Hello, I am studying DMVPN in Phase 1. I am trying to do a lab where I have 2 hubs and 2 spokes connected via 2 providers. In DMVPN phase 1, from what I understand, tunnel destination must be configured manually (gre tunnel mode is point to point). B...
Hello, I am testing a Cisco ASA 5515-x with Firepower (IPS, AMP, URL Filtering licenses). I have created and applied an Access Control Policy. At the moment traffic at L3 - L4 in our organization is blocked by ASA firewall. With SFR module I want to ...
Hello. On catalyst 3750 there are 4 SDM templates: default, routing, access and vlan. From what I understand SDM is used to split the TCAM into areas. Depending on your needs you will use one of the templates. My question is about VLAN SDM template. ...
So, if I want maximum redundancy in this case I will have to run 4 DMVPN clouds/ 4 subnets, with 4 tunnel interfaces on each spoke and 4 tunnel interfaces on each hub? Is this true only for DMVPN Phase1? If I use Phase 2, then gre tunnels are dynamic...
I already have configured 2 p2p tunnel interfaces on my spoke routers. Each tunnel interface is connected to one ISP and DMVPN cloud. Do you mean I need 4 tunnels on spokes in this case?
The problem has been solved. I talked with TAC engineer.
First of all IPS rules are set to block malicious traffic, including torrent malicious traffic, but not all torrent traffic. Creating an Access Control rule to block torrent application will bl...
Do you mean that the IPS Policy doesn't play any role in blocking torrent traffic? Is it blocking anything if it is attached to the Threat inspection allow rule in my case?
Cisco documentation says that if I have an allow access control rule and I ap...
I thought that if I apply IPS Policy, then I don't have to create any Access Control Rules to block torrent traffic, because IPS Policy is going to block it.
