Thanks for your reply. yes that is where I too got confused. I have tried in in ASR and CSR which works fine but not sure about 4451 and none of the document gives proper direction as well     ... View more

Hello is there an active/standby state change in ASA while you disconnect the link ? are you running HSRP on MPLS routers ? Just take the show mac-address table address < MAC-router1) before and during the incident   regards Harish.   ... View more

Hello It looks like a MQC policy with police is a better choice for you rather than traditional rate limit. So that your application gets required bandwidth and at the same time,the excess traffic will be dropped   Harish. ... View more

Hello    Since you are going through SP MPLS, you have lesser control on outbound route selection..Your traffic will always go to the PE where you have connected. I believe the easiest way to do this with the coordination with Service provider as they have better control for the advertised routes    Harish. ... View more

Hello You have 2 design options in this case   1. Stack the switches and have one link to ASA-1 ( from stack member1) and another link to ASA2 ( from stack member2) 2.If switch doesn't support stacking, you can connect Switch-1 to ASA-1 and Switch-2 to ASA-2 and have a ether channel between the switches.   either of this design should survive single point of failure   Harish. ... View more

Hello Katerina This is pretty much expected result when you have one server send out more traffic. If you could change the load sharing method to src-dst-ip or src-dst-mac ( based on your traffic flow) you should be able to see better results   Hope this helps Harish. ... View more

Hello   Is it possible to extend the eigrp till your core switch ?.. Please check that with vendor and if that is possible, you will learn mpls-site routes through eigrp and you can also run eigrp over vpn and between core switch and vpn routers .. then all about manipulating  the metric ( increase the link delay from core switch to VPN router so that it will be least preferred)    regards Harish. ... View more

Hello There are couple of solution we can do here.. One is to run a protocol over the VPN and make the routing decision dynamic across both MPLS and VPN so that when an MPLS failure occurs , the site-2 will automatically remove the route towards your mPLS router and install the one with VPN router.. It really depends how is your setup and what kind of protocol you r running over MPLS..   Harish ... View more

  Sup 2T ... View more

Hello ,   In  Quad Sup scenario , if primary Sup of VSS master fails, the standby SUP in the same chassis will become active within sub seconds and no change in the links/topology expected   Hope this helps Harish.  ... View more

Hello   You need to have a VRF nat and VRF default route to accomplish this interface GigabitEthernet1/0/1.22 ip nat inside interface GigabitEthernet1/0/0 ip nat outside ip route vrf TEST 0.0.0.0 0.0.0.0 <XXXXX) global ip nat inside source list <acl to allow the private pool>  pool <pool to specify the public> vrf  TEST   regards Harish ... View more