About Marcin Latosiewicz

Marcin Latosiewicz · 01-15-2015

Recently I had to go back an install Windows 2012 server on UCS blade.In my case it was UCS manager 2.2.1d.Blade B200M3 with Cisco 1240 VIC (MLOM). In the past the only experience I had was with Windows 2012 R2 server, which works pretty much without...

Marcin Latosiewicz · 12-05-2013

IntroductionPre-RequisitesTopologyConfigurationOpenFilerUCS configurationVerificationiSCSI stateiSCSI boot LUN visibility from operating systemRelated linksAbout OpenFilerAbout iSCSIAbout UCS IntroductionThis document will discuss how to perform iSCS...

Marcin Latosiewicz · 11-12-2013

What is IPsecIKE negotiation at a glanceTunnel mode and transport mode.ConfigurationIKEIPsecTroubleshootingShow commandsDebuggingReferences This document will outline basic negotiation and configuration for crypto-map-based IPsec VPN configuration. ...

Marcin Latosiewicz · 10-23-2012

Introduction.Before you start.Order of troubleshootingNHRPIKEPKIIPsecGRENHRP (again!)Routing protocol Disclaimer: This content has been initially created by Alex Honore, Graham Barlet, Raffaele Brancaleoni from Cisco. Introduction.This document is in...

Marcin Latosiewicz · 08-23-2012

About this documentInitial configrationClient sideServer sideVerificationBig output handlingOne command at a timePipeliningFeedback?Comments? Flames? About this document This document is intended to show how one can get big outputs for IOS CLI using...

Marcin Latosiewicz · 08-07-2017

Of course you're correct. Reference: https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml Unfortunately I can't rate your answer, the rating button is not available :{

Marcin Latosiewicz · 09-16-2016

NHRP is L2 protocol, VTI is a L3 encapsulation. So yes, you do need GRE (default).

Marcin Latosiewicz · 03-18-2016

Mind that I haven't been working on this tech for almost 3 years. The aaa authorization rule is not defined under AAA, you have it defined only in IKE. Maybe newer IOS don't require it? The old ones did.

Marcin Latosiewicz · 03-15-2016

Spoke doesn't have an identity cert. Enroll the spoke to CA (yes, itself). Also make sure you have the right EKU (If this restriction was not relaxed recently).

Marcin Latosiewicz · 02-17-2016

Split tunnelling being enabled or disabled is a matter of policy typically, this particular example outlines some of advantages of logical interfaces irt traffic flow. Yes it could solve the u-turn problem by essentially not sending traffic towards ...

Member Since	‎01-03-2008 12:25 AM
Date Last Visited
Posts	2,897
Total Helpful Votes Received	1728

User Statistics

User Activity

Windows 2012 (non-R2) SAN-only boot on UCS B-series running 2.2 software.

UCS iSCSI boot with OpenFiler

Crypto map based IPsec VPN fundamentals - negotiation and configuration

DMVPN on Spoke Troubleshooting Order and Component Responsibilities

SSH using public key authentication to IOS and big outputs.

Of course you're correct.

NHRP is L2 protocol, VTI is a

Mind that I haven't been

Spoke doesn't have an

Split tunnelling being