Hi: Anyone working with PfR3?  I have a simple set up of one 3945 as HUB and one 3945 as Branch with two links between them. i have the HUB configured as MC and BR with 2 exits and it seems to be working.  In the branch site I can't get t the branch site up. On the branch i also configured the MC and BR on the same device , but in PfR3 , as I understand it, one does not define on the BR the exit wan links. Rather the MC in the branch is supposed to talk to the MC in the HUB and get the information on its own. I have two DMVPN tunnels up and EIGRP working over the tunnels. I have ping from branch to hub.   However PfR on branch seems to not peer with MC in the hub. Don't know why. is anyone working with Pfr3 who could shed some light?   Thanks for the help   Mickey   ... View more

Hi: We have an CSACS-1121-K9 with ACS version  5.4.0.46.3. We see the following warning "ACS view DB size has exceeded allowed quota"  . I can't find the meaning of this , how critical it is, or what should be done. Anyone have an answer. The ACS has in the last 2 days stopped showing  log messages. I was wondering if this message could be related. Thanks for the help Mickey ... View more

Hi In a PKI hub and spoke network we currently have a  Microsoft server acts as CA and another server  is replicating files from the CA. However nothing is really set as a backup CA. At the moment going to a back up CA  requires manually setting up a new CA server with the files that where backed up . Is there a way to set up a hot  backup CA . If the main CA goes down the Cisco equipment will use the backup CA.  Does IOS support such a setup? Thanks Mickey ... View more

Hi: Is it  possible in ACS , in this case 5.4.0.46.3, to force a user to have a different user password and enable password?  We want the ACS to hanle both user and enable passwords, but want to be sure that the user has a different password for each and not the same password. Is therre a way in ACS to force different passwords? Thanks for the help Mickey ... View more

Hello. I would like to know whether CSM 4.3 is compatible with ASA version 9.1(1).  Can anyone direct me to an appropriate url that contains information about these two version's compatibility? Thanks. ... View more

Hi: I send a Device credential verification Job to two different devices  , a Cisco 3750 and a blade switch WS-CBS3120. I  configured SNMP write access to the switches. The SNMP write access in either SNMP v1 or SNMP V3 , tried both. The job is send from the Ciscoworks server. Once the job has completed, I do a show ip arp on the device and find a new entry with the IP address of the Ciscoworks  Server and the mac-address of the L2 next hop. We would not have  noticed this behavior had it not been that in the case that the  switch  next hop is an HSRP vlan on a nexus , the ARP entry entered into the switch is incorrect, and from then on the switch loses connection to Ciscoworks. The Mac-address that is entered by Ciscoworks , in the case of nexus is a statice mac defined on the Nexus for the Vlan in question , but it is NOT the HSRP default gateway MAC address. Therefore we lose connection between the switch and Ciscoworks. One has to manually clear the ARP table inorder to again reach the Ciscoworks. Questions: 1. Why does Ciscoworks  insist on changing the ARP table? 2. Is this ARP entry aged out or is it permeant as would an ARP entry which is entered through CLI  be  permeant ?    3. In the case of the Nexus connection, this ARP entry does not allow Ciscoworks and the device to communicate. This is not productive! Has any one come across this situation ? Any known fixes, workarround? I was not able to find a word about this on Cisco's site. Our Ciscoworks is at the following levels: CW Common services    3.3.0 LMS portal                    1.2.0 CW Assistent                1.2.0 RME                             4.3.1 Device fault manager      3.2.0 IPM                              4.2.1 Cisco View                    6.1.9 campus Manager            5.2.1 thanks   for any help Mickey ... View more

Hi: I have a large number of 3750 stacks consisting of a variable amount  , from 1 to 6, switches. I need to add to all FastEthernet interfaces from 2/0/1 to n/0/24 a command , under the interface. That is on the 1st and if only one switch do nothing, and for all other switches, be it 2 or 3 etc switches under each interface add a one line command. I  have not found the correct syntax to have only the interfaces I need to be effected. For example: interface [#FastEthernet.*#]   picks all interfaces including the ones on the 1st switch which I don't want to change. Interface [#fastEthernet[2-9].*#]  ignores all interfaces. I have tried various forms of syntax for the regular expression   but either hit all interface or none. Does anyone know how to format the request properly. Thanks in advance Mickey ... View more