Can you please share any documentation about this? Also, what about without SR? ... View more

Hi Aleksander, but what is it the max label stack depth on these machines? In particular do you have documentation about the ASR9k , CRS-X and the GSR12k? HOw many labels are supported in a stack (bottom to top) ?   Many thanks Alessio ... View more

As i heard, Stackwise Virtual is de facto replacing pretty well VSS-like systems. So this might not be a true cons.. @Toivo wrote: One con is the lack of VSS or VPC on the 9300 and 9400 Catalysts, so you need a L3 routed path from your closets to the core switches. Can't do multi-chassis LACP. Hoping this will get fixed sooner rather than later, but it's a pretty huge limitation right now.   ... View more

Pros is mainly hardware and possibility to develop customized solution if you are a customer big enough to Cisco. The cons are: - it is a new machine - The 9400 series still hasn't reached the best of its capabilities in terms of design and modules/blades available - The 9500 series are meant to be an aggregation layer device so no more than 2 unit x stack-wise virtual can be allocated - Operating systems still excessively unstable and unsecure although big steps ahead done Pros? Many and a wide variety too (from full SDA support to UAD) .. regardless what you are going to choose Cisco is investing much in this program and i believe that sooner or later this gear will be in your monitoring systems too. ... View more

Great question. My answer would because you can control every single bit of your communications and security events and because every single possibility with cloud can be realized with DC/Internal solutions. I know a billion people who believe that data going to the cloud "disappear" and no concern is required anymore and this is the reason why I am always inviting colleagues and customers to be prudent on their choices. Having said this, again I have nothing against clouds especially because all the last developments made this solution more and more interesting. Best, Alessio ... View more

I see your point but when you choose cloud you know that your data will be transferred to an external DC where "clever" services are available. Those clever and outsourced services are managed by people you have no control over and this is why I would like more people approaching clouds with more caution. Your Titanic example is not really fitting because the Titanic had its own crew and made its own mistake. Imagine if the Titanic was led by somebody that was not on the Titanic ... this is what cloud is today. Cloud solutions are amazing in their simplicity and flexibility because much of the brain power (man or machine) is outsourced. Lately, I heard that Cisco Meraki developed some sort of virtualization that let you keep control over your data, being this Cisco hearing some of these concerns and addressing them. So again, trade-off aside, I renew my question to all the ones who feel like replying! Thanks ... View more

I am totally with you and this is not the only case. I believe the question should be rephrased in terms of trust:   Why do people trust so much cloud solutions? It will be very nice to hear from all of you guys if you have an answer to that. To me, Meraki is an excellent product but should never be the only one to be considered as a solution. Sensitive data and control over what you produce should alwyas be on the back of our minds before taking a decision. ... View more

Hi Delta, people are just not familiar with this solution. You can still override everything but it is way harder to do it because you need to authenticate first.   VTPv3 is a good solution for the classic enterprise ans branch switching design but then again, is matter of personal choice other than architectural circumstances.   Take care, Alessio ... View more

I respectfully disagree. Platform is almost identical but price us not. On a small enterprise the 10%(and it is more) might seem irrelevant but on large customer environment scale that 10% will make a huge difference. Not only that. If unnecessary, why to pay even the 5% more? The cat3k are amazing platforms who represent already the past of Cisco. Cat9k is kicking in and Cisco has even more surprises for us to come. Hardware refresh is a periodic task which should never be missed and hence never oversized.    Hope this helps   ... View more

I was kidding too. I know vtp and it actually is not dangerous at all. What probably you are pointing out (I can't see your link right now) is the consequence of a vtp server version misconfiguration which overrides all the vtp domain with the wrong server info. This is a human mistake. Not a danger. Please accept my apologies if the joke wasn't clear enough. To be clear, before physically connecting a switch in a VTP domain you need : a) setting vtp to transparent mode b) setting it to client c) configuring domain, password and version If you do this nothing will happen to your layer 2 infrastructure. Take care Ale😏 ... View more

VTP Dangerous? Ok to telnet? Security overrated? What have you smoked? Nice comment on BPDU filtering. Can be destabilizing. ... View more