Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About BigK
Online
BigK
Member since
07-20-2017
Beginner
06-24-2019
10:43 AM
Thanks for the reply. Issue has been resolved. After carefully going trough the config. I found out that applying the source interface for sntp helped resolved the issue.
... View more
06-21-2019
10:20 AM
Only two commands are available on SG350 Site 1 #sho sntp configuration --> Show the configuration of the Simple Network Time Protocol (SNTP) status -->To show the status of the Simple Network Time Protocol (SNTP)
... View more
06-21-2019
07:53 AM
I configured SNTP on 2 remote sites exactly the same. They both able to reach the SNTP server( switch). I can ping and traceroute to sntp ip from both sites. Both sites reach the same ip in the 6th hop. Site 1 shows the correct day and time but site 2 does not. any help is appreciated. Both sites are using Cisco SG350 with same firmware. Site 1 # clock timezone PST -8 clock summer-time PDT recurring usa sntp server 10.10.x.2 Site 1#sho clock 07:09:39 PDT Jun 21 2019 Time source is sntp Site 1 #sho sntp status Clock is synchronized, stratum 2, reference is 10.10.x.2, unicast Unicast servers: Server : 10.10.x.2 Source : Static Stratum : 2 Status : up Site 1#traceroute ip 10.10.x.2 1 10.22.x.25 2 10.22.x.3 3 x.x.x.x public IP 4 x.x.x.x public IP 5 x.x.x.202 public IP 6 10.10.x.5 Site 2# clock timezone PST -8 clock summer-time PDT recurring usa sntp server 10.10.x.2 Site 2 #sho clock *17:09:30 PDT Apr 15 2019 Time source is sntp Site 2 #show sntp status Clock is unsynchronized Unicast servers: Server : 10.10.x.2 Source : Static Stratum : 255 Status : down Site 2#traceroute ip 10.10.x.2 1 10.30.x.25 2 10.30.x.2 3 x.x.x.x public IP 4 x.x.x.x public IP 5 x.x.x.202 public IP 6 10.10.x.5
... View more
Labels:
01-26-2019
01:12 PM
Would you happen to have one for ise 2.4. I would like to create a profile for a ipphone. I was able to enable dot1.x in the call manager and also configured a swithport interface for dot1.x. Now next is to create a profile in ISE.
Thanks
Karim
... View more
01-23-2019
08:03 PM
Switch#sho run
! hostname Switch
!
vlan 100 name Management ! vlan 120 name PCs ! vlan 150 name Phones ! ! ! interface GigabitEthernet1/0/1 switchport trunk native vlan 100 switchport mode trunk storm-control broadcast level 0.10 storm-control multicast level 0.10 spanning-tree portfast ! interface GigabitEthernet1/0/2 switchport access vlan 120 switchport mode access switchport voice vlan 150 spanning-tree portfast !
interface Vlan1 no ip address shutdown ! interface Vlan100 description VLAN_Management ip address 10.22.100.10 255.255.255.0 ! interface Vlan120 ip address 10.22.120.10 255.255.255.0 ! interface Vlan150 ip address 10.22.150.10 255.255.255.0 ! ip route 0.0.0.0 0.0.0.0 10.22.100.1 ! control-plane service-policy input system-cpp-policy ! ! line con 0 stopbits 1 line aux 0 stopbits 1 line vty 0 4 login local transport input all line vty 5 15 login local transport input all
! end
===================================================
Switch#ping 10.5.6.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.5.6.100, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/3 ms Switch#ping 10.5.6.100 source vlan120 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.5.6.100, timeout is 2 seconds: Packet sent with a source address of 10.22.120.10 ..... Success rate is 0 percent (0/5)
could someone please tell me why I can not ping the remote ip 10.5.6.100 when it source is vlan interface.
Thanks
... View more
Labels:
12-19-2018
03:31 PM
That is the new fw ASA 5516. All the info are on the post.
Thanks
K
... View more
12-19-2018
01:20 PM
Hello,
I am upgrading to 5516
Cisco Adaptive Security Appliance Software Version 9.5(1) Device Manager Version 7.5(1)
on my old fw I see the command below
F03# sho run | i user-message user-message "This is not a company Asset"
I am not able to locate the command user-message on my new FW
... View more
Labels:
12-07-2018
07:31 AM
@Leo Laohoo. Thanks!
stack wise, I have some site that have 3 some 2 and some just single switch. Leo, any examples out there that I can follow. I will google it, but just asking in case you know of helpful site.
Thanks
Karim
... View more
12-06-2018
08:34 AM
@shaps Thanks!
I was looking at cattools but I don't think it has the function for IOS upgrade. do you have any examples of secureCRT or Scripts on how to do that? I have secureCRT
... View more
12-06-2018
08:12 AM
Hello,
I have a about 40 switches that would like to upgrade from 3.03.5SE to 3.6.8 . I would like to know if there is an easy method or tools to upgrade all of them at once with no issue.
Thanks
Karim
... View more
Labels:
11-21-2018
10:30 AM
@Georg Pauwen
Sorry, The question was not clear. I asked for an example of spoofing but I think I figured it out.
The reason we have the acl is that since this is a guest SSID. The user will get an ip adress via DHCP (10.x.x.x) and since we have 10.x.x.x . 192 and 172 networks. the ACL will deniy any to 10.x 192.x and 172.x
... View more
11-19-2018
10:32 AM
@Georg Pauwen
Yes, it used for wireless clients.
Would it possible to provide an example ?
Thanks
Karim
... View more
11-19-2018
09:41 AM
I saw this access-list applied to a vlan interface on the switch. I don't think it serves any purpose and would like a second opinion.
**************************************
interface Vlan72 description VLAN_WirelessGuests ip address 10.100.72.1 255.255.255.0 ip access-group WRLS-GUEST-BLOCK in
*********************************************
Extended IP access list WRLS -GUEST-BLOCK 10 deny ip 172.16.0.0 0.15.255.255 any 20 deny ip any 172.16.0.0 0.15.255.255 30 deny ip 192.168.0.0 0.0.255.255 any 40 deny ip any 192.168.0.0 0.0.255.255 50 deny ip any 10.0.0.0 0.255.255.255 60 permit ip any any
Thanks
Karim
... View more
- Tags:
- Access List
Labels:
3 weeks ago
This is a weird ISE behavior. I tried to login to a switch. My SSH
session gets established but when...
3 weeks ago
Thanks for the reply. Issue has been resolved. After carefully going
trough the config. I found out ...
4 weeks ago
Only two commands are available on SG350Site 1 #sho sntpconfiguration
--> Show the configuration of ...
4 weeks ago
I configured SNTP on 2 remote sites exactly the same. They both able to
reach the SNTP server( switc...
Created by
BigK
in Identity Services Engine (ISE)
05-28-2019 07:55 AM
05-28-2019 07:55 AM
On ISE 2.4 I see Tacacs authentication failure for 2 devices. This is
under –-> work centers -->devi...
04-09-2019 02:59 PM
They are many things you can check. 1- is the mac address of your
printer in mab list 2- does your p...
Created by
BigK
in Identity Services Engine (ISE)
03-26-2019 08:34 AM
03-26-2019 08:34 AM
I have camera and I would like to add it as an endpoint . when I click
on add endpoint, I am not see...
Created by
BigK
in Identity Services Engine (ISE)
03-13-2019 08:04 PM
03-13-2019 08:04 PM
Thanks -- I will try that and report back.
Created by
BigK
in Identity Services Engine (ISE)
03-13-2019 02:07 PM
03-13-2019 02:07 PM
Hello I was able to import MAB list of Cisco-IP-Phone but got stuck with
some ATA device. anyone kno...
02-26-2019 02:56 PM
I have this issue and could not figure out why it is happening sho int
Gi4/0/16 GigabitEthernet4/0/1...
Created by
BigK
in Identity Services Engine (ISE)
02-21-2019 05:06 PM
02-21-2019 05:06 PM
The remove option on ISE 2.4 does not remove the endpoint, it just marks
it as static false. anyone ...
02-20-2019 10:52 AM
@Ben Walters Ben, I checked again. still no changes. I imported the
template with the ip-phone Mac a...
Public Statistics
| Date Registered | 07-20-2017 01:36 PM |
| Date Last Visited | 07-18-2019 01:51 PM |
| Total Messages Posted | 95 |
| Total Helpful Votes Received | 15 |
Helpful Votes Given To
.jpg "VIP Advisor"){kind=icon}
