About Ronit Bhattacharjee

Ronit Bhattacharjee · 09-16-2024

We currently have our Cisco equipment synced to our NTP server using MD5 authentication, which works well. We have a directive from our cybersecurity team to upgrade to one of the SHA authentication mechanisms and facing a problem with that.Now, both...

Ronit Bhattacharjee · 08-05-2024

We are in the process of designing a medium sized MPLS network using NCS540 routers. A requirement was not to have a full-mesh of BGP neighbourships or use RR or to change the next-hop at every hop.So we decided to use BGP confed. Maybe our design as...

Ronit Bhattacharjee · 07-18-2023

We have some routers running Hub and Spoke DMVPN. Currently, we use the below ACL inbound on the Internet facing interface to secure the interface and allow only DMVPN. We have a mandate to migrate from IKEv1 to IKEv2. Will the ACL still be valid? If...

Ronit Bhattacharjee · 07-17-2023

Hi. I deployed a simple DMVPN setup with 1 Hub and 2 Spokes. I am running OSPF. Looks like, unlike EIGRP, OSPF doesn't use split-horizon to prevent Spoke routes from being advertised to other spokes. What is the most straight-forward way to prevent ...

Ronit Bhattacharjee · 07-11-2023

We use Rsyslog and LogAnalyzer as our Syslog collector. All our routers/switches/firewalls send Syslogs to Rsyslog. We would like timestamps in the log payload and this works fine for routers and switches, but Rsyslog cannot recognise the timestamp o...

Ronit Bhattacharjee · 10-03-2024

We requested Cisco to add this feature for FPR1120 running ASA code and it is now available cisco-asa-fp1k.9.22.1.1.SPA and above. Not sue if it is also compatible with older ASA5xxx series firewalls

Ronit Bhattacharjee · 10-03-2024

We requested Cisco to add this feature for FPR1120 running ASA code and it is now available cisco-asa-fp1k.9.22.1.1.SPA and above. Not sue if it is also compatible with older ASA5xxx series firewalls

Ronit Bhattacharjee · 09-24-2024

Are the 2 routers communicating via l2 vfi? If so, we have come across the same problem. Not only standby router, any device cannot reach the VIP via an l2 vfi, but if connected to physical interface, is OK.We opened a TAC case and were told HSRP wit...

Ronit Bhattacharjee · 09-17-2024

Hello. I did note that. The 40 digit Hex key is 20 bytes only, so should be OK. The problem is, it is considering the 40 digit hex key as text, so 40 bytes instead of 20. The disconnect is between hex and text.

Ronit Bhattacharjee · 08-18-2024

On IOS-XE, the only way we found to get around this situation is to create an EEM script which automatically checks for crypto keys at boot and generates them if missing !event manager session cli username "admin" privilege 15event manager applet Cry...

Member Since	‎11-26-2009 08:14 AM
Date Last Visited	‎10-08-2024 03:50 AM
Posts	101
Total Helpful Votes Received	107

User Statistics

User Activity

How to use NTPv4 SHA Hex key on Cisco Equipment?

NCS540: Cannot ping over MPLS VPN to non-adjacent router (BGP Confed)

ISR Access-List to match IKEv2 (DMVPN)

Split-Horizon - DMVPN with OSPF

RSyslog cannot parse timestamps from ASA Syslog

Re: How to disable usb port on ASA 5525-X

Re: USB on ASA

Re: Standby router is not able to ping Virtual ip of HSRP

Re: How to use NTPv4 SHA Hex key on Cisco Equipment?

Re: Cannot generate Crypto Keys on ASR 920 using Startup Config