It is possible that they could be a legitimate seller on Ebay, and they will correctly associate the equipment with the purchasing organisation, and that organisation could get smartnet support on the boxes without problems. But the fact that the question has been raised would lead me to believe that this is in fact not the case and likely more a secondary market purchase. Not really illegal but the end user could face hurdles in accessing support, if they can get it at all, and there are risks to the organisation. The link I posted outlines it pretty well ... View more

Technically it is violating the licensing terms of the software running on the devices. More information can be found here: https://www.cisco.com/c/en/us/products/hw-sw-relicensing-program.html ... View more

I don't think replacing cards now that you'll get 8 more years of supported software in an upgraded sup/card combination unless you're sitting in a +E chassis, but you really would need to lean on your SE to say what they are saying on support. If you are looking to have a platform supported for that amount of time, I would strongly look at moving to the 9K. But if a forklift replace is not in the cards, a card/sup will likely work just fine if your traffic profile is not changing. ... View more

The sup and card still have a little bit of life if you have a support contract, but are quickly approaching final EOL in 2022. https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/eos-eol-notice-c51-738118.html and https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/eos-eol-notice-c51-737185.html I have to caveat that with the fact that they are no longer going to be getting routine software maintenance releases, so depending on your requirements / features you may need to upgrade sooner rather than later. As for a forklift replace vs components, it would depend on the cost and desire of your team, and what time frame your next refresh would be. But with the 9Ks out and the big push to convert people to them, I don't see a great future left for 4500s. ... View more

I think you're on the right track with that CLI.  I found bug https://bst.cloudapps.cisco.com/bugsearch/bug/CSCup32422/ which says that the   Throughput rate can be gathered with the SNMP MIB ciscoEntityQfpMIB as an alternate to the CLI commands I have previously mentioned.    I also found a Cisco Live 2018 session BRKCRS-2010 which has some tips on identifying if you're hitting the performance license limit.  show platform hardware qfp active feature lic-bw oversubscription  Looking for Look for signs of evenly distributed buffering on interfaces Look for drops on busy interfaces. Drops are not necessarily due to perf. shaper, but serves as an indication.   HTH ... View more

I have seen error messages logged in SYSLOG when IPSEC throughput is exceeded on the ISR4K platform, I expect that there is a similar message logged for normal traffic passing through, however I have never come across this scenario to be able to confirm or deny.    As for CLI commands; show platform hardware throughput level show platform hardware  throughput-monitor parameters Paired with  set platform hardware throughput-monitor threshold   Seem to be interesting to adjust what may trigger a log entry.   HTH   ... View more

Hello, Reviewing the outputs of the command. The ESP40 only began to be supported on the ASR1004 platform with IOS XE 3.2.0 which maps to 15.1(1)S. The ESP is currently running release 15.0(1r)S so it is possible that the firmware on the ESP is too out of date in the current software / hardware combination. I would suggest upgrading the ROMMON to at least 15.3(3r) to match your OS [https://software.cisco.com/download/home/282450665/type/282046486/release/15.3%25283r%2529S] As per the ASR1K ROMMON Upgrade Guide [https://www.cisco.com/c/en/us/td/docs/routers/asr1000/rommon/asr1000-rommon-upg-guide.html] ... View more

This looks like an exercise, in real world you would need to have NAT between the internal network and the ISPs which are not configured. Are your BGP sessions up and exchanging routes? sh ip bgp neigh and show ip bgp neighbors received-routes Is OSPF up? sh ip ospf nei and sh ipv6 ospf nei Can you display a list of routes currently seen and installed? sh ip route and sh ipv6 route ... View more

What version of software / firmware are you running? show version show platform show hw-module all fpd ... View more

Hello,   Both NTP scenarios described would work.  ntp master allows your router to use it's internal clock as a reference time source if no higher stratum sources are available. You do need to be careful with this as if your set a higher stratum number (e.g. ntp master 2) and your configured NTP server is a lower stratum your routers internal clock will take precedence and can cause significant drift.    I normally would configure mutiple upstream ntp servers on the ISR and not use the ntp master command in a single site/type of scenario. In a larger scenario, I have used multiple ISRs as ntp peers with each other and GPS (Stratum 0) as the reference source for them. In the event of a GPS failure, the peering kept the time for drifting as much until our GPS came back.  To service clients the ISRs had a loopback interface with a dedicated /32 which we anycasted throughout our network, so in the event of a device or link failure, clients would be automatically rerouted to the next closest ISR acting as an NTP server.  This may be appropriate for your scenario, particularly if you have multiple DCs which need to be in sync.   I've never really seen any stats on amount of clients supported on current hardware, but like any feature you turn on, it is best to monitor the impact on resources for your environment (https://www.cisco.com/c/en/us/support/docs/availability/high-availability/19643-ntpm.html), but in practice I found it can scale to 5K+ clients without seeing any significant CPU load on our routers,  time drift or synchronization issues on the client side.      ... View more

Oui. ... View more

Looking at your configs very briefly, I assume Gi0/0/1 is your ISP connection.  Your static IP routes are pointing out the wrong interface. It should be gi0/0/1 ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0 ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0 dhcp ... View more

Bonjour, Dans le même VLAN tous les machine doit être configurer pour le même MTU-Jumbo (e.g. 9000 octet) Le problème pour toi serais si tu veux faire le routing entre les VLAN, le MTU routing est pour tous les VLAN sur le 3750. Tu ne peux pas distingue les VLAN jumbo ou normal par le SVI (interface vlan xx). Des autre platformes peu fragmenter les packet, mais si sa sorte de votre réseau, il y aura des problèmes parce que là plus par des pares-feux vont bloquer. ... View more

Hello Ajay, I hope you figured out your problem if not please try this solution. you need to append vrf and the vrf name to the command as per the example below copy running-config ftp://username:pasword@<FTP server path> vrf <VRFNAME> Hope this helps ... View more