About Seb Rupik

Seb Rupik · ‎07-18-2019

Hi there, The command set would look like: Grant Command Argument Permit ip access-list extended TEST- cheers, Seb.

Seb Rupik · ‎07-18-2019

Hi there, I suspect the gateway device ( 10.1.1.254) does not have a route for 10.1.123.0/24 via 10.1.1.252 , ie: ! ip route 10.1.123.0 255.255.255.0 10.1.1.252 ! Also, you state the guest VLAN is a /24, but the VLAN2 SVI is a /28 cheers, Seb .

Seb Rupik · ‎07-18-2019

Yes, it is not included as part of IP Base. cheers, Seb.

Seb Rupik · ‎07-18-2019

Hi there, The DATA license and contained features (including IP SLA) has been replaced by the AppX license. Application Experience (AX) IP Base + Security + advanced networking protocols: L2TPv3, BFD, MPLS, VRF, VXLAN [10] (Bandwidth <100Mbps) Application Experience: PfRv3, WAAS with AppNav, NBAR2, AVC, IP SLA Hybrid Cloud Connectivity: LISP, OTV (for Bandwidth <100Mbps), VPLS, EoMPLS Intelligent Web Caching: Akamai Connect See table 5 : https://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/data_sheet-c78-732542.html cheers, Seb.

Seb Rupik · ‎07-17-2019

Hi there, As it is a stack Prime does not support the upgrade process as it requires a .tar file. Personally I would tread carefully with letting Prime do switch upgrades at remote sites and always do them manually. https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-6/user/guide/bk_CiscoPrimeInfrastructure_3_6_0_UserGuide/bk_CiscoPrimeInfrastructure_3_6_0_UserGuide_chapter_0110.html#con_1076966 cheers, Seb.

Seb Rupik · ‎07-17-2019

Hi there, The highest WLC version which supports the AP1142 is 8.3.150.0 . You will need to downgrade your controller software to continue using that model of AP. cheers, Seb.

Seb Rupik · ‎07-17-2019

If you haven't configured a FHRP then the default gateway for all the PCs will be lost when core-switch-1 shuts down. You should configure a FHRP on both core switches and then re-configure the PCs to use the FHRP VIP as their default gateway. cheers, Seb.

Seb Rupik · ‎07-17-2019

Hi there, Can you confirm that HQCore1 is the STP root bridge for VLANs 10 & 30 and HQCore2 is the STP root bridge for VLANs 20 & 40. The first step in troubleshooting this should be to check the STP state of the VLANs. Can you share the output of sh spanning-tree vlan 10 on switches: HQCore1, HQCore2, HQ_S1, HQ_S2, HQ_S3, HQ_S4 . cheers, Seb.

Seb Rupik · ‎07-16-2019

Hi there, Can you be more specific about your definition of the topology going down? Were the PCs not able to reach their gateways? Could not reach each other in different VLANs? I assume you are running a FHRP between the core switches? With Core-switch-1 shutdown, what is the FRHP state of core-switch-2 for the VLANs? Also with core-switch-1 shutdown, what is the STP state on core-switch2, switch0 and switch2 ? cheers, Seb.

Seb Rupik · ‎07-16-2019

Hi there, The Layer3 link between HSRP peers provides a away for packets to be routed to an adjenect router which has aditional routes not available on the active HSRP router. You would need to run a IGP across this Layer3 link. Again, ensuring that the route bridge for a VLAN is also the active router keeps you STP topology in a optimal state. With VPC you still need a FHRP configure as the chassis do not share Layer3 information, so the same STP design decision must be implemented. cheers, Seb.

Seb Rupik · ‎07-16-2019

Hi Brendon, the remote management installation looks good. The presence of the line "* HTTP error before end of send, stop sending" hints at an issue with the HTTP service running in the virtual service. You are already using the latest (and only) release of this OVA and I have checked the cisco bug website for any likely culprits and nothing is apparent. I'm afraid I can't help any further, Seb.

Seb Rupik · ‎07-16-2019

Hi Chris, I've got to hand it to you, your testing certainly is thorough! I have just tried to create a new application at apiconsole.cisco.com for the PSIRT API, but the API is no longer available to me....thankfully I still have my old application registered so have retained access. I can only suggest that you raise a support ticket with cisco as this appears to be some backend issue. @Omar Santos can you shed any light on the status of the PSIRT API? cheers, Seb.

Seb Rupik · ‎07-16-2019

hmmmm, ok. On the CSR, what is the output of show virtual-service detail

Seb Rupik · ‎07-16-2019

Well at least that is a different error message. Try the same command, but remove the '-3' from the end and let curl negotiate the cipher to use...

Seb Rupik · ‎07-16-2019

Hi there, Looking at your curl command it is not syntactically correct: no space before '-H' , "--insecure" should have no space and "-3" needs a hypen. Try pasting the following: curl -v -X POST https://10.122.66.115/api/v1/auth/token-services -H "Accept:application/json" -u "admin:password" -d "" --insecure -3 cheers, Seb.

Date Registered	‎06-01-2013 12:13 PM
Date Last Visited	‎07-18-2019 06:02 AM
Total Messages Posted	2,505
Total Helpful Votes Received	2266

Re: it is Possible with ACS 5.8?

Re: How to route traffic to another VLA...

Re: Cisco Router 4221 - IP SLA ICMP-ech...

Re: Cisco Router 4221 - IP SLA ICMP-ech...

Re: Using prime to upgrade 3850 stack

Re: AIR-CAP 1142 not coonnect to vWLC

Re: High Availability For 3650 Catalyst...

Re: HSRP not working on subinterfaces

Re: High Availability For 3650 Catalyst...

Re: HSRP and spanning tree

Re: Can't do CURL REST API on CSR1000V

Re: PSIRT OpenVuln API authentication i...

Re: Can't do CURL REST API on CSR1000V

Re: Can't do CURL REST API on CSR1000V

Re: Can't do CURL REST API on CSR1000V