Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Tod Larson
10-22-2018
Tod Larson
Member since
10-26-2009
Participant
Created by
Tod Larson
in Policy and Access
in Policy and Access
10-15-2018
04:18 PM
10-15-2018
04:18 PM
That is what I was afraid of but at least now I know for sure.
Thank you for the assistance.
... View more
Created by
Tod Larson
in Policy and Access
in Policy and Access
10-14-2018
03:16 PM
10-14-2018
03:16 PM
Jason,
Thank you for posting but I'm not sure we are communicating.
I don't see in the link you provide where to configure my Windows 10 laptop to authenticate a Windows user with the ISE internal user store. I want to be able to log into my windows laptop using ISE. I would expect to have to configure some local Windows policy to point Windows at the ISE for authentication. But I might be missing something.
Thank you.
... View more
Created by
Tod Larson
in Policy and Access
in Policy and Access
10-14-2018
07:45 AM
10-14-2018
07:45 AM
Can I use the ISE internal user store to authenticate a user logging into a Windows 10 laptop?
... View more
Created by
Tod Larson
in Policy and Access
in Policy and Access
10-13-2018
08:17 AM
10-13-2018
08:17 AM
I am trying to design a system where we have lots of routers/switches but only a few windows machines. We have a couple window PCs and servers for network management tools. This network management system is independent and physically separate from our corporate active directory. It's small enough so we don't need AD. We have local logons and do local group policy to lock down the windows machines. We use TACACS+ on ISE for user authentical for the several hundred routers and switches, but we then have local accounts for the windows computers. We don't want to deploy AD and have yet another thing to manage and patch (I get that isn't not super hard, but zero work is better).
Can we configure a windows computer to authenticate users against ISE?
... View more
Labels:
Created by
Tod Larson
in Network Management
in Network Management
10-13-2018
08:02 AM
10-13-2018
08:02 AM
Ultimately I consulted with Cisco TAC. Prime 3.1 doesn't support doesn't support doing the rommon upgrade. I did use Prime to copy the files to all our routers. But then I ran the rommon upgrade command manually on each box.
... View more
Created by
Tod Larson
in Network Management
in Network Management
10-08-2018
07:36 AM
10-08-2018
07:36 AM
We have Prime Infrastructure 3.1 running and can do detailed hardware and detailed software reports just fine.
How do I build a report of the licensing levels of each of our devices? Individual are licensed with IP Base, Data, AX, etc. I'm mostly just interested in routers and switches.
Thank you.
... View more
Labels:
Created by
Tod Larson
in Network Management
in Network Management
09-18-2018
05:18 PM
09-18-2018
05:18 PM
When uploading images to prime infrastructure the text says to upload the bootstrap image at the same time. As if Prime wants to do something with the pkg file. But, then it doesn't seem to let me do anything with the pkg file. Even if I could use Prime to only SCP the proper pkg file to 300 devices that would make life better.
Regarding failures, we are at about a 50% failure rate when trying to upgrade the rommon and IOS-XE the "manual way." Whether it be a power supply failure, RAM failure or random unknown failure we are hoping that letting the robot do it might improve things.
... View more
Created by
Tod Larson
in Network Management
in Network Management
09-17-2018
01:25 PM
09-17-2018
01:25 PM
We have Prime Infrastructure 3.1.
How do I push new rommon to the routers using Prime? I've uploaded the rommon pkg to the image repository but Prime says it's unknown. We know how to do the upgrades my ssh'ing individually to each box and running the upgrade rommon command, but we'd like to use Prime.
Thank you.
... View more
Labels:
05-16-2018
08:24 AM
We retested inspect ICMP today on our ASA cluster and it worked fine today. Yesterday we must have done a bad test.
Is there any show command that will tell us that ICMP echo-replies are being serviced by the inspection engine?
Thank you.
... View more
05-15-2018
05:56 PM
Do ASA clusters support inspect icmp?
This document lists several inspections that are and are not supported. However it is silent regarding icmp inspections.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_cluster.html
Our ASA cluster allows us to configure the inspect icmp but it doesn't seem to work. We get nothing in logs about creating dynamic ACLs and we can only get our pings to work if we configured a static ACL on the outside-->in to permit echo-reply.
Thank you.
... View more
Labels:
01-29-2017
05:50 PM
I'll be able to run the command monday at work. But we are doing it all via cli directly. No SDM.
... View more
01-27-2017
07:18 PM
We recently deployed a 2960X switch in IP routing mode. We have a couple SVIs. We are able to configure "ip tcp adjust-mss 1300" on the SVI but it doesn't appear to to work. Wireshark on the PC and server show the TCP ack and syn-ack both have ~1467. I expect the adjust-mss command to re-write the TCP parameters to spoof the connecting into negotiating down to 1300, but it isn't happening.
I can't find ip tcp adjust-mss xxxx in the 2960X documentation so I'm wondering if it's a bogus command.
Should the "ip tcp adjust-mss xxxx" command work on the 2960X?
Thank you
... View more
Labels:
01-06-2017
11:28 AM
We have WSA (AsyncOS 9.0.1) as our web proxy. We received a new requirement to block specific IP addresses. How do I do with the WSA?
I know about custom URL categories and setting access rules, but that didn't seem to work when I used IP address instead of domain names.
Thank you.
... View more
Labels:
09-18-2016
05:40 AM
Here is an ISR buying guide.
http://www.cisco.com/c/en/us/products/collateral/routers/3900-series-integrated-services-routers-isr/guide_c07-726864.html?referring_site=RE&pos=3&page=http://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/datasheet-c78-732542.html
For 100Mbps throughput the 4321 or the 3925 is where you want to be. Ask your vendor for pricing for both to see what makes sense for your budget.
Remember that a 1GE interface on a router doesn't mean it'll give you 1gig throughput, only that it'll negotiate an interface speed of 1000Mbs. You can set up a lab test to push data through a router to see that it'll never get close to 1gig. I've had to upgrade many 3900 series routers as they become the bottleneck after we upgrade the WAN connections to 300 or 500Mbps.
Good luck.
... View more
09-05-2016
06:06 PM
"I f a match command or Match Clause value in ASDM is not present, all routes match the clause."
http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration85/guide/asa_cfg_cli_85/route_maps.html
" the absence of the match commands, the entire routes or packets are matched here."
http://www.examcollection.com/certification-training/ccnp-concept-of-route-maps.html
... View more
Created by
Tod Larson
in Policy and Access
10-15-2018 04:18 PM
10-15-2018 04:18 PM
That is what I was afraid of but at least now I know for sure. Thank you
for the assistance.
Created by
Tod Larson
in Policy and Access
10-14-2018 03:16 PM
10-14-2018 03:16 PM
Jason, Thank you for posting but I'm not sure we are communicating. I
don't see in the link you prov...
Created by
Tod Larson
in Policy and Access
10-14-2018 07:45 AM
10-14-2018 07:45 AM
Can I use the ISE internal user store to authenticate a user logging
into a Windows 10 laptop?
Created by
Tod Larson
in Policy and Access
10-13-2018 08:17 AM
10-13-2018 08:17 AM
I am trying to design a system where we have lots of routers/switches
but only a few windows machine...
Created by
Tod Larson
in Network Management
10-13-2018 08:02 AM
10-13-2018 08:02 AM
Ultimately I consulted with Cisco TAC. Prime 3.1 doesn't support doesn't
support doing the rommon up...
Created by
Tod Larson
in Network Management
10-08-2018 07:36 AM
10-08-2018 07:36 AM
We have Prime Infrastructure 3.1 running and can do detailed hardware
and detailed software reports ...
Created by
Tod Larson
in Network Management
09-18-2018 05:18 PM
09-18-2018 05:18 PM
When uploading images to prime infrastructure the text says to upload
the bootstrap image at the sam...
Created by
Tod Larson
in Network Management
09-17-2018 01:25 PM
09-17-2018 01:25 PM
We have Prime Infrastructure 3.1. How do I push new rommon to the
routers using Prime? I've uploaded...
05-16-2018 08:24 AM
We retested inspect ICMP today on our ASA cluster and it worked fine
today. Yesterday we must have d...
05-15-2018 05:56 PM
Do ASA clusters support inspect icmp? This document lists several
inspections that are and are not s...
01-29-2017 05:50 PM
I'll be able to run the command monday at work. But we are doing it all
via cli directly. No SDM.
Created by
Tod Larson
in Switching
01-27-2017 07:18 PM
01-27-2017 07:18 PM
We recently deployed a 2960X switch in IP routing mode. We have a couple
SVIs. We are able to config...
01-06-2017 11:28 AM
We have WSA (AsyncOS 9.0.1) as our web proxy. We received a new
requirement to block specific IP add...
09-18-2016 05:40 AM
Here is an ISR buying guide.
http://www.cisco.com/c/en/us/products/collateral/routers/3900-series-in...
Public Statistics
| Date Registered | 10-26-2009 07:47 AM |
| Date Last Visited | 10-22-2018 04:18 PM |
| Total Messages Posted | 206 |
| Total Helpful Votes Received | 44 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 14 | |
| 5 | |
| 5 | |
| 10 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Cisco Employee"){kind=icon}
Helpful Votes From
