Hi everyone, I'm not familiar with VPN and I am trying to setup up the first production VPN through NAT. After all configuration following some templates for VTI the tunnel is not comming up. Connectivity is assured and I believe the log shows that. Attached is the topology and the resulting logs. Configuration setup below. All public IP addresses first 2 octets have been replaced by 99.99 Thanks all in advance Mario ===== RE router configuration ====== crypto isakmp policy 1 encr 3des authentication pre-share group 2 lifetime 3600 crypto isakmp key key address 0.0.0.0        crypto isakmp keepalive 15 ! crypto ipsec transform-set tset esp-3des esp-sha-hmac ! crypto ipsec profile ipsecprofile set transform-set tset ! interface Loopback3 ip address 99.99.61.243 255.255.255.255 ! interface Tunnel0 ip address 1.1.1.1 255.255.255.0 shutdown tunnel source Loopback3 tunnel mode ipsec ipv4 tunnel destination 99.99.58.1 tunnel protection ipsec profile ipsecprofile ===== RW router configuration ====== crypto isakmp policy 1 encr 3des authentication pre-share group 2 lifetime 3600 crypto isakmp key key address 0.0.0.0 0.0.0.0 crypto isakmp keepalive 15 ! ! crypto ipsec transform-set tset esp-3des esp-sha-hmac ! crypto ipsec profile ipsecprofile set transform-set tset interface Loopback0 ip address 99.99.60.240 255.255.255.255 interface Tunnel0 ip address 1.1.1.2 255.255.255.0 shutdown tunnel source GigabitEthernet0/1.14 tunnel mode ipsec ipv4 tunnel destination 99.99.61.243 tunnel protection ipsec profile ipsecprofile ! interface GigabitEthernet0/1.14 encapsulation dot1Q 14 ip address 10.176.0.34 255.255.255.240 ip nat outside ip virtual-reassembly in ! ... View more

Hello everyone, Our ASR1006 used only for internet access (3BGP sessions) suddenly started filling the logs with the messages below every 5/6 seconds. .Oct  1 07:35:12 GMT+1: %IOSXE-3-PLATFORM: F0: out of memory [5940] .Oct  1 07:35:18 GMT+1: %IOSXE-3-PLATFORM: F0: out of memory [5940] .Oct  1 07:35:24 GMT+1: %IOSXE-3-PLATFORM: F0: out of memory [5940] .Oct  1 07:35:30 GMT+1: %IOSXE-3-PLATFORM: F0: out of memory [5940] .Oct  1 07:35:35 GMT+1: %IOSXE-3-PLATFORM: F0: out of memory [5940] .Oct  1 07:35:42 GMT+1: %IOSXE-3-PLATFORM: F0: out of memory [5940] .Oct  1 07:35:48 GMT+1: %IOSXE-3-PLATFORM: F0: out of memory [5940] Anyone ever seen this? Any suggestions on how to diagnose it? Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-ADVIPSERVICESK9-M), Version 15.2(1)S2, RELEASE SOFTWARE (fc1) cisco ASR1006 (RP2) processor with 4259248K/6147K bytes of memory. Processor board ID FOX1509GK4U 5 Gigabit Ethernet interfaces 2 Packet over SONET interfaces 32768K bytes of non-volatile configuration memory. 8388608K bytes of physical memory. 1826815K bytes of eUSB flash at bootflash:. 78085207K bytes of SATA hard disk at harddisk:. Mario ... View more

hi all, we are using ACS version 5.3.0.40, NAME: "CSACS-1121-K9 chassis", DESCR: "CSACS-1121-K9. we have diferents access groups of users, and we want that one of them can acess the devices in a location and can use all command without privilege mode (all that are befor enable) at this way: Policy Elements > Authorization and Permissions  >  Device Administration >  Command Sets: we created a command set to permit: telne* ssh* show* regards Mauro Silva ... View more

hi all, I am trying to configure port-channel from one switch to two switchs, and only one interface of each switchs make part of the portchannel Cisco IOS Software, ME380x Software (ME380x-UNIVERSALK9-M), Version 12.2(52)EY4, RELEASE SOFTWARE (fc1) baixo(config-if) ! interface Port-channel12 port-type nni switchport trunk allowed vlan 610,611 switchport mode trunk end ! interface GigabitEthernet0/3 port-type nni switchport trunk allowed vlan 610,611 switchport mode trunk channel-group 12 mode on end ! interface GigabitEthernet0/4 port-type nni switchport trunk allowed vlan 610,611 switchport mode trunk channel-group 12 mode on end :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 12.2(55)SE5, RELEASE SOFTWARE (fc1) SWBAIXO(config)# ! interface Port-channel12 switchport trunk encapsulation dot1q switchport trunk allowed vlan 610,611 switchport mode trunk ! ! interface GigabitEthernet1/1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 610,611 switchport mode trunk channel-group 12 mode on :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Cisco IOS Software, ME380x Software (ME380x-UNIVERSALK9-M), Version 15.3(1)S, RELEASE SOFTWARE (fc1) cima(config-if)# ! interface Port-channel12 switchport trunk allowed vlan 610,611 switchport mode trunk ! ! interface GigabitEthernet0/1 switchport trunk allowed vlan 610,611 switchport mode trunk channel-group 12 mode on ! baixo(config)#int g0/3 baixo(config-if)#no shut *May  7 14:37:41.534: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Gi0/3, putting Gi0/3 in err-disable state *May  7 14:37:43.469: %LINK-3-UPDOWN: Interface GigabitEthernet0/3, changed state to down baixo(config-if)# baixo(config-if)# baixo(config-if)# baixo(config-if)#int g0/4 baixo(config-if)#no shut baixo(config-if)# *May  7 14:39:02.717: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Gi0/4, putting Gi0/4 in err-disable state *May  7 14:39:04.660: %LINK-3-UPDOWN: Interface GigabitEthernet0/4, changed state to down baixo(config-if)# ################ then I put 2 switchs connected (a normal portchannel each with 2 ports) but the same error happened########### Cisco IOS Software, ME380x Software (ME380x-UNIVERSALK9-M), Version 15.3(1)S, RELEASE SOFTWARE (fc1) *May  7 14:53:12.571: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Gi0/3, putting Gi0/3 in err-disable state *May  7 14:53:12.571: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Gi0/4, putting Gi0/4 in err-disable state *May  7 14:53:14.497: %LINK-3-UPDOWN: Interface GigabitEthernet0/3, changed state to down *May  7 14:53:14.497: %LINK-3-UPDOWN: Interface GigabitEthernet0/4, changed state to down Could you help me please? ... View more

Hi all I would like to know if is there a way to copy the configuration of 1 interface to many ex: on switch huawei i can find: copy configuration source GigabitEthernet1/0/1 destination GigabitEthernet1/0/2  GigabitEthernet1/0/3 Regards Mauro Silva ... View more