A few more questions. From the host device can you ping the switch IP  10.1.1.252   From the switch can you ping the gateway IP  10.1.1.254   What is the gateway device? Can it ping both switch IP  addresses (VLAN SVIs 1 and 2)?   Which switchport is the gateway device connected to?   cheers, Seb. ... View more

Hi there, The command sh arp , will display the ARP cache of the ASA sorted by interface. The outside interface is a /30 so I would expect to see only one other dynamic address. This will be your gateway. Take note of the MAC address.   It sounds like your ASA outside is connected to a switch so the Layer 2 connection is obvious but the Layer3 endpoint needs to be discovered. On the upstream switches issue the command: sh mac-address | inc <MAC_ADDRESS_FROM_ASA_ARP_CACHE> ...this will show which interface the MAC address has been learnt on. Keeping hopping through your network using this command and you'll eventually find the gateway.   cheers, Seb. ... View more

  Hi there,   The command set would look like:   Grant Command Argument Permit ip access-list extended  TEST-   cheers, Seb. ... View more

Hi there, I suspect the gateway device ( 10.1.1.254) does not have a route for 10.1.123.0/24 via 10.1.1.252  , ie:   ! ip route 10.1.123.0 255.255.255.0 10.1.1.252 !   Also, you state the guest VLAN is a /24, but the VLAN2 SVI is a /28    cheers, Seb . ... View more

Hi there, As it is a stack Prime does not support the upgrade process as it requires a .tar file.   Personally I would tread carefully with letting Prime do switch upgrades at remote sites and always do them manually. https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-6/user/guide/bk_CiscoPrimeInfrastructure_3_6_0_UserGuide/bk_CiscoPrimeInfrastructure_3_6_0_UserGuide_chapter_0110.html#con_1076966   cheers, Seb. ... View more

Hi there, The highest WLC version which supports the AP1142 is  8.3.150.0 . You will need to downgrade your controller software to continue using that model of AP.   cheers, Seb. ... View more

If you haven't configured a FHRP then the default gateway for all the PCs will be lost when core-switch-1 shuts down.   You should configure a FHRP on both core switches and then re-configure the PCs to use the FHRP VIP as their default gateway.   cheers, Seb. ... View more

Hi there, Can you be more specific about your definition of the topology going down? Were the PCs not able to reach their gateways? Could not reach each other in different VLANs?   I assume you are running a FHRP between the core switches?   With Core-switch-1 shutdown, what is the FRHP state of core-switch-2 for the VLANs? Also with core-switch-1 shutdown, what is the STP state on core-switch2,  switch0 and switch2 ?   cheers, Seb. ... View more

Hi there, The Layer3 link between HSRP peers provides a away for packets to be routed to an adjenect router which has aditional routes not available on the active HSRP router. You would need to run a IGP across this Layer3 link.   Again, ensuring that the route bridge for a VLAN is also the active router keeps you STP topology in a optimal state.    With VPC you still need a FHRP configure as the chassis do not share Layer3 information, so the same STP design decision must be implemented.   cheers, Seb.     ... View more

Hi Brendon, the remote management installation looks good.   The presence of the line "* HTTP error before end of send, stop sending" hints at an issue with the HTTP service running in the virtual service. You are already using the latest (and only) release of this OVA and I have checked the cisco bug website for any likely culprits and nothing is apparent.   I'm afraid I can't help any further,   Seb. ... View more

Hi Chris, I've got to hand it to you, your testing certainly is thorough!   I have just tried to create a new application at apiconsole.cisco.com for the PSIRT API, but the API is no longer available to me....thankfully I still have my old application registered so have retained access.   I can only suggest that you raise a support ticket with cisco as this appears to be some backend issue. @Omar Santos can you shed any light on the status of the PSIRT API?   cheers, Seb. ... View more

hmmmm, ok. On the CSR, what is the output of show virtual-service detail ... View more