Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About BigK
Online
BigK
Member since
07-20-2017
Beginner
01-26-2019
01:12 PM
Would you happen to have one for ise 2.4. I would like to create a profile for a ipphone. I was able to enable dot1.x in the call manager and also configured a swithport interface for dot1.x. Now next is to create a profile in ISE.
Thanks
Karim
... View more
01-23-2019
08:03 PM
Switch#sho run
! hostname Switch
!
vlan 100 name Management ! vlan 120 name PCs ! vlan 150 name Phones ! ! ! interface GigabitEthernet1/0/1 switchport trunk native vlan 100 switchport mode trunk storm-control broadcast level 0.10 storm-control multicast level 0.10 spanning-tree portfast ! interface GigabitEthernet1/0/2 switchport access vlan 120 switchport mode access switchport voice vlan 150 spanning-tree portfast !
interface Vlan1 no ip address shutdown ! interface Vlan100 description VLAN_Management ip address 10.22.100.10 255.255.255.0 ! interface Vlan120 ip address 10.22.120.10 255.255.255.0 ! interface Vlan150 ip address 10.22.150.10 255.255.255.0 ! ip route 0.0.0.0 0.0.0.0 10.22.100.1 ! control-plane service-policy input system-cpp-policy ! ! line con 0 stopbits 1 line aux 0 stopbits 1 line vty 0 4 login local transport input all line vty 5 15 login local transport input all
! end
===================================================
Switch#ping 10.5.6.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.5.6.100, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/3 ms Switch#ping 10.5.6.100 source vlan120 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.5.6.100, timeout is 2 seconds: Packet sent with a source address of 10.22.120.10 ..... Success rate is 0 percent (0/5)
could someone please tell me why I can not ping the remote ip 10.5.6.100 when it source is vlan interface.
Thanks
... View more
Labels:
12-19-2018
03:31 PM
That is the new fw ASA 5516. All the info are on the post.
Thanks
K
... View more
12-19-2018
01:20 PM
Hello,
I am upgrading to 5516
Cisco Adaptive Security Appliance Software Version 9.5(1) Device Manager Version 7.5(1)
on my old fw I see the command below
F03# sho run | i user-message user-message "This is not a company Asset"
I am not able to locate the command user-message on my new FW
... View more
Labels:
12-07-2018
07:31 AM
@Leo Laohoo. Thanks!
stack wise, I have some site that have 3 some 2 and some just single switch. Leo, any examples out there that I can follow. I will google it, but just asking in case you know of helpful site.
Thanks
Karim
... View more
12-06-2018
08:34 AM
@shaps Thanks!
I was looking at cattools but I don't think it has the function for IOS upgrade. do you have any examples of secureCRT or Scripts on how to do that? I have secureCRT
... View more
12-06-2018
08:12 AM
Hello,
I have a about 40 switches that would like to upgrade from 3.03.5SE to 3.6.8 . I would like to know if there is an easy method or tools to upgrade all of them at once with no issue.
Thanks
Karim
... View more
Labels:
11-21-2018
10:30 AM
@Georg Pauwen
Sorry, The question was not clear. I asked for an example of spoofing but I think I figured it out.
The reason we have the acl is that since this is a guest SSID. The user will get an ip adress via DHCP (10.x.x.x) and since we have 10.x.x.x . 192 and 172 networks. the ACL will deniy any to 10.x 192.x and 172.x
... View more
11-19-2018
10:32 AM
@Georg Pauwen
Yes, it used for wireless clients.
Would it possible to provide an example ?
Thanks
Karim
... View more
11-19-2018
09:41 AM
I saw this access-list applied to a vlan interface on the switch. I don't think it serves any purpose and would like a second opinion.
**************************************
interface Vlan72 description VLAN_WirelessGuests ip address 10.100.72.1 255.255.255.0 ip access-group WRLS-GUEST-BLOCK in
*********************************************
Extended IP access list WRLS -GUEST-BLOCK 10 deny ip 172.16.0.0 0.15.255.255 any 20 deny ip any 172.16.0.0 0.15.255.255 30 deny ip 192.168.0.0 0.0.255.255 any 40 deny ip any 192.168.0.0 0.0.255.255 50 deny ip any 10.0.0.0 0.255.255.255 60 permit ip any any
Thanks
Karim
... View more
- Tags:
- Access List
Labels:
11-16-2018
02:09 PM
The Answer is YES
BGProuter1 interface GigabitEthernet0/0/0 ip address 192.168.0.1 255.255.0.0 duplex auto speed auto router bgp 1 bgp log-neighbor-changes no synchronization neighbor 192.168.0.2 remote-as 2
BGProuter2 interface GigabitEthernet0/0/0 ip address 192.168.0.2 255.255.255.0 duplex auto speed auto router bgp 2 bgp log-neighbor-changes no synchronization neighbor 192.168.0.1 remote-as 1
BGProuter1#sho ip bgp summary BGP router identifier 192.168.0.1, local AS number 1 BGP table version is 1, main routing table version 6 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 192.168.0.2 4 2 7 7 1 0 0 00:05:29 4 BGProuter2 #sho ip bgp summary BGP router identifier 192.168.0.2, local AS number 2 BGP table version is 1, main routing table version 6 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 192.168.0.1 4 1 6 6 1 0 0 00:04:18 4
... View more
11-09-2018
10:15 AM
@Tanmoy your question is not clear. Please draw the topology or provide more info.
... View more
@AndreaTornaghi
Thanks Andrea,
After some research I found out that I can do Cisco IOS Embedded Packet Capture
since I have 4431 router. I will do some research about it and let you know.
Thanks
Karim
... View more
Created by
BigK
in Identity Services Engine (ISE)
Thursday
Thursday
The remove option on ISE 2.4 does not remove the endpoint, it just marks
it as static false. anyone ...
Wednesday
@Ben Walters Ben, I checked again. still no changes. I imported the
template with the ip-phone Mac a...
Wednesday
@Mohammed al Baqari Thanks Mo! could you kindly show me how to achieve
that with a single profile in...
Monday
@Mohammed al Baqari @socratesp1980 @bern81 Thanks! what I am trying to
do is to have devices connect...
Sunday
Trying to understand and apply policy set on ISE 2.4 on the lab
environment. Your comments and advic...
a week ago
I just imported 2 Cisco IP-phones to ISE. Endpoint profile showing as
unknown. They are authenticate...
2 weeks ago
Sometimes small details in the config can taking away from the actual
problem. I redid the config on...
2 weeks ago
@pan Here is the issue Event 5400 Authentication failed Failure Reason
15039 Rejected per authorizat...
2 weeks ago
sho authentication sessions Interface MAC Address Method Domain Status
Session IDGi1/0/2 c4b9.cdb5.3...
2 weeks ago
sho authentication sessions Interface MAC Address Method Domain Status
Session IDGi1/0/2 c4b9.cdb5.3...
2 weeks ago
@pan I changed the interface to be 1/0/2 still same issue Interface:
GigabitEthernet1/0/2 MAC Addres...
Public Statistics
| Date Registered | 07-20-2017 01:36 PM |
| Date Last Visited | 02-22-2019 08:49 AM |
| Total Messages Posted | 84 |
| Total Helpful Votes Received | 15 |
Helpful Votes Given To
.jpg "VIP Advisor"){kind=icon}
