About HIeu Phan

HIeu Phan · 04-08-2015

Hi everyone,I'm having BGP configured on a pair of 6880-X in VSS, and we are peering with 3 peers and 2 AS. For a while now, I noticed that while our inbound are somewhat LB between 2 peers (on on each AS, i'm not sure why the 2nd peer on the same AS...

HIeu Phan · 07-18-2014

hi everyone,Can someone explain to me the usage of VRF-Also? I have a pair of CAT6880-X. I setup SSH and want to lock down access to management to only my management subnet. Since I have a lot of SVI, i don't want people on those VLAN access the mana...

HIeu Phan · 04-18-2014

hi everyone,I'm running into an odd situation with DMZ config on 9.0(3). I manage to get it to work with an ANY statement, but i hate that. So below is how my current traffic is INSIDE--------------------------> DMZ --------nat-------->OUTSID...

HIeu Phan · 02-18-2014

Hi everyone,I'm working on building a Policing policy on our 6509-VSS (soon to be 6880-X VSS) because we are hosting a lot of customers environment and we want to throttle their bandwidth down, based on customers' SVIBelow is just a "paper" config th...

HIeu Phan · 11-25-2013

hi everyone,I just inherit an ASA from the previous System Admin and I need to configure it to allow a server sitting on DMZ to communicate with 2 (failover) servers on INSIDE zone on various UPD and TCP port.DMZ host : 192.168.3.202INSIDE host 1: 1...

HIeu Phan · 04-08-2015

Hi Minhda,it's not any particular prefix. I just want the outbound traffic to share out instead of just using one single best path. Patrick,all link has the same speed. That was an interesting concept, but it is still a little bit forcing and odd se...

HIeu Phan · 04-08-2015

Here is a quick diagram (i have to change the AS #, sorry guys :) )and also my BGP config router bgp 4444 bgp router-id 10.26.0.150 bgp log-neighbor-changes network 64.79.131.0 mask 255.255.255.192 network 64.79.151.0 mask 255.255.255.224 network 66....

HIeu Phan · 07-18-2014

hi Reza, thank you for answering my question. But that wasn't what i asked for. I know what is VRF. We are using VRF in our environment.My question is: CAT6880-X management port is a seperate port (not like Nexus where the management port is in a man...

HIeu Phan · 04-25-2014

Thank you Jose!I actually create a rule pretty similar to what you stated.Things are working really good now.Thank you for your help

HIeu Phan · 11-26-2013

Thanks Jon.I will give this a try tomorrow's morning. This same server also need an entire subnet of VDI desktops. How would my static for that part will look like?static (inside,dmz) 192.168.26.0 192.168.26.0 netmask 255.255.255.0 ?

Member Since	‎11-25-2013 05:04 PM
Date Last Visited	‎09-22-2018 11:11 PM
Posts	10
Total Helpful Votes Received	10

User Statistics

User Activity

BGP Outbound Load Balancing

VTY Access-class vrf-also question

ASA 9.0(3) - host in DMZ to access internet

Traffic Policing (or shaping) on 6509/6880-X

ASA 5505 - DMZ access INSIDE

Hi Minhda,it's not any

Here is a quick diagram (i

hi Reza, thank you for

Thank you Jose!I actually

Re: ASA 5505 - DMZ access INSIDE