Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Seb Rupik
Seb Rupik
Member since
06-01-2013
.jpg){kind=icon}
VIP Advocate
Network Engineer contractor based in the UK.
Personal Web Page : http://configif.wordpress.com
2332
Posts
2121
Helpful
435
Solutions
Recent Badges
Awards
Created by
Seb Rupik
in Cisco Software Discussions
Seb Rupik
in Cisco Software Discussions
05-24-2019
02:49 AM
05-24-2019
02:49 AM
Hi there,
Try these:
9.4(4)-36 https://software.cisco.com/download/home/283123066/type/280775065/release/9.4.4%20Interim
asdm-7.12.1 https://software.cisco.com/download/home/283123066/type/280775064/release/7.12.1
IPS-SSP_10-K9-sys-1.1-a-7.3-5-E4 https://software.cisco.com/download/home/283308319/type/282549758/release/7.3(5)E4
cheers,
Seb.
... View more
05-23-2019
07:55 AM
Hi there,
It is not an ideal solution, but simply configuring both ports as mode access will ensure the frame transits the link untagged. It will then be tagged with the other VLAN ID on ingress.
!! SW01
!
int gi1/0/24
switchport mode access
switchport access vlan 1 spann bpdufilter enable
!
!! SW02
!
int gi1/0/48
switchport mode access
switchport access vlan 250 spann bpdufilter enable
!
You need to enable BPDU filter at both ends to stop the BPDU's from being transmitted and then being received by the other switch which will place the switchport in err-disabled.
cheers,
Seb.
... View more
Created by
Seb Rupik
in Network Management
Seb Rupik
in Network Management
05-22-2019
02:07 PM
05-22-2019
02:07 PM
Hi there,
If I am understanding you right, why not assign the cli command to a variable and then reference it in the applet. Like:
action 0.1 set CMD01 "show platform software status control-processor brief | append bootflash:/rpcpu1min.txt" action 1.1 cli command "$CMD01
...you can then use $CMD01 elsewhere.
cheers,
Seb.
... View more
Created by
Seb Rupik
in Network Management
Seb Rupik
in Network Management
05-22-2019
01:59 PM
05-22-2019
01:59 PM
Hi there,
Try adding the following actions to the applet. First returns the device hostname (ie, "hostname foo", and the second regex's the result to pluck out the hostname ("foo"):
action 0.8 cli command "sh run | inc hostname"
action 0.9 regex "(?<=\s).*" "$_cli_result" $_regex_hostname action 1.0 mail server "$_email_server" to "$_email_to" from "$_email_from" subject "$_event_pub_time: Port Security Violation occured on $_regex_hostname" body "$_syslog_msg"
cheers,
Seb.
... View more
05-22-2019
12:46 AM
Hi there,
Other than following the advice for the advisory and applying an ACL to block suspicious source IPs or rate-limiting when the CPU spike is detected you have one other option.
Although this ASA is offering a Anyconnect service, you could feasibly block certain IP ranges that have been allocated to certain RIRs. Say for example if you know users are never going to USA, Korea, China, Russia then look up the allocations for those countries and block them. Or it may be easy to look at it the other way and determine the list of subnets you wish to permit.
Agreed this may be a fairly onerous task but it is one way to partially preemptively mitigate the risk.
9.1(7)-32 is the current recommend release for the 5540. It is probably worth considering that it is quite old already and probably has a string of new vulnerabilities against it.
cheers,
Seb.
... View more
05-22-2019
12:03 AM
No, there inter-VLAN routing will work fine with the current configuration.
cheers,
Seb.
... View more
05-21-2019
08:12 AM
Yes, you should encounter no issues routing unicast traffic between VLANs.
cheers,
Seb.
... View more
05-21-2019
07:24 AM
IP SLA is a good tool. I once worked with a solution where it was configured to monitor a pretty sizable 'campus' network where there were concerns regarding VOIP performance. The SLA jobs were polled via SNMP and the results graphed in Opsview, it gave a good overview.
iperf is great, but there is no (easy) way to aggregate lots of results into a single dashboard for monitoring.
cheers,
Seb.
... View more
Created by
Seb Rupik
in NSO Developer Hub Discussions
Seb Rupik
in NSO Developer Hub Discussions
05-21-2019
06:51 AM
05-21-2019
06:51 AM
Hi there,
You could create a task in the playbook to run after the backups are copied to the local server which would call a python script to parse the newly created config backup and find/replace the interface strings. The next task would then upload the adjusted config to the 9k.
Something like:
tasks:
- <backup_config_task>
- name: adjust interfaces
local_action: command python interface_adjust.py {{backup_config_location}} - <upload_config>
cheers,
Seb.
... View more
05-21-2019
06:47 AM
Hi there,
Depending on the OS of the nodes at each end, iperf would be a good option to give you the metrics.
https://iperf.fr/
cheers,
Seb.
... View more
05-21-2019
04:36 AM
If you get access to the API, please post the details here for others to follow.
cheers,
Seb.
... View more
05-21-2019
03:26 AM
Hi Ricardo,
From the FAQ:
".... ones that will require some entitlement to access them"
If the EoX API is not visible then it will be down to lack of entitlement via you CCO account you are using. Don't worry I don't have access to it either! :)
You will have to contact cisco support:
https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html
...there doesn't appear to be any other way to contact the team running the cisco API console.
Quite why you need special entitlement to access the EoX API info when the data is freely available under the cisco product section of the website is a mystery!
cheers,
Seb.
... View more
05-21-2019
03:11 AM
Hi there,
You need to register for access to the various APIs via apiconsole.cisco.com . Once you have you will be given the required client_id and client_secret .
Once you have these and knowledge of correct URLs you can make REST requests via multiple means, curl, postman, python-requests, etc .
Regarding using the credentials, you use them to obtain an Authorization token, by making a request to:
https://cloudsso.cisco.com/as/token.oauth2
...passing the client_id and client_secret in the body of the POST request.
Once you have the AuthZ token you use that in all subsequent API REST requests.
cheers,
Seb.
... View more
05-21-2019
03:04 AM
The access-list 10 will have a default deny, since you have in applied INbound on each sub-interface, you will be blocking traffic on all but 0/0/0.40 .
For now, remove the ip access-group 10 in from all sub-interfaces and you will get working inter-vlan comms.
Let us know what inter-vlan security you require and we can suggest the correct ACLs and positions.
cheers, Seb.
... View more
05-21-2019
02:31 AM
If you want to restrict SSH access to VLAN10 SVI only then you need to look at MPP:
https://www.cisco.com/c/en/us/td/docs/ios/security/configuration/guide/sec_mgmt_plane_prot.html
cheers,
Seb.
... View more
yesterday
Hi there, Try these:
9.4(4)-36https://software.cisco.com/download/home/283123066/type/280775065/rele...
Thursday
Hi there, It is not an ideal solution, but simply configuring both ports
as mode access will ensure ...
Created by
Seb Rupik
in Network Management
Wednesday
Wednesday
Hi there, If I am understanding you right, why not assign the cli
command to a variable and then ref...
Created by
Seb Rupik
in Network Management
Wednesday
Wednesday
Hi there, Try adding the following actions to the applet. First returns
the device hostname (ie, "ho...
Wednesday
Hi there, Other than following the advice for the advisory and applying
an ACL to block suspicious s...
Tuesday
IP SLA is a good tool. I once worked with a solution where it was
configured to monitor a pretty siz...
Tuesday
Hi there, You could create a task in the playbook to run after the
backups are copied to the local s...
Tuesday
Hi there, Depending on the OS of the nodes at each end, iperf would be a
good option to give you the...
Tuesday
If you get access to the API, please post the details here for others to
follow. cheers, Seb.
Tuesday
Hi Ricardo, From the FAQ: "....ones that will require some entitlement
to access them" If the EoX AP...
Tuesday
Hi there, You need to register for access to the various APIs via
apiconsole.cisco.com . Once you ha...
Tuesday
The access-list 10 will have a default deny, since you have in applied
INbound on each sub-interface...
Public Statistics
| Date Registered | 06-01-2013 12:13 PM |
| Date Last Visited | 05-25-2019 03:16 PM |
| Total Messages Posted | 2,332 |
| Total Helpful Votes Received | 2121 |
Helpful Votes Given To
.jpg "Hall of Fame Cisco Employee"){kind=icon}
Helpful Votes From
Awards
Cisco Designated VIPs
2019 Switching, Small Business, Routing
Community Spotlight Award
Doc/Video
Community Spotlight Award
Rookie Award September 2013
