Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Greetings. I'm trying to use VRRPv3 for IPv6 on an ASR 920. It's not working. It stays in INIT indefinitely. I followed the documentation here but still getting an error. Any thoughts? Here is the relevant config and the output of "show vrrp 22 Te0/0...
Greetings. We have recently signed up for Metro Ethernet for our main campus and 8 branches. It's a "mesh" with the carrier providing a virtual layer-2 switch in the cloud. I have a router at each site running EIGRP and they all have neighbor relatio...
It's nice that the ASA supports policy-based routing now. I'm not sure it's capable of the main thing I want to use it for, though. On an IOS router, you can specify a policy for packets sourced from the device itself using ip local policy. Is there ...
I have a customer with a Nexus 5500 (N5K-C5548UP) running 5.2(1)N1(8a), which is old, I know. It has two 2000s (N2K-C2248TP-1GE) connected to it.
I wanted to convert the following interface to a trunk, but leaving the other side of the connection (a ...
Sometimes our MPLS connections stay up, but drop many packets. We have to manually switch over to the backup DMVPN because the EIGRP neighbor relationship never actually goes down, but performace is terrible. So we manually switch to the backup, call...
I found the solution to my own problem (well, at least the reason behind it). Somebody else long before me had enabled the global command:
vlan dot1Q tag native
... which tags every VLAN that's part of a trunk, including the native VLAN. Since it ex...
I know that's what "edge trunk" does, which is why I used it. Since it's plugging into a firewall with a layer-3 interface/sub-interfaces, not another switch, there is no chance of a loop. Also, I don't think FEX supports "type normal."
Thanks for pointing me at PfR. I love how it thinks IOS is so awesome: "Cisco Performance Routing takes advantage of the vast intelligence embedded in Cisco IOS Software..." No points for humility there!
It's not a bandwidth issue--it's that some lin...
Eventually TAC got me the answer. The NAT statement that defined the VPN traffic had to have the "route-lookup" statement in it. Here's what the NAT now looks like:
nat (inside,Outside) source static any any destination static OBJ-10.11.11.0-24 OBJ-1...
I guess it's not totally clear from my original post, but the clients are supposed to get an address in the 10.11.11.x range. They got that perfectly well when using 8.0 code. Just to repeat... we have a separate "virtual" subnet for just VPN clients...