I have a DataCenter and some Branch-Offices connected in MPLS. For one of these, very critical, I have to guarantee continuity of connection to the Data Center, also in case of problems on the MPLS. So I have to add one or two alternative routes. The question is: how do I manage at best the automatic route selection: SLA-TRACK or Dynamic routing OSPF / EIGRP In the first case, I wonder if SLA-TRACK can handle multiple paths. In the second case, I wonder if a dynamic routing can be transparent to the provider, because I doubt that he agrees to adapt his configuration to mine. ... View more

Does anyone know if a HSRP configuration is possible between three switches? These are two 4506 and a 3850. It is currently in operation between the two 4506, but I should add the 3850 Thank you Claudio ... View more

Cisco recommended to use - for the 2.4 GHz band - only non-overlapping channels (eg 1,6,11). But in case of strong interferences on all the channels, with rougue signals from AP outside the corporate structure, may be convenient to enable all the channels, so that DCA can choose the one with less interference? Claudio ... View more

I have a WLC with different AP. I want to replace the "physical" controller with a virtual one: what is the best way to move the AP on the new controller? In other words: how can I make the "join" to the new vWLC ?  Best Regards C. ... View more

Good Morning, in a Wireless Network with WLC on a single site, the reccomended configuration is "FlexConnext" or not ? As I understand, the FlexConnect is essential for remote office, but in the case of single seat there are advantages to using it? Or is preferable a no-FlexConnect configuration? ... View more

Analyzing the configuration of a catalyst-4500 for one of my clients (switch that has some problems), I have seen a large use of the "flowcontrol" command in all modes (receive / send, on / off / desideres). I never use it, but here it is used on nearly all Giga interfaces. The question is: is it a good idea or are there any contraindications? Thanks for any suggestion. Claudio ... View more

Hello, does anyone know how you can manage an ASA through a VPN? Let me explain: if I am connected to my client via VPN client (AnyConnect), I can not do maintenance to the ASA itself. To connect to ASA from "outside", I have enter the networks from which I can access; but if I am very mobile, that's a problem. Best regards ... View more

In an environment with WLC, 2 SSID ("a" and "b") and tens of AP, can I have a group of AP that propagates only SSID "a" and another group that propagates both "a" and "b"? I refer, for example in a production area, where it is necessary only "production" SSID, while in office Area is also required (or only) SSID "offices". Where can I find help documentation? C. ... View more

What is the best strategy for DCA configuratiuon a WLC in an environment with heavy interference on the 2.4 GHz band (Protocols 802.11/b/g)? Select only 3 non-overlapping channels, or select all, so to let the WLC select a channel to minimize interference? ... View more

Hello, does anyone have any idea about the automatic power calculation (TPC) of the WLC? I have a WLC-4402, version 7.0.98 (old, but I can not update). In the configuration, there is a parameter (Antenna Gain) which should allow the algorithm to consider also the type of the antenna, but it seems irrelevant.I mean: I can use an Antenna Gain of 0 dB or 20 dB, but the power level never changes (obviously waiting for at least 10 minutes for recalculation) Some suggestion? ... View more

I have an ASA-5510 with double "outside" connection (two different provider). The "primary" connection has the default route to outside interface, but I need to NAT some machines on the "secondary" interface. I configure the NAT, but I do not have response; I can have response only by configuring a static route. As show by the Cisco documentation, the NAT can automatically solve the EGRESS interface, but here it seems to NOT work I remember a similar scenario, where I solved the throuble by removing the "IP reverse path verify" command. But in that case the firmware was an 8.4.x and now it is a 9.1.5 Some suggestion ?   Thanks in advance, Claudio ... View more

Two ASA-5515 in Failover, several VPN AnyConnect with LDAP authentication. I understood that to manage the remote change-password I have to move to LDAP over SSL  That's right?  To do that, I need to install some certificates.  WHERE: on the Domain Controller or on the Firewall ? And what kind of certificate have I to install ?  Thanks and Best Regards Claudio ... View more