heard that Cisco Meraki developed some sort of virtualization that let you keep control over your data, being this Cisco hearing some of these concerns and addressing them. So again, trade-off aside, I renew my question to all the ones who feel like replying! Thanks
... View more
I am totally with you and this is not the only case. I believe the question should be rephrased in terms of trust:
Why do people trust so much cloud solutions? It will be very nice to hear from all of you guys if you have an answer to that.
To me, Meraki is an excellent product but should never be the only one to be considered as a solution. Sensitive data and control over what you produce should alwyas be on the back of our minds before taking a decision.
... View more
I respectfully disagree with you guys. The ISR 4k has some important features in security that the 2900 could only dream of. As usual, everything depends on your design. The 4k could well fit your requirements in terms of security and can't only be considered as a router.
Best
... View more
Hi Delta,
people are just not familiar with this solution. You can still override everything but it is way harder to do it because you need to authenticate first.
VTPv3 is a good solution for the classic enterprise ans branch switching design but then again, is matter of personal choice other than architectural circumstances.
Take care,
Alessio
... View more
I respectfully disagree. Platform is almost identical but price us not. On a small enterprise the 10%(and it is more) might seem irrelevant but on large customer environment scale that 10% will make a huge difference. Not only that. If unnecessary, why to pay even the 5% more? The cat3k are amazing platforms who represent already the past of Cisco. Cat9k is kicking in and Cisco has even more surprises for us to come. Hardware refresh is a periodic task which should never be missed and hence never oversized.
Hope this helps
... View more
.jpg "Hall of Fame Expert"){kind=icon}
