Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm trying to allow UPnP ( I know - bad, don't do it, unsafe blah blah) on a single vlan dedicated to gaming. I've got a pfsense firewall with upnp enabled handling all traffic for this vlan to the internet. access switch (VLAN122) -> Core Switch ...
I'm attempting to peer with an internal BGP blackhole server over the Gi0 Management Interface (vrf Mgmt-intf)The ASR1001 router only has three connections - Outside (peered with ISP) Inside (DMZ) and the management interface. The internal bgp peer ...
Using a 1001x ASR and my 3 ISP outside connections, plus my inside interfaces toward the firewall are all via sub-interfaces on a 10 gig link. I looking for best practice on implementing uRPF on my router - would I apply ip verify unicast source re...
Cisco ASR 1001x Cisco IOS XE Software, Version 17.03.05I have implemented BGP peering with Team-Cymru for ipv4 and ipv6 bogons. The routes from this peering are community-matched for "next hop" to either 192.0.2.1 or 100::/64 - both of which have a...
Cisco 5520 / 8.5.140Starting to roll out IPV6 testing on the WLC and I'm running in to trouble adding vlans with IPV6 interfaces to the controller.I've added 1 dynamic interface (vlan 120) with a ipv6 address / 64 / and the link-local address of a ro...
So - to wrap up this thread for anyone searching for a similar situation.....I have a basic Layer 2 network with a 6807-XL core, and 3650 access switches that are dual homed to the core.Cisco Firepower sits in the middle of all vrf/vlans providing ro...
As it turns out, the commands aren't well documented in the software - it needs to happen under the vlan config - I was trying:CORE6KSW01(config)#int vlan 122CORE6KSW01(config-if)#no ip igmp snCORE6KSW01(config-if)#no ip igmp ? access-group IGMP ...
Thanks for the help!The core switch is a 6807-XL and the access layer are primarily 3650's. Since igmp snooping is on by default, is it possible to disable it per vlan? or is it a global command? I assume it's on by default for a reason. Howeve...
Sorry was following along:vif definition Mgmt-intfaddress-family ipv4 unicastrd x:y <+++++++++ This is required to configure the VRF under BGProute-target both x:y. <+++++++++ This is required for the export process (VRF to GRT) ...
