Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About oguarisco
oguarisco
Member since
11-21-2000
Explorer
Created by
oguarisco
in Wireless Security and Network Management
in Wireless Security and Network Management
04-15-2019
03:49 PM
04-15-2019
03:49 PM
Dear all, Since I've not found recent, and clear, documentation concerning Airprint/Bonjour on CCO I've decided to post for help concerning this setup. On a 5508 Controller with about 50 APs and Release 8.X I must enable on a WLAN Airprint/Bonjour Service. All the APs connected are in Flexconnect mode (can't be changed) and most of the SSID are in Flexconnect. At the L3 level the situation is the following: - Printers are located on a dedicated VLAN/IP Subnet; - Access Point are distributed and located on several VLANs/IP Subnet depending on the phy location; - Controllers mgmt-interface is located on a dedicated VLAN/IP Subnet. Since APs are not in Local Mode enabling IGMP Snooping and mDNS on Controller is not useful... What should I configure exactly since it's not clear? Multicast/unicast mode is the best way? If I use mDNS since traffic had to traverse different VLANs I have to enable on all switches Multicast Routing with RP and IGMP on the switches where the APs and Controller are connected? BTW TTL of a multicast packet of AirPrint/Bonjour is equal to 0 (traffic stays on the same VLAN), am I correct? In this case there is a need of a sort of Bonjour Gateway or something similar for passing this traffic from VLANs? BR and thanks for providing me important information Omar
... View more
01-09-2019
05:30 AM
Hello Georg,
basically we need to ask and receive Multicast streams on Domain C from devices on Domain A and B...some specific information:
- all those Domains are running an IGP protocol (Domain A OSFP, Domain B OSFP and Domain C EIGRP);
- interconnection between them is done via Firewalls and static-routing;
- no BGP is present on those Domains;
- Domain A has already an MSDP Tunnel (without default-peer) to another external Domain for Multicast streams;
- Domain B uses already MSDP for RP Anycast Redundancy internally;
- Domain C has no Multicast nor MSDP configured;
- Firewall configuration is OK - Routing, Policy, Multicast and NAT (since those 3 Domains have some overlapping subnets)
I've setup an MSDP Tunnel between Domain C - A which it's up and running fine... the configuration is based on command "ip msdp vrf test peer XXXXX" ; I've not setup a default peer since in the near future we need another MSDP tunnel Domain C - B.
On Domain C I receive the SA propagated and filtered by Domain A... but as soon a client from Domain C ask for a Multicast stream on Domain A... we've noticed on MDSP peer on Domain A an RPF error (error not present on Domain C).
I've find out that RPF check could be "solved" using one of these methods:
- BGP implementation... it's not possible in our case;
- MDSP Mesh Group;
- RFC4166 support that states "If recent (but not currently widely deployed) router code is running that is fully compliant with the latest MSDP document, another option, to work around not having BGP to MSDP RPF peer, is to RPF using an IGP like OSPF, IS-IS, RIP, etc. This new capability will allow for enterprise customers, who are not running BGP and who don't want to run mesh groups, to use their existing IGP to satisfy the MSDP peer-RPF rules.
How can I enable RFC4166 support on the L3 switches? Is there a specific command?
At the moment on the MSDP configuration is explicited defined the command "ip msdp vrf test rfc3618" ... does this command superseed the RFC4166 settings?
BR
Omar Guarisco
... View more
01-08-2019
06:49 AM
Hi all,
we have to connect Domain A , B and C to obtain Multicast Stream on Domain C from Domain A and B.
As per existent setup on Domain A and B we can't use MDSP default peer to establish the MSDP tunnel, between the domains we have IGP as Routing Protocol but not BGP.
The interconnection between Domain A,B and C is regulated by Firewalls.
We have noticed RPF check failed and checking the feature I've noticed that to avoid that we have to use: mesh group or RFC4611 (If recent (but not currently widely deployed) router code is running that is fully compliant with the latest MSDP document, another option, to work around not having BGP to MSDP RPF peer, is to RPF using an IGP like OSPF, IS-IS, RIP, etc. This new capability will allow for enterprise customers, who are not running BGP and who don't want to run mesh groups, to use their existing IGP to satisfy the MSDP peer-RPF rules.)
How can I enable the RFC4611 support? Is per default enabled or are there specific command?
If I explicitly configure rfp with the command "ip msdp rpf rfc3618" then rfc4611 is disabled?
Thanks a lot for the support
BR
Omar
... View more
Labels:
Created by
oguarisco
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
01-07-2019
07:09 AM
01-07-2019
07:09 AM
Hi Scott,
I thought it was not possible but maybe with a dedicated Meraki AP configured in special mode it would/could be supported...
Thanks a lot for the confirmation...I'll definitiveli stay on Unified Wireless with WLC HW.
BR
Omar
... View more
Created by
oguarisco
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
01-07-2019
06:32 AM
01-07-2019
06:32 AM
Dear all,
I'm familiar with Unified Wireless Solution but not with Meraki one...
I need to find out if Meraki is a possible solution to be implemented instead of WLCs in the following environment:
- more Internal SSID in FlexConnect Mode (in WLCs Central Authentication and Local Switching at the first L2/L3 switch);
- one Guest SSID in Local Mode (in WLCs Central Authentication and Central Switching at the Wireless Controller); The Guest WLAN is terminated at the Controller and the traffic before reaching Internet is intercepted by a Gateway which present the Splash Page to Users.
Is it possible with Meraki APs to have a Local Mode SSID so the User traffic is tunnelized from the APs to the Wireless Controller? To do that should we have an AP dedicated since Meraki is controller-less solution?
Thanks a lot for the support
BR
Omar
... View more
Created by
oguarisco
in Other Data Center Subjects
in Other Data Center Subjects
05-18-2018
12:44 AM
05-18-2018
12:44 AM
Hi Brian,
at the end customer upgraded the application and we did not need anymore this feature.
BR
Omar
... View more
Created by
oguarisco
in Other Data Center Subjects
in Other Data Center Subjects
10-30-2017
01:12 AM
10-30-2017
01:12 AM
Hello VJ, thanks for the feedback.. I'll let you know Omar
... View more
Created by
oguarisco
in Other Data Center Subjects
in Other Data Center Subjects
10-27-2017
12:22 AM
10-27-2017
12:22 AM
Dear all,
Is there a command similar to IOS "ip forward protocol udp XXXX" on Nexus5548UP to enable udp protocol to be forwarded?
BR
Omar
... View more
Labels:
10-20-2017
12:20 AM
Hella Reza,
Thanks a lot for the explanation and confirmation... as I've supposed :-)
BR
Omar
... View more
10-12-2017
12:46 AM
Dear all,
I'm trying to figure out the correct settings to enable Jumbo Frame on SUP 6T...
On SUP 6T you can only change MTU at Ethernet Frame L2 and not also at L3, isn't it?
I've noticed that system MTU is per default 9216 but PHY and SVI interface have per default 1500.
If I change/adapt MTU value on a SVI without modifying the PHY port/ports associated to that SVI, will the PHY port/ports inherit the MTU setting or it will be still 1500?
If the PHY port/ports will not inherit the SVI value changed, the best way is always to have SVI and PHY port/ports with the same MTU value, isn't it?
But if the PHY port/ports is/are a dot1Q trunk, all SVI on the trunk should have the same MTU configured as the PHY ports/ports, also if not needed otherwise potential drops can be caused by frames with DF bit set in SVI interface that have MTU value lesser than the PHY value, correct?
Thanks a lot for your suggestion
Omar
... View more
Labels:
03-14-2017
08:24 AM
Hi to all,
Reading through the CCO document "Catalyst 3850: Troubleshooting Output drops" I came across the command qos queue-softmax-multiplier, by default in latest IOS XE3.6/3.7 is set to a value of 100 which corresponds to 1200 soft buffers per each gigabit port with no QoS enabled. Those 1200 soft buffers are distributed in 2 queues
queue 0 = 480 (40% of the total buffers reserved)
queue 1 = 720 (the rest => 60%)
The value of the command qos queue-softmax-multiplier could be increased to a max of 1200... If I configure it as 200 means a total of 2400 soft buffers per Gigabit port
queue 0 = 960(40% of the total buffers reserved)
queue 1 = 1440(the rest => 60%)
since it's configured globally each Gigabit port "receive" new values and I was wondering where those soft buffers come from?
A global shared pool? What happens when you increase it on all port? is there a chance that this will create buffer availability problem since by default is very low? Thanks for any suggestion BR Omar
... View more
Labels:
03-14-2017
06:58 AM
next week in labo... and I will let you know if it works with XE 3.7.5
... View more
Hi Julio,
thanks a lot for the info... yes I remember this tools but is not always updated, in fact not all Releases (i.e. IOS XE) are present.
Omar
... View more
Created by
oguarisco
in Wireless Security and Network Management
04-15-2019 03:49 PM
04-15-2019 03:49 PM
Dear all,Since I've not found recent, and clear, documentation
concerning Airprint/Bonjour on CCO I'...
01-09-2019 05:30 AM
Hello Georg, basically we need to ask and receive Multicast streams on
Domain C from devices on Doma...
01-08-2019 06:49 AM
Hi all, we have to connect Domain A , B and C to obtain Multicast Stream
on Domain C from Domain A a...
Created by
oguarisco
in Other Wireless - Mobility Subjects
01-07-2019 07:09 AM
01-07-2019 07:09 AM
Hi Scott, I thought it was not possible but maybe with a dedicated
Meraki AP configured in special m...
Created by
oguarisco
in Other Wireless - Mobility Subjects
01-07-2019 06:32 AM
01-07-2019 06:32 AM
Dear all, I'm familiar with Unified Wireless Solution but not with
Meraki one... I need to find out ...
Created by
oguarisco
in Other Data Center Subjects
05-18-2018 12:44 AM
05-18-2018 12:44 AM
Hi Brian, at the end customer upgraded the application and we did not
need anymore this feature. BR ...
Created by
oguarisco
in Other Data Center Subjects
10-30-2017 01:12 AM
10-30-2017 01:12 AM
Hello VJ,thanks for the feedback.. I'll let you knowOmar
Created by
oguarisco
in Other Data Center Subjects
10-27-2017 12:22 AM
10-27-2017 12:22 AM
Dear all, Is there a command similar to IOS "ip forward protocol udp
XXXX" on Nexus5548UP to enable ...
10-20-2017 12:20 AM
Hella Reza, Thanks a lot for the explanation and confirmation... as I've
supposed :-) BR Omar
10-12-2017 12:46 AM
Dear all, I'm trying to figure out the correct settings to enable Jumbo
Frame on SUP 6T... On SUP 6T...
Public Statistics
| Date Registered | 11-21-2000 09:31 AM |
| Date Last Visited | |
| Total Messages Posted | 257 |
| Total Helpful Votes Received | 12 |
Helpful Votes Given To
.jpg "VIP Mentor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
