Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Hardik Vaidh
08-18-2017
Hardik Vaidh
Beginner
As Network administrator -L2 in Capgemini India Pvt Ltd I am responsible for the incident management, Configure Data center technology like Vpc, VDC, FCOE,OTV and resolve the customer request across the Europe and notify the Outage and also responsible for request work order.
Configuration of Cisco router, Cisco L2 L3 and Nexus 7000 Nexus 5000 and Nexus 2000 Switches.
Monitoring more than 12000 WAN,MAN link, more than 3000 router and 10000 switches using CA Spectrum monitoring tool.
Log ticket in SM7 and take follow up with ISP like BT, Orange, COLT across the Europe.
Router configuration and troubleshooting on OSPF, BGP protocol and vrf.
Switch configuration and troubleshooting like VLAN, HSRP, VRRP,STP,VTP, Port channel.
As Network administrator -L2 in Capgemini India Pvt Ltd I am responsible for the incident management, Configure Data center technology like Vpc, VDC, FCOE,OTV and resolve the customer request across the Europe and notify the Outage and also responsible for request work order.
Configuration of Cisco router, Cisco L2 L3 and Nexus 7000 Nexus 5000 and Nexus 2000
Recent Badges
Stats
Member since
04-10-2012
51
Posts
17
Helpful
5
Solutions
12-31-2015
06:11 AM
Cat switch is not support vPC.. vPC feature available only in NX-OS
... View more
09-11-2015
05:16 AM
HI, yes you can do it. as per the network diagram. And once you remove 6500 you can install M1 card on 7K and it will support L3 function.
... View more
07-10-2013
04:32 AM
HI Barry. 1st you have to configure only primary firewall and it will sync autometically with secoundary firewall. failover link ip 1.1.1.5 for primary and 1.1.1.6 for secounday firewall. it's call heartbeat link. also you have to configure interface interface GigabitEthernet0/1 speed 1000 duplex full nameif Outside security-level 50 ip address 10.10.10.1 255.255.255.248 standby 10.10.10.2
... View more
07-10-2013
04:07 AM
HI Rajeev i think u must have to configure standby ip. without standby how it's possible. ?? Configuring the failover failover failover lan unit primary failover lan interface FOlink GigabitEthernet0/0 failover polltime unit msec 200 holdtime msec 800 failover polltime interface msec 500 holdtime 5 failover link FOlink GigabitEthernet0/0 failover interface ip FOlink 1.1.1.5 255.255.255.252 standby 1.1.1.6
... View more
03-27-2013
05:08 AM
Hi, You have to configure NAT in router only.. after that configure routing on your firewall and point LAN traffic toward your firewall gateway....
... View more
03-26-2013
02:18 AM
Yup... Assume your PC gate IP is 192.168.1.1.. configure on the core switch 192.168.1.1 as virtual ip and point to the lan(Access layer switch) configure other virtual ip 172.21.144.1 and point to the WAN (Router). make sure both side u have to point your traffic on the same virtual ip...means your router also pointed on 172.21.144.1 ip.. Router one pointed to 172.21.144.1 and router two also pointed 172.21.144.1 bcoz 172.21.144.1 is your HSRP or VRRP ip for WAN. try it... hope u understand... if any classification feel free to contact me..
... View more
03-24-2013
03:05 AM
yup.. configure HSRP on the cisco core and assing two virtual IP one for WAN connection the other for LAN conncetion.... point your router traffic on that HSRP virtual ip so that you can get fialover upto link level.... it's call high availibility (HA)
... View more
03-24-2013
01:11 AM
crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key XXX address 10.10.10.10 // set your key insted of XXX and it must match with your remote site. after that write address of your peer crypto isakmp invalid-spi-recovery ! ! crypto ipsec transform-set XXX esp-3des esp-md5-hmac ! crypto map YYY local-address << >> crypto map YYY 10 ipsec-isakmp set peer 10.10.10.10 set transform-set ZZZ match address 101 interface << >> crypto map YYYY access-list 101 permit ip 192.168.1.0 0.0.0.255 11.11.11.11 (Remote user) 255.255.255.255 access-list 101 permit ip 192.168.1.0 0.0.0.255 22.22.22.22(Remote user) 255.255.255.255 After that configure NAT with req. access-list For troubleshooting sh cry ipsec sa peer 10.10.10.10 sh cry session hope your IPSec site to site VPN tunnel is working fine
... View more
01-21-2013
03:36 AM
For IPSec no need to creat tunnel interface. you have to assing you peer IP and then push your packet via NAT. check generic comfiguration of the IPsec site to site VPN rypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key XXX address 10.10.10.10 // set your key insted of XXX and it must match with your remote site. after that write address of your peer crypto isakmp invalid-spi-recovery ! ! crypto ipsec transform-set XXX esp-3des esp-md5-hmac ! crypto map YYY local-address << >> crypto map YYY 10 ipsec-isakmp set peer 10.10.10.10 set transform-set ZZZ match address 101 interface << >> crypto map YYYY access-list 101 permit ip 192.168.1.0 0.0.0.255 11.11.11.11 (Remote user) 255.255.255.255 access-list 101 permit ip 192.168.1.0 0.0.0.255 22.22.22.22(Remote user) 255.255.255.255 Extended IP access list 100 (NAT Access list) deny ip 192.168.1.0 0.0.0.255 host 11.11.11.11 deny ip 192.168.1.1 0.0.0.255 host 22.22.22.22 permit ip any any Please rate this if helpful
... View more
01-03-2013
10:51 PM
Dear maro, time responce is more between 2 & 3 hope. sp i have to check 2 and 3 hope. can u share eigrp confi. check delpy also 2 <1 ms 1 ms 1 ms 10.20.0.4 3 20 ms 21 ms 20 ms 10.20.142.199
... View more
Created by
Hardik Vaidh
in VPN and AnyConnect
in VPN and AnyConnect
01-03-2013
10:07 PM
01-03-2013
10:07 PM
Dear zakir check my bold word. your phase 1&2 authentication dnt match. check access list also for NAT and VPN crypto ipsec transform-set aes128sha esp-aes esp-sha-hmac crypto ipsec transform-set aes128sha mode transport crypto ipsec transform-set aes256sha esp-aes-256 esp-sha-hmac crypto ipsec transform-set aes256sha mode transport crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec transform-set TRANS_ESP_3DES_MD5 esp-3des esp-sha-hmac crypto ipsec transform-set TRANS_ESP_3DES_MD5 mode transport crypto isakmp policy 10 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400
... View more
01-03-2013
12:40 AM
Dear john you cannt configure any ip directly in your tunnel or any where related to interface matter. you have to configure interface lokback 0 ip add 10.10.10.10 255.255.255.255 no shut show ip int brie lookback up then you can configure any whare 10.10.10.10 255.255.255.255 subnet 255.255.255.255 means host
... View more
01-02-2013
03:38 AM
Dear shivaji, im nt suggest to u install cm on other server bcoz i dnt hv any knowledge abt server but u can do eveytning via router and switch i suggest to u install new VLAN for cm or create ACL as per your requirement
... View more
01-02-2013
03:23 AM
good as per configuration phase 1 & 2 should b up ip route 0.0.0.0 0.0.0.0 192.168.43.75 is wrong bcoz u set ur peer as 192.168.43.75 ip route means suppose your public ip is 192.168.11.1 then u have to set ip route 0.0.0.0 0.0.0.0 192.168.11.2 means 192.168.11.2 is your isp end. second as per your configuration interface FastEthernet0/0 for wan right ? access-list 101 permit ip 10.0.0.0 0.0.0.255 host after then configure NAT access list 100 permit ip any any access list 100 deny ip 10.0.0.0 0.0.0.255 host int fa0/0 (wan interface) ip nat outside int fa0/1 (local interface) ip nat inside
... View more
09-11-2015
HI,yes you can do it. as per the network diagram. And once you remove
6500 you can install M1 card o...
07-10-2013
HI Barry.1st you have to configure only primary firewall and it will
sync autometically with secound...
07-10-2013
HI Rajeev i think u must have to configure standby ip. without standby
how it's possible. ??Configur...
03-27-2013
Hi,You have to configure NAT in router only.. after that configure
routing on your firewall and poin...
03-26-2013
Yup... Assume your PC gate IP is 192.168.1.1..configure on the core
switch 192.168.1.1 as virtual ip...
03-24-2013
yup.. configure HSRP on the cisco core and assing two virtual IP one for
WAN connection the other fo...
03-24-2013
crypto isakmp policy 10encr 3deshash md5authentication pre-sharegroup
2crypto isakmp key XXX address...
01-21-2013
For IPSec no need to creat tunnel interface. you have to assing you peer
IP and then push your packe...
01-03-2013
Dear maro,time responce is more between 2 & 3 hope. sp i have to check 2
and 3 hope.can u share eigr...
01-03-2013
Dear zakircheck my bold word. your phase 1&2 authentication dnt
match.check access list also for NAT...
01-03-2013
Dear johnyou cannt configure any ip directly in your tunnel or any where
related to interface matter...
01-02-2013
Dear shivaji, im nt suggest to u install cm on other server bcoz i dnt
hv any knowledge abt server b...
Public Statistics
| Date Registered | 04-10-2012 10:25 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 51 |
| Total Helpful Votes Received | 17 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 3 | |
| 5 | |
| 5 | |
| 2 | |
| 5 |
