Hi All,    As subject mentioned above, i want to know is there any tool can lead me filter the product coverage type, based on country,   I find out some country not having 24x7    thanks   Noel ... View more

Hi All, I having issue on remote access using SSH. I prep the C3560 loaded in ios 16.6.4, all necessary configuration was done   When i sh ip ssh that is showing SSH V2.0 is enabled.   Problem is when i try to sh ssh, it mentioned no SSHv2 server connection running. So this switch neither can remote to other machines, nor any machine cannot remote into it. any clue? thanks Noel ... View more

Hi All   I would like to upgrade the C4500X pair config in VSS mode to latest ios.   Refer to the release note i should also update the ROMMON to support latest ios.   May i know what is the standard way doing the updating of ROMMON and IOS on the C4500X VSS pair.   is it correct we start at updating the passive unit C4500X rommon, then reboot it, manually set it to primary unit, then updating another C4500X unit.   Same process apply to ios upgrade, do the passive unit, reboot, promote it to active, then do another unit   Am i correct?   Noel ... View more

Hi all, Is Cisco ASA PBR support the traffic route thru IPsec S2S VPN tunnel interface? I am planning traffic that include in the interesting traffic all route via one physical interface (as this interface use for IPSec VPN), the rest route via another physical interface Is it possible? Thanks Noel ... View more

Hi all,   Is cisco router can support juniper proprietary Next Hop Tunnel Binding (nhtb) vpn setup?   Basically is juniper multipoint Hub-Spoke VPN setup  . Anyone know is it feasible for cisco router device to support this?   Cisco router would be spoke, hub is juniper SRX   Thanks   Noel ... View more

Hi All,   Seeking some logic as i going to configure this scenario soon   scenario: User connecting using AnyConnect client to ASA-HQ outside inteface So it will grant a DHCP IP pool   My question How do i able to access the ASA-HQ ASDM, say it enable the ASDM access on inside interface. The VPN IP range is inter-routable between ASA-HQ   Eventually, i facing this problem actually. Maybe i can get conceptual ideas here   Thank   Noel ... View more

Hi All,   My question is it possible a switch carry multiple VLAN uplink to the router doing in bridging mode?   I not allow to have interface BVI with ip address? Is it the right answer for it is doing it in concurrent routing and bridging and integrated routing and bridging   Thanks   Noel ... View more

Hi all, I have a Lync edge AV, which i need to do Port Redirection (Forwarding) with Static NAT.  There's certain port need to be explicitly specify on the NAT rule 01. UDP 3478 02. TCP 443 03. TCP/UDP 50000-59999 My question is how do i map the service-port group on the real and mapped port section? It seems only can do per port number at one time. Thank you Noel ... View more

Hi All, I would like know the correct way to configure access polices that can block HTTPS URL. This is a stand alone ASA unit where it is not joining any FMC. But i don't see SSL policies on the FTD, wonder how stand alone FTD can decrypt, re-sign on HTTPS traffic. The FTD code is 6.2 Thanks Noel ... View more

Hi All I am using C3850 catalyst switch load with IOS XE 3.7 / 15.2 doing switching and  built in wireless controller feature For device management, Cisco Secure ACS doing the centralize authentication control  and user identity source is from Microsoft Active Directory server. The switch is prep with TACACS, everything is doing fine (SSH remote access, Wireless LAN controller login),but i having the problem WLC user role Lobby-Admin can't login. Question: Over ACS, What shell profile, command set and authorization rules need to be configure? Over the switch, what need to be configure over ip http aaa authentication and aaa command? Attached the config file extract from the switch. topology setup 01. C3850 WITH IOS-XE 3.7 02. Cisco secure ACS 5.8 03. Microsoft Windows Server 2008 R2 standard edition Thanks Noel ... View more