Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm trying to allow UPnP ( I know - bad, don't do it, unsafe blah blah) on a single vlan dedicated to gaming. I've got a pfsense firewall with upnp enabled handling all traffic for this vlan to the internet. access switch (VLAN122) -> Core Switch ...
I'm attempting to peer with an internal BGP blackhole server over the Gi0 Management Interface (vrf Mgmt-intf)The ASR1001 router only has three connections - Outside (peered with ISP) Inside (DMZ) and the management interface. The internal bgp peer ...
Using a 1001x ASR and my 3 ISP outside connections, plus my inside interfaces toward the firewall are all via sub-interfaces on a 10 gig link. I looking for best practice on implementing uRPF on my router - would I apply ip verify unicast source re...
Cisco ASR 1001x Cisco IOS XE Software, Version 17.03.05I have implemented BGP peering with Team-Cymru for ipv4 and ipv6 bogons. The routes from this peering are community-matched for "next hop" to either 192.0.2.1 or 100::/64 - both of which have a...
WLC 5520 now running 8.10.162.0 (upgrade from 8.5.140.0) I've noticed two new fields on the WLC AAA tabBoth of the new fields show as ACA server. I've looked at the WLC help files, and documentation for the release, and searched the web for inform...
So - to wrap up this thread for anyone searching for a similar situation.....I have a basic Layer 2 network with a 6807-XL core, and 3650 access switches that are dual homed to the core.Cisco Firepower sits in the middle of all vrf/vlans providing ro...
As it turns out, the commands aren't well documented in the software - it needs to happen under the vlan config - I was trying:CORE6KSW01(config)#int vlan 122CORE6KSW01(config-if)#no ip igmp snCORE6KSW01(config-if)#no ip igmp ? access-group IGMP ...
Thanks for the help!The core switch is a 6807-XL and the access layer are primarily 3650's. Since igmp snooping is on by default, is it possible to disable it per vlan? or is it a global command? I assume it's on by default for a reason. Howeve...
Sorry was following along:vif definition Mgmt-intfaddress-family ipv4 unicastrd x:y <+++++++++ This is required to configure the VRF under BGProute-target both x:y. <+++++++++ This is required for the export process (VRF to GRT) ...
