Hi all,   I am looking for a firewall which can do scheduled based filtering to certain traffic like Netflix at certain times of the day and things like controlled access to Youtube, and other stuff like that.   I was looking at Meraki which is fairly simple to configure and manage.   Do we have a similar options available on ASA side? And is it that easy to configure and manage? I have very limited hands on firewall and that too not in recent times.   Thanks. ... View more

Hi all,   I have to add new chassis (4507 R+E) to an existing 4506E chassis which is currently running in standalone mode. Since it is a core switch, I wanted to go with an approach that has minimum outages.   My idea was to do the following with the below sequence: 1. Backup of the current config of the standalone chassis. 2. Configure the new chassis with VSS with domain priority as 200. (Hold back on the reload.) 3. Configure the old chassis with VSS (keeping domain priority as 100 by default). 4. Reload both switches and patch the VSS and DA links while the switches are booting up.   Any comments or suggestions would be highly appreciated.    Thanks. ... View more

Hi all, I think this is not a first time someone would be thinking on this line - we have a client who has Internet services at their head office (HO) which all the branch offices (BO) access via the WAN (from telco). The Internet services at HO already has a backup Internet service at the same site but for further resiliency they are looking for having another backup service to be physically commissioned at one of the BO. Currently all the intra-site routing is static and they do BGP with the WAN (PE peers). For some reason all the sites are using the same AS (65000) when they peer with WAN PE (AS64900). I am assuming the Telco strips off the AS when it passes on the routes to the other side as the BGP router (CPE). Anyway, the main concern is around making the routing happen such a way that WAN routers at HO which in a normal circumstances will advertise default route to rest of the WAN sites and in an event there is Internet failure at HO, it will stop advertising the default route and in turn the WAN routers at the proposed BO (called APL) will start advertising the default route until the HO Internet is back again. I could achieve the required solution by using only one WAN router at HO and at APL. I have used unique AS for each site as that how I would imagine it should be. This was by using the following: 1. Using OSPF internally at sites, 2. Redistributing OSPF into BGP 3. Tweaking AD value of BGP peering from 20 to 150 for the (default route only) so WAN router at HO prefer OSPF over BGP (under normal circumstances) for the default route. 4. Redistributing OSPF to BGP so it advertises local subnets at HO and default route to WAN sites. 5. APL router learning default and other routes by BGP. 6. Redistributing BGP into OSPF 7. The core switch at APL learning default route as E2 and preferring over its floating static route pointing to the local Internet router. 8. Local routes at APL being redistributed into BGP which gets advertised back to rest WAN sites and HO. Everything works fine as long as there is only router on each end (ie HO and APL). The moment I introduce second WAN routers which are for WAN redundancy, the WAN routers at HO starts playing up with routing loops especially when I simulate HO Internet down.  I am attaching a drawing snap shot from my GNS lab which might explain more what I have mentioned above. I was looking at ideas of BGP conditional routing, BGP back door but none of them seemed to be fitting in the design solution that I am looking for. Any suggestions/questions will be appreciated.  Thanks. ... View more

Hi guys, Just wondering if anyone has seen this error message on 3850 model switches: %DATACORRUPTION-1-DATAINCONSISTENCY: strncpy_s: not enough space for src,  -PC= :54D15000+5363D0C -Traceback= 1#ecf76fc601e9eba5a3bff6c58fd16c99  :54D15000+281A484 :54D15000+284D10C :54D15000+5363D0C :54D15000+F4A434 :54D15000+F4724C :54D15000+4735FEC   The message only pops while the switch is rebooting. These are brand new switches from the box with only default configuration. The version they are running is 03.07.03E and the next one up is the 16 train which I am thinking of upgrading to. Thanks for the help in advance!! Regards, Mohit ... View more

Hi, We recently upgraded old cisco switches with the new 3850 as the old ones had reached EoL. In doing this, all went fine except there is one a small PABX which has analog phones plugged into it started having weird issues. Users started complaining about intermittent one way speech, sometimes phones having no dial tone, so on and so forth and rest of the times phones work just fine. This mini PABX has only one uplink which goes to the 3850 switch which then connected through various hops of switches to the main PABX where other phones like IP phones and DECT registers. We checked for logs on the switch but nothing showed up there which could indicate something.  We are seeing this issue only at places which has new 3850, the places which is still relying on the older switches (3750) are working fine. 3750 had 10/100 ports, so the old set up was running smoothly on auto speed. Initially we had the same auto set up on new 3850, and it was showing no alarms or complains on the port, however, since we saw this issue we tried to lock it to 100 M manual. Still no luck. So we changed the port setting to auto 10/100 only, still the same. Has anyone seen this issue? or if you have any suggestions to help troubleshoot this issue? The ios running on the 3850 is 3.2.3 SE. ... View more