Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
There are a number of guides on the internet related to Windows CA and iPhone but I did not feel that any of them put all the peaces together such that someone could get AnyConnect certificate authentication up with little fuss. Hence, this document....
Very little info to go on but...I wouldn't pay attention to the flood bit as depending on the port config and other thingss it could be normal.I think the key here is that you said the mcast should never get to the 6500. If this is the case it is lik...
Not familar with the output from that command. The common way to look at switching path stats for IOS is "show int stats" which will show how many packets hit each switching path on an interface.-Ben
Just to double check make sure you try removing and adding the policy back once "mls qos trust dscp" was removed. They might have gotten into an argument with each other as the "trust" command sets a bit in our internal header that precludes remarkin...
I see that you have a ip helper address on the BVI but it does not make any sense if the helper address is on the same subnet. ip helper is for off subnet.Also I see the folowing commands on the dot1 radio interfacebridge-group 1 subscriber-loop-cont...