Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Experiencing extremely slow transfer times using scp to transfer an IOS XE image to an ASR-1002(X). Have attempted using three different routers and two separate servers. In all cases scp is extremely slow. A 380MB image is still transferring afte...
Assisting colleague with a failing VM restore. Connection terminates after about 1.5 hours. I do not see a network issue but trying to help him narrow down the culprit.ASA logs indicate the connection was likely reset by TCP Reset-O. Reading shows th...
ASA 5585-SSP-40 running v8.4(6)Configuring using ASDM v7.1(2)Have run into a few instances where newly-applied policies would become jumbled with other policies. I've seen this before when multiple admins were applying policies at or near the same t...
I have a pair of ASA-5585-X in an active-standby failover configuration. Currently they are running software version 8.4.3. I'm looking to upgrade to 9.1.1. From the release notes I understand that in order to perform a "zero downtime" upgrade I n...
BLUF: Does port security using sticky MAC addresses (on a 3750 platform) also affect the switch's MAC address table, or is port security entirely separate from the MAC address table?Background:I ran into an issue with two firewalls in an active-pass...
EIGRP uses the minimum path bandwidth in metric calculation. You're learning routes at R3 via tunnel interfaces. Have you verified the tunnel interface bandwidth setting vs the bandwidth used in your redistribution metric?
Edit: See Peter Paluch's reply below for correction to this post.
I believe the answer is that the Cisco router will prefer the route that specifies the exit interface. It considers such routes 'directly connected', as you can see in your show ip ro...
Thanks for your reply, Jouni. Note that I referenced some of your earlier posts while researching this topic.I agree that a packet capture would be the definitive means of determining in this case. Unfortunately I am limited on tools at this time. ...
Thanks, Jouni! Definitely heeding the advice - we're enabling the command preview and keeping an eye on pre-committed changes for anything odd.I wish I had become more accustomed to the ASA CLI prior to now. I'm typically a "CLI-guy", but this new ...
