Can anyone confirm if GLC-TE is supported on C9500-48YAC switch?
I got this from TMG Matrix and it shows supported but would like to confirm if anyone is using in their environment.
TIA
Hitesh
... View more
Hello,
Synchronization is disabled by default AFAIK. You can't advertise route in BGP unless you have in your RIB, that is the golden rule of thumb.
HTH
Hitesh
... View more
hi dude
it should be set to untagged when there is end device connected to it with respective VLAN set.
and PVID should be checked as well.
refer the below link
https://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=67844b99e2da4a7f88db0c588197487d_Creating_VLANs_on_Cisco_Managed_Switches.xml
Thanks
Hitesh
... View more
Hi Atif,
I meant to say that GVRP might be enabled on any other non cisco switches, Cisco doesn't recognize these frames and prone to be looping around the network.
I am just pointing that mac address that is appearing in logs belongs to DELL and may be you might have a dell switch in your network.
If above is true, just check the non cisco switches that they have GVRP disabled.
Thanks
Hitesh
... View more
Hi there,
It seems, its down to the tunnel protection command under tunnel interface
IKE Profile Based Tunnel Selection
The IKE Profile Based Tunnel Selection feature uses the Internet Key Exchange (IKE) or Internet Key Exchange version 2 (IKEv2) profile to select a tunnel interface for an IPsec session. Use keywords isakmp-profile or ikev2-profile keyword in the tunnel protection command to specify an IKE profile or IKEv2 profile respectively.
o associate a tunnel interface with an IP Security (IPsec) profile, use the tunnel protection command in interface configuration mode. To disassociate a tunnel with an IPsec profile, use the no form of this command.
tunnel protection ipsec profile name [shared | { isakmp-profile | ikev2-profile } name ]
Please try adding ikev2-profile with tunnel protection and check.
Also check your IOS version should be greater 15.2 i assume.
HTH
Hitesh
... View more
Удалить этот маршрут, поскольку он не нужен
no ip route 192.168.16.0 255.255.252.0 yyy.yyy.yyy.yyy
Если это не решит проблему, измените свой ACL NAT, чтобы запретить трафик VPN, используя расширенный ACL
ip access-list extended NAT_ACL deny ip 192.168.0.0 0.0.1.255 192.168.16.0 0.0.3.255 permit ip 192.168.0.0 0.0.1.255 any
ip nat inside source list NAT_ACL interface fastethernet8 overload
HTH Hitesh
... View more