Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About faizan.khan
Stats
Member since
09-11-2017
19
Posts
0
Helpful
2
Solutions
02-13-2019
04:24 AM
02-12-2019
07:08 AM
Nexus 9396 (NX-OS) only supports Microsoft NLB in unicast mode by statically configuring an ARP entry for the NLB cluster. In the example, this is 200.200.200.200 / c8c8.c8c8.c8c8. https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/118951-config-nexus9000-unicast-nlb-00.html The letter "All NLB cluster members must be reachable via the same port-channel / physical interface from the perspective of the Nexus 9000.": Means that all cluster members (ie, clusters with cluster IP 200.200.200.200.2005) must sit behind Po3 (ie. behind a logical / physically outgoing interface from the Nexus pair perspective). If there are more cluster members then they need to be connected to the switch that is connected with the Po3 to the Nexus pair. Of course, this can be a switch pair running MLAG (vPC) against N9396-1 and N9396-2. It is strongly recommended to prune a VLAN 200 to minimize the impact that NLB has in unicast mode (when it uses flooding). Alternative: 1. Look at the Nexus 9300-EX or later. The platform also supports NLB in Multicast mode which is better than driving in unicast. 2. Evaluate if ITD (Intelligent Traffic Director) could fit. This is a built-in load balancing function in the NX-OS. Supports for IPv4 in Nexus 9396. Requires a Network Services license. Attached are examples of how ITD can replace NLB.
... View more
02-12-2019
03:30 AM
We Want Cisco's help to confirm that if this will work.
BIOS: version 07.41
NXOS: version 7.0 (3) I2 (2d)
BIOS compile time: 10/12/2015
NXOS image file is: bootflash: ///nxos.7.0.3.I2.2d.bin
NXOS compile time: 4/24/2016 13:00:00 [04/24/2016 22:28:19]
We will move trunks to 2 Nexus 9396, the servers are available in 2 HP switches.
What we fear is that Microsoft NLB will not work when moving, given the "Design Considerations" below.
Or does it work in our version?
So, what does Cisco recommend how to configure Microsoft NLB, is multicast or unicast mode?
We intended to try with unicast NLB, and then it says this:
Design Considerations:
With these static entries in place, you must account for these designs considerations:
"All NLB cluster members must be reachable via the same port-channel / physical interface from the perspective of the Nexus 9000.
"The ability to adapt to change in the physical location of the NLB cluster members, due to vMotion, is not possible without an appropriate design.
https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/118951-config-nexus9000-unicast-nlb-00.html
... View more
Labels:
Created by
faizan.khan
in Network Access Control
in Network Access Control
09-18-2018
11:30 PM
09-18-2018
11:30 PM
What version of ISE? --- Cisco ISE version 2.1.0.474
Are you using the guest (CWA) portal? --- Yes Do you have AD allowed in your guest identity store ? --- Yes
... View more
Created by
faizan.khan
in Network Access Control
in Network Access Control
09-18-2018
07:57 AM
09-18-2018
07:57 AM
User logs in to wireless network with correct(verified) AD credentails ISE throws "invalid password" Checking through ISE guest logs I notice following error logged.
2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] guestaccess.flowmanager.step.guest.CredentialStepExecutor -:ex-tieto-tvanderhaar:- User (ex-tieto-tvanderhaar) login failed 2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] cpm.guestaccess.auth.authentication.NAAuthResultProcessor -:ex-tieto-tvanderhaar:- Can not find the authStoreGUID in the authenticated authentication Result!!
AD diagnostics done on ISE no problems found!
... View more
- Tags:
- authentication
- login
Labels:
Created by
faizan.khan
in Network Access Control
in Network Access Control
09-18-2018
07:55 AM
09-18-2018
07:55 AM
User logs in to wireless network with correct(verified) AD credentails ISE throws "invalid password" Checking through ISE guest logs I notice following error logged.
2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] guestaccess.flowmanager.step.guest.CredentialStepExecutor -:ex-tieto-tvanderhaar:- User (ex-tieto-tvanderhaar) login failed 2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] cpm.guestaccess.auth.authentication.NAAuthResultProcessor -:ex-tieto-tvanderhaar:- Can not find the authStoreGUID in the authenticated authentication Result!!
AD diagnostics done on ISE no problems found!
... View more
Labels:
Created by
faizan.khan
in Other Network Architecture Subjects
in Other Network Architecture Subjects
09-14-2018
05:37 AM
09-14-2018
05:37 AM
I have upgraded Cisco Prime Infrastructure to version 3.4 and WSA stuck in "is starting" mode: There are two WSA bugs in RELEASE NOTES that should be corrected in version 3.4 but I do not have permission to view them.
... View more
Labels:
Created by
faizan.khan
in Network Access Control
in Network Access Control
09-07-2018
12:18 AM
09-07-2018
12:18 AM
It worked... Thanks alot :)
... View more
Created by
faizan.khan
in Optical Networking
in Optical Networking
06-20-2018
03:58 AM
06-20-2018
03:58 AM
Environment:
We have built an environment with DNA Center 1.2.1 that contains 1 bordernode C9500-24Y4C 1st EDGEnode C9300-48P Where the border node is connected to an external router with AS 65000 (asr920) The SDA environment has AS 65244 Issue: We are having trouble getting DHCP for the client network to work. We have an ip helper pointing to a network that is located in the as920. The router gets a dhcp request, sends back a victim to the border, but the offer never reaches the client
After some trubleshooting we've realized that it's our C9500-24Y4C that does not match, we’ve replaced it with the C9300-48P and DHCP is working fine. Assume it's a bug in the C9500-24Y4C when it's completely new and t here is only one software to run on that model today, and it's 16.8.1a ?
Any ideas?
... View more
Labels:
Created by
faizan.khan
in Other Network Architecture Subjects
in Other Network Architecture Subjects
05-30-2018
12:01 AM
05-30-2018
12:01 AM
There is no Assurance client data in DNAC for wireless. (Cisco ONE - 3504 Wireless Controller)
... View more
Labels:
Created by
faizan.khan
in Network Access Control
in Network Access Control
02-01-2018
01:12 AM
02-01-2018
01:12 AM
We have a problem in ISE Version 2.3.0.298
where you can create an account in Finland but your account will be logged the accounts generated by the Sponsor Portal become inactive. This is apparently a bug according to Cisco when "San Jose" is default. I have not managed to delete it because it is default. It is Time Zone that creates this according to Cisco?
... View more
Created by
faizan.khan
in Email Security
in Email Security
01-10-2018
06:56 AM
01-10-2018
06:56 AM
How do we create a Certificate Request for Higher Encryption than SHA1, and then import the certificate into Ironport?
... View more
Created by
faizan.khan
in Email Security
in Email Security
01-10-2018
06:53 AM
01-10-2018
06:53 AM
How do we create a Certificate Request for Higher Encryption than SHA1, and then import the certificate into Ironport?
@danielbarri wrote:
We are looking at how to use TLS when sending and receiving mail via Cisco Ironport C380 and have encountered some troubles, which we need help with:
1. Incoming: In order to receive TLS mail we need a certificate and when we generate the request file (via web GUI), we only get them with SHA1 algorithm. How do we get them with SHA256 algorithm?
... View more
Created by
faizan.khan
in XR OS and Platforms
in XR OS and Platforms
09-28-2017
06:49 AM
09-28-2017
06:49 AM
Hello, We tried to operate QSFP-H40G-ACU7M = on our ASR9k6 (Version 5.3.1) on our 2x40 line card. But we get the following: DESCR: "Unknown or Unsupported CPAK Module" Operational data for interface FortyGigE0 / 1/0/0: State: Administrative state: enabled Operational state: Down (Reason: Security failure (not a valid part)) LED state: Red On What can be the problem? If I can see that these modules are supported on ASR9k in our SW version? On Table# 8: https://www.cisco.com/c/en/us/products/collateral/routers/asr-9000-series-aggregation-services-routers/data_sheet_c78-624747.html BTW: Although! just for testing, we have also run with transceiver permit pid all, same result.
... View more
Labels:
Created by
faizan.khan
in Nexus
02-12-2019
02-12-2019
Nexus 9396 (NX-OS) only supports Microsoft NLB in unicast mode by
statically configuring an ARP entr...
Created by
faizan.khan
in Nexus
02-12-2019
02-12-2019
We Want Cisco's help to confirm that if this will work. BIOS: version
07.41 NXOS: version 7.0 (3) I2...
Created by
faizan.khan
in Data Center Switches
10-25-2018
10-25-2018
Planning to upgrade our Cisco Catalyst 6807xl Sup6T VSS clusters 15.4
(1) SY2-> 15.5 (1) SY1 Can we ...
Created by
faizan.khan
in Network Access Control
09-18-2018
09-18-2018
What version of ISE? --- Cisco ISE version 2.1.0.474 Are you using the
guest (CWA) portal? --- YesDo...
Created by
faizan.khan
in Network Access Control
09-18-2018
09-18-2018
User logs in to wireless network with correct(verified) AD credentails
ISE throws "invalid password"...
09-18-2018
User logs in to wireless network with correct(verified) AD credentails
ISE throws "invalid password"...
Created by
faizan.khan
in Other Network Architecture Subjects
09-14-2018
09-14-2018
I have upgraded Cisco Prime Infrastructure to version 3.4 and WSA stuck
in "is starting" mode:There ...
06-20-2018
Environment: We have built an environment with DNA Center 1.2.1 that
contains1 bordernode C9500-24Y4...
Created by
faizan.khan
in Other Network Architecture Subjects
05-30-2018
05-30-2018
There is no Assurance client data in DNAC for wireless. (Cisco ONE -
3504 Wireless Controller)
02-01-2018
We have a problem in ISE Version 2.3.0.298 where you can create an
account in Finland but your accou...
Created by
faizan.khan
in Email Security
01-10-2018
01-10-2018
How do we create a Certificate Request for Higher Encryption than SHA1,
and then import the certific...
Created by
faizan.khan
in Email Security
01-10-2018
01-10-2018
How do we create a Certificate Request for Higher Encryption than SHA1,
and then import the certific...
Public Statistics
| Date Registered | 09-11-2017 02:17 AM |
| Date Last Visited | 09-18-2019 04:12 AM |
| Total Messages Posted | 19 |
