Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About shijomon scaria
Stats
Member since
10-30-2006
160
Posts
14
Helpful
2
Solutions
08-08-2016
11:34 PM
Hi Aditya,
Thanks for the reply.
But DDNS wont be the correct solution. First of all it is necessary that the link IP will be mapped to the internal server, it could be an IP form the pool provided by ISP. And my question is about providing high availability for mapped web server on internet over two links.
Regards,
Shijo.
... View more
08-08-2016
11:30 PM
Dear Ahmed,
Thanks for the reply.
As you know we would prefer secondary link from a different ISP than the primary ISP for obvious reasons.
Regards,
Shijomon Scaria.
... View more
08-07-2016
01:16 AM
Dear All,
I have a web server which is mapped with public IP and is available over internet, works fine too. My query is as follows.
If the internet link fails the service won't be accessible over internet. If I have a secondary link, I can change the mapping to the secondary link and with necessary DNS updates the web service will be back online on internet. But there would be a considerable amount of time lag to do this activity. Is there a way to avoid it, that is if the primary link fails the mapping should automatically shifted to the secondary one and DNS also should get updated automatically ??
Thanks in advance.
Warm Regards,
Shijomon Scaria.
... View more
Labels:
08-12-2015
04:51 AM
Hi, Do you have an ACL configured to allow traffic from outside to inside on the required ports, applied on outside interface in 'in' direction ?? Regards, Shijo.
... View more
08-11-2015
06:07 AM
Hi, It should work, I have the same scenario. Please share your configuration. Regards, Shijo.
... View more
Created by
shijomon scaria
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
08-11-2015
12:21 AM
08-11-2015
12:21 AM
Hi George, I think only the centrally switched traffic will show as the traffic between AP and WLC the rest locally switched traffic will show exactly form host to host. Correct me if I am wrong. Regards, Shijo.
... View more
08-11-2015
12:14 AM
Hi, OK, so NAT Loop back is your option. Do the below. static (inside,inside) 9.9.9.9 10.0.0.1 netmask 255.255.255.0 This will make the public IP available in LAN also. I assume that there must be 'static (inside,outside)' statement and an ACL permitting traffic on the public IP on required ports from outside. Rate if you find this helpful Regards, Shijo.
... View more
08-10-2015
12:19 AM
Hi, Below is what I understand, correct me if I am wrong. You have a server with private IP 10.0.0.1 which is published to internet with ip 9.9.9.9 You want to access the services from the published server using public IP from IP 10.0.0.50 and has internet access through a proxy server. Question. - Are these IPs 10.0.0.1 and 10.0.0.50 shares the same internet link ? Or the proxy server has a different internet link ?? Regards, Shijo.
... View more
Created by
shijomon scaria
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
08-09-2015
11:20 PM
08-09-2015
11:20 PM
Hi George, Thanks for the inputs. What about putting a cap for traffic from WLC IP to AP IP on port UDP 5247 ? Does it make any sense ? As the other profiles are local switched it should not match this entry.. Regards, Shijo.
... View more
Created by
shijomon scaria
in Other Security Subjects
in Other Security Subjects
08-09-2015
07:24 AM
08-09-2015
07:24 AM
Hi, http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_macacls.pdf Regards, Shijo
... View more
Created by
shijomon scaria
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
08-09-2015
07:08 AM
08-09-2015
07:08 AM
Hi George, Thanks for the reply. Yes, guest traffic... Regards, Shijo.
... View more
Created by
shijomon scaria
in Other Security Subjects
in Other Security Subjects
08-09-2015
06:40 AM
08-09-2015
06:40 AM
Hi, And the other option is MAC ACLS Regards, Shijo.
... View more
Created by
shijomon scaria
in Other Security Subjects
in Other Security Subjects
08-09-2015
06:29 AM
08-09-2015
06:29 AM
Hi, Instead of blocking that particular mac, in port security we are adding trusted macs to ports using different methods, and sets the rule if the conditions violates. Example. SWITCH(config)# int Gi0/1 SWITCH(config-if)#switchport port-security SWITCH(config-if)#switchport port-security mac-address 0000.aaaa.bbbb SWITCH(config-if)#switchport port-security violation shutdown Refer below document. http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/port_sec.pdf Regards, Shijo.
... View more
Created by
shijomon scaria
in Other Security Subjects
in Other Security Subjects
08-09-2015
06:17 AM
08-09-2015
06:17 AM
Hi, Port security can be an option for you, but the effort varies according to the size of your network. Regards, Shijo.
... View more
08-08-2016
Hi Aditya, Thanks for the reply. But DDNS wont be the correct solution.
First of all it is necessary...
08-08-2016
Dear Ahmed, Thanks for the reply. As you know we would prefer secondary
link from a different ISP th...
08-07-2016
Dear All, I have a web server which is mapped with public IP and is
available over internet, works f...
08-12-2015
Hi, Do you have an ACL configured to allow traffic from outside to
inside on the required ports, app...
08-11-2015
Hi,It should work, I have the same scenario. Please share your
configuration.Regards,Shijo.
Created by
shijomon scaria
in Other Wireless - Mobility Subjects
08-11-2015
08-11-2015
Hi George,I think only the centrally switched traffic will show as the
traffic between AP and WLC th...
08-11-2015
Hi,OK, so NAT Loop back is your option.Do the below.static
(inside,inside) 9.9.9.9 10.0.0.1 netmask ...
08-10-2015
Hi, Below is what I understand, correct me if I am wrong.You have a
server with private IP 10.0.0.1 ...
Created by
shijomon scaria
in Other Wireless - Mobility Subjects
08-09-2015
08-09-2015
Hi George, Thanks for the inputs. What about putting a cap for traffic
from WLC IP to AP IP on port ...
08-09-2015
Hi,
http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/gui...
Created by
shijomon scaria
in Other Wireless - Mobility Subjects
08-09-2015
08-09-2015
Hi George, Thanks for the reply.Yes, guest traffic... Regards,Shijo.
08-09-2015
Hi,Instead of blocking that particular mac, in port security we are
adding trusted macs to ports usi...
Public Statistics
| Date Registered | 10-30-2006 08:42 PM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 160 |
| Total Helpful Votes Received | 14 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 |
.jpg "Hall of Fame Community Legend"){kind=icon}
Helpful Votes From
