You can continue with the existing subnets, you just need an additional subnet to NAT the duplicate subnet behind.   There is no other way to do it, as far as SiteA is concerned, the server in SiteB resides in a connected subnet on SiteA.   cheers, Seb. ... View more

Hi there, You will need to configure static NAT on one of the sites. For example, create a new subnet 192.168.11.0 /24 at SiteB, ensure it is advertised to SiteA and then create static NAT statements for each required SiteB server. A server in SiteA will then connect to the translated address from the 192.168.11.0/24 subnet instead of directly.   cheers, Seb. ... View more

Hi there, You log straight into EXEC mode you need to pass a privilege parameter with a value of 15 as part of the authorization policy result.   Try following the following guide (don't worry about the command set elements): http://www.omnisecu.com/ccna-security/cisco-secure-acs-shell-profiles-and-command-sets.php     cheers, Seb.   ... View more

Hi there, Some devices such as large core switches or firewalls will allow you to define packet capture buffers on the device itself which can then be downloaded for analysis at a later time.   In other circumstances your best bet is to use a SPAN port to mirror traffic from one port to the switchport which has your laptop and packet capture running.   https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/network_management/configuration_guide/b_nm_3se_3850_cg/b_nm_3se_3850_cg_chapter_0111.html   cheers, Seb. ... View more

Hi there, The NM-8-X is compatible with the c9300-48T-A, and does not require a PSU upgrade.   cheers, Seb. ... View more

Hi there, There is nothing special about access-list number 1.   Can you share the full config of the router with us?   cheers, Seb. ... View more

Hi there, What is the IP on VLANx that your are trying to SSH from? Is your connection arriving via Gi0/0.99 or via another interface on router?   cheers, Seb. ... View more

Hi there, There is something not right with your configuration. You only mention VLAN1 in your topology, yet your static route statements show the subnet 10.10.158.0/24 which implies that you must also have 10.10.157.0/24 which will need to be in a VLAN of its own. It is hard to determine from your diagram, but either switch2 or switch3 must have a Layer3 interface in both VLANs. It is this switch which you should configure as the VLAN/ subnet gateway.   For example, say it is switch2. The config should look like: ! vlan1,2 ! int vlan 1 ip address 10.10.157.251 255.255.255.0 ! int vlan 2 ip address 10.10.158.251 255.255.255.0 ! int fa0/1 switchport mode trunk switchport trunk allowed vlan 1 no shut ! int fa0/24 switchport mode trunk switchport trunk allowed vlan 2 no shut ! ip routing ! Now on switch 1: ! int fa0/1 switchport mode trunk switchport trunk allowed vlan 1 no shut ! int fa0/24 switchport mode access switchport access vlan 1 not shut ! ip route 10.10.158.251 255.255.255.0 10.10.157.251 ! Switch3: ! vlan 2 ! int range fa0/1, fa0/24 switchport mode trunk switchport trunk allowed vlan 2 no shut ! ip route 10.10.157.251 255.255.255.0 10.10.158.251 ! Switch4: ! int fa0/1 switchport mode trunk switchport trunk allowed vlan 2 no shut ! int fa0/24 switchport mode access switchport access vlan 2 not shut ! ip route 10.10.157.251 255.255.255.0 10.10.158.251 ! Now for the PCs, they need the following gateways configured: PC0 : 10.10.157.251 PC1 : 10.10.158.251 What we have achieved is a Layer2 network (VLAN1) from Switch2 towards PC0 and also extended the Layer2 network (VLAN2) from switch2 to PC1 via switches 3 and 4. Switch2 acts as the Layer3 gateway for both subnets and it is there that we do the inter-VLAN routing.   cheers, Seb. ... View more