Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About epasqualotto
04-17-2019
epasqualotto
Beginner
http://www.ios4all.net
Recent Badges
Stats
Member since
02-16-2007
146
Posts
10
Helpful
2
Solutions
Created by
epasqualotto
in Contact Center
in Contact Center
09-28-2017
12:30 AM
09-28-2017
12:30 AM
Dear all, we got UCCX 10.6 and with API I'm able to get realtime status of agents and CQS. Is there any way to get the last N calls and agent status (READY, NOT READY, READY, PAUSE ecc)? I've search for API of history data but I can't find anything. Someone have information about it? Thanks
... View more
- Tags:
- UCCX API
Labels:
08-07-2017
11:51 PM
I'll make a test on next days by using cli. With ASDM there's no option to set the source port (only destination) when configuring ACL for QoS.
Thanks
... View more
08-04-2017
06:55 AM
Dear all, I've an ASA 5516 and I'm trying to limit the http based traffic download from users.
192.168.99.0/24 is my local network and I'm using these rules:
access-list global_mpc extended permit tcp any 192.168.99.0 255.255.255.0 eq www
class-map global-class1 match access-list global_mpc !
class global-class1 inspect http police input 100000 1500 police output 100000 1500
But it doesn't work, it works only if I remove "eq www" so limit for the download on every port.
Anyone have suggestions?
... View more
- Tags:
- asa qos acl
Labels:
Created by
epasqualotto
in Network Management
in Network Management
08-06-2014
01:18 AM
08-06-2014
01:18 AM
I'm trying to manage my switch but Network Assistant 5.0 and 6.0 tell me that is unsopported. If I check the datasheet of the switch seems to be supported as the F.A.Q. that I attach below. Q. How do you manage the Cisco Catalyst 3650? A. The Cisco Catalyst 3650 can be managed using the Cisco IOS Software CLI, web GUI, Cisco Prime ™ Infrastructure 2.0.1, or the Cisco Network Assistant Software. Any suggestion?
... View more
Labels:
02-07-2014
01:23 AM
Dear all, is the Aironet 1600 compatible with the old power supply of 1231 or 1242 APs?
... View more
Labels:
Created by
epasqualotto
in Firewalls
in Firewalls
08-05-2013
03:24 AM
08-05-2013
03:24 AM
Finally I got it working. I delete all the "name object" in my config, do a clear xlate, and renamed the network-object used in NAT command and all is working. I thought some name/network object during migration had some issue and conflict with nat. So I confirm that it's better when migrating from 8.2/3 to 8.4 to start the config from scratch.
... View more
Created by
epasqualotto
in Firewalls
in Firewalls
07-31-2013
08:26 AM
07-31-2013
08:26 AM
I've excluded also the inspection without luck. Tomorrow I'll try to reboot both firewall (HA setup) and hope solve the issue (I don't think). This is a migration from version 8.0, maybe the auto migration of rules introduce some unexpected config. Thanks Enrico.
... View more
Created by
epasqualotto
in Firewalls
in Firewalls
07-31-2013
06:23 AM
07-31-2013
06:23 AM
This is the output after insert the ACL that permit all traffic from 192.168.1.110 (I have change the NAT config by mapping 80 to 80 and not 8080 to 80) Result of the command: "packet-tracer input Lan tcp 192.168.1.110 80 8.8.8.8 12345" Phase: 1 Type: ACCESS-LIST Subtype: Result: ALLOW Config: Implicit Rule Additional Information: MAC Access list Phase: 2 Type: ROUTE-LOOKUP Subtype: input Result: ALLOW Config: Additional Information: in 0.0.0.0 0.0.0.0 Esterna Phase: 3 Type: ACCESS-LIST Subtype: log Result: ALLOW Config: access-group Lan_access_in in interface Lan access-list Lan_access_in extended permit ip object Zabbix any Additional Information: Phase: 4 Type: IP-OPTIONS Subtype: Result: ALLOW Config: Additional Information: Phase: 5 Type: INSPECT Subtype: inspect-ftp Result: ALLOW Config: class-map global-class match any policy-map global_policy class global-class inspect ftp service-policy global_policy global Additional Information: Phase: 6 Type: FOVER Subtype: standby-update Result: ALLOW Config: Additional Information: Phase: 7 Type: NAT Subtype: Result: ALLOW Config: object network Zabbix nat (Lan,Esterna) static interface service tcp www www Additional Information: Static translate Zabbix/80 to PUBLIC_IP/80 Phase: 8 Type: NAT Subtype: rpf-check Result: ALLOW Config: nat (Lan,Esterna) after-auto source dynamic Server interface Additional Information: Phase: 9 Type: IP-OPTIONS Subtype: Result: ALLOW Config: Additional Information: Phase: 10 Type: FLOW-CREATION Subtype: Result: ALLOW Config: Additional Information: New flow created with id 7729899, packet dispatched to next module Result: input-interface: Lan input-status: up input-line-status: up output-interface: Esterna output-status: up output-line-status: up Action: allow
... View more
Created by
epasqualotto
in Firewalls
in Firewalls
07-31-2013
06:05 AM
07-31-2013
06:05 AM
Result of the command: "packet-tracer input Lan tcp 192.168.1.110 80 8.8.8.8 12345" Phase: 1 Type: ACCESS-LIST Subtype: Result: ALLOW Config: Implicit Rule Additional Information: MAC Access list Phase: 2 Type: ROUTE-LOOKUP Subtype: input Result: ALLOW Config: Additional Information: in 0.0.0.0 0.0.0.0 Esterna Phase: 3 Type: ACCESS-LIST Subtype: Result: DROP Config: Implicit Rule Additional Information: Result: input-interface: Lan input-status: up input-line-status: up output-interface: Esterna output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule Is dropped by ACL and no NAT rule.
... View more
Created by
epasqualotto
in Firewalls
in Firewalls
07-31-2013
05:51 AM
07-31-2013
05:51 AM
Yes is the output of: packet-tracer input Esterna tcp 8.8.8.8 12345 MY_PUBLIC_IP 8080 My all NAT config is too long and I must clean IP/name ecc, but this internal IP is matched also by the group Server and this is the only nat rule: nat (Lan,Esterna) after-auto source dynamic Server interface Do you think the inactive nat rule can be a problem or are all skipped? Another info, the other NAT on other pubblic IP is working well. Thanks
... View more
Created by
epasqualotto
in Firewalls
in Firewalls
07-31-2013
05:33 AM
07-31-2013
05:33 AM
Jouni, I got this nat rule: nat (Lan,Esterna) after-auto source dynamic Server interface Where into "server" there's also my internal IP that I want to be natted. Anyway the packet-tracer results are always Phase: 1 Type: ROUTE-LOOKUP Subtype: input Result: ALLOW Config: Additional Information: in MY_PUBLIC_IP 255.255.255.255 identity Phase: 2 Type: ACCESS-LIST Subtype: Result: DROP Config: Implicit Rule Additional Information: Result: input-interface: Esterna input-status: up input-line-status: up output-interface: NP Identity Ifc output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule
... View more
Created by
epasqualotto
in Firewalls
in Firewalls
07-31-2013
05:00 AM
07-31-2013
05:00 AM
Hi Alain, thanks for the answer. Zabbix obj is already the internal address: object network Zabbix host 192.168.1.110 description Created during name migration Anyway I tried also with: access-list Esterna_access_in extended permit tcp any host 192.168.1.110 eq www access-list Esterna_access_in extended permit tcp any host 192.168.1.110 eq 8080 But nothing. If I do the packet-tracer with the internal IP I got (I don't know whitch port is used): Result of the command: "packet-tracer input Esterna tcp 8.8.8.8 12345 192.168.1.110 8080" Phase: 1 Type: ROUTE-LOOKUP Subtype: input Result: ALLOW Config: Additional Information: in 192.168.1.0 255.255.255.0 Lan Phase: 2 Type: ACCESS-LIST Subtype: log Result: ALLOW Config: access-group Esterna_access_in in interface Esterna access-list Esterna_access_in extended permit tcp any host 192.168.1.110 eq 8080 Additional Information: Phase: 3 Type: IP-OPTIONS Subtype: Result: ALLOW Config: Additional Information: Phase: 4 Type: INSPECT Subtype: inspect-ftp Result: ALLOW Config: class-map global-class match any policy-map global_policy class global-class inspect ftp service-policy global_policy global Additional Information: Phase: 5 Type: FOVER Subtype: standby-update Result: ALLOW Config: Additional Information: Phase: 6 Type: VPN Subtype: ipsec-tunnel-flow Result: ALLOW Config: Additional Information: Phase: 7 Type: NAT Subtype: rpf-check Result: DROP Config: nat (Lan,Esterna) after-auto source dynamic Server interface Additional Information: Result: input-interface: Esterna input-status: up input-line-status: up output-interface: Lan output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule AND Result of the command: "packet-tracer input Esterna tcp 8.8.8.8 12345 192.168.1.110 80" Phase: 1 Type: ROUTE-LOOKUP Subtype: input Result: ALLOW Config: Additional Information: in 192.168.1.0 255.255.255.0 Lan Phase: 2 Type: ACCESS-LIST Subtype: log Result: ALLOW Config: access-group Esterna_access_in in interface Esterna access-list Esterna_access_in extended permit tcp any host 192.168.1.110 eq www Additional Information: Phase: 3 Type: IP-OPTIONS Subtype: Result: ALLOW Config: Additional Information: Phase: 4 Type: INSPECT Subtype: inspect-ftp Result: ALLOW Config: class-map global-class match any policy-map global_policy class global-class inspect ftp service-policy global_policy global Additional Information: Phase: 5 Type: FOVER Subtype: standby-update Result: ALLOW Config: Additional Information: Phase: 6 Type: VPN Subtype: ipsec-tunnel-flow Result: ALLOW Config: Additional Information: Phase: 7 Type: NAT Subtype: rpf-check Result: DROP Config: object network Zabbix nat (Lan,Esterna) static interface service tcp www 8080 Additional Information: Result: input-interface: Esterna input-status: up input-line-status: up output-interface: Lan output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule Thanks
... View more
Created by
epasqualotto
in Firewalls
in Firewalls
07-31-2013
04:04 AM
07-31-2013
04:04 AM
Hi all, I've just upgraded my ASA 5510 to 8.4.x and I can't NAT on outside interface anymore. I can't understand when Packet-tracer say me "implicit rule". This is an example of my config: object network Zabbix nat (Lan,Esterna) static interface service tcp www 8080 (maybe one is ok but I tried both ports) access-list Esterna_access_in extended permit tcp any object Zabbix eq www access-list Esterna_access_in extended permit tcp any object Zabbix eq 8080 nat (Lan,Esterna) source dynamic Server interface Result of the command: "packet-tracer input Esterna tcp 8.8.8.8 12345 MY_PUBLIC_IP 8080" Phase: 1 Type: ROUTE-LOOKUP Subtype: input Result: ALLOW Config: Additional Information: in MY_PUBLIC_IP 255.255.255.255 identity Phase: 2 Type: ACCESS-LIST Subtype: Result: DROP Config: Implicit Rule Additional Information: Result: input-interface: Esterna input-status: up input-line-status: up output-interface: NP Identity Ifc output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule Anyone have suggestion?
... View more
Labels:
07-22-2013
04:03 AM
Hi, I've the same issue with FTP on outside interface (other IP works well). Have you found any workaround? I'm running on 8.4.6 Thanks
... View more
07-08-2013
05:04 AM
Hi, I also do some test with energywise switches but after setup a domain I can't send a set query to all domain but only on the current switch. There's a way to change the scope of a query? I wrote also a Windows software to configure Catalyst and I it energywise module on it, if someone want to try it or give me a feedback can send me a private message. The software is available at www.ios4all.net
... View more
09-28-2017
Dear all, we got UCCX 10.6 and with API I'm able to get realtime status
of agents and CQS.Is there a...
08-07-2017
I'll make a test on next days by using cli. With ASDM there's no option
to set the source port (only...
08-04-2017
Dear all, I've an ASA 5516 and I'm trying to limit the http based
traffic download from users. 192.1...
Created by
epasqualotto
in Network Management
08-06-2014
08-06-2014
I'm trying to manage my switch but Network Assistant 5.0 and 6.0 tell me
that is unsopported.If I ch...
Created by
epasqualotto
in Collaboration Applications
07-09-2014
07-09-2014
Like the subject, I have one user with a Jabber on PC and the mobile
phone with Jabber.Can he contro...
08-05-2013
Finally I got it working.I delete all the "name object" in my config, do
a clear xlate, and renamed ...
07-31-2013
I've excluded also the inspection without luck. Tomorrow I'll try to
reboot both firewall (HA setup)...
07-31-2013
This is the output after insert the ACL that permit all traffic from
192.168.1.110(I have change the...
07-31-2013
Result of the command: "packet-tracer input Lan tcp 192.168.1.110 80
8.8.8.8 12345"Phase: 1Type: ACC...
07-31-2013
Yes is the output of:packet-tracer input Esterna tcp 8.8.8.8 12345
MY_PUBLIC_IP 8080My all NAT confi...
07-31-2013
Jouni, I got this nat rule:nat (Lan,Esterna) after-auto source dynamic
Server interfaceWhere into "s...
07-31-2013
Hi Alain, thanks for the answer.Zabbix obj is already the internal
address:object network Zabbix hos...
07-31-2013
Hi all, I've just upgraded my ASA 5510 to 8.4.x and I can't NAT on
outside interface anymore.I can't...
Public Statistics
| Date Registered | 02-16-2007 07:13 AM |
| Date Last Visited | 04-17-2019 04:06 AM |
| Total Messages Posted | 146 |
| Total Helpful Votes Received | 10 |
.jpg "Hall of Fame Master"){kind=icon}
