1) What output you get when you run the following commands after sending interesting traffic:  show crypto isakmp sa,  sh crypto ipsec sa? Run as follows: ping 192.168.1.1 !(Intersting traffic) show crypto isakmp sa show crypto ipsec sa   2) Is the other side configured correctly, for both Phase 1 and Phase 2 as well as interesting traffic (192.168.1.0/24 -> 192.168.2.0/24)?   HTH, Meheretab ... View more

  Yes, similar route-map configuration can be used. When you redistribute Static to EIGRP replace the subnets keyword with metric and metric values.   Example: router eigrp 123  redistribute static STATIC-to-EIGRP metric 10000 100 255 1 1500 !   HTH, Meheretab ... View more

Yes, that is correct configuration.   HTH, Meheretab ... View more

  Hi,   I have questions on your setup:   1) Where is the ASA? Is it being replaced with Checkpoint? If yes, is " no passive-interface GigabitEthernet0/0/2.200" command still needed on OSPF connecting to Checkpoint? Do you need to replace it with different interface? 2) You mentioned that you are getting routes flapping between the two VRFs; which two VRFs?   HTH, Meheretab ... View more

  Hi Chris,   Could you share your configurations? We need to know what routing protocol you configured, and whether important multicast config is missing somewhere. When you add ip igmp join-group 239.0.1.2, you are informing that you are listening to that particular group. Is the phone also configured to listen to that particular multicast group?   HTH, Meheretab ... View more

  Hi,   It looks like you are using the same network on both sites; that is the reason for connectivity failure between the two sites. If you share your configuration, we can provide more advise.   HTH, Meheretab ... View more

Unfortunately, I do not have PacketTracer. Maybe somebody else will take a look and advise. I could take a look if you share the configurations though. Meheretab ... View more

  Hi,   I do not work on Cisco WLC so the information I provide you here could be different (as I work on Controllers from different vendor). Generally, if you configure the WLC with the SSIDs on the correct VLANs and the SVIs are configured on a switch where the DHCP server is configured as well, you do not need DHCP Proxy on the WLC. If the DHCP server is on a different LAN, then you will need DHCP Proxy on each SVI. The switchport connected with the APs need to be configured as a trunk port with the native VLAN on the AP management VLAN; the AP will get IP address from this VLAN. For clients connected with the SSID (eg. abc-ssid), they will get their IP address from the DHCP server providing IP address for the VLAN (which abc-ssid uses).   If you provide your configurations, we can take a look.   HTH, Meheretab   ... View more

  Hi,   Did you check whether there is QoS configured? Could you share the config of the switches hiding sensitive information?   HTH, Meheretab ... View more

Yes, it performs full capture. You can find example on the following link:-   https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3850-series-switches/117639-configure-wireshark-00.html   HTH, Meheretab ... View more