About dragonhunt9111

dragonhunt9111 · 12-30-2023

Dear friends,I have an issue in with very simple centralized policy like below:I already ping , traceroute OK between site2 to site3 as picture above.Then I create centralized policy , make anything (IP protocol) goes from PC9 to PC10 , will prefer m...

dragonhunt9111 · 11-21-2023

Hi friends,I have switch 9300 in simple topology like this:PC admin -----------(int vlan 40)c9300-(int vlan 60)--------VcenterI create an ACL on C9300 to allow only PC admin access vcenter web guiip access-list extended Vcenter permit ip host 172.30....

dragonhunt9111 · 11-19-2023

Hello friends,I got a problem when using port-security on switch 2960X, IOS ver 15.2My port is gi2/0/6. it is being shutdowned. Then I plug a printer to it, and config gi2/0/6 as below, and no shutdown it then it go to err-disabled state, I shutdown...

dragonhunt9111 · 10-26-2023

Hello friends.I have a 2960 switch, running OS 15, image LanLite as belowFrom my PC (in different subnet with IP MGMT of switch) , I can ssh to switch normarlly.But when I show running config of switch, the straight thing is thạt : it does not have i...

dragonhunt9111 · 10-24-2023

Hello friends, I test IP source guard on EVE-NG as below topo: I config on switch DHCP snooping and IP source guard. then VPC get IP from DHCP server (R1) ok But dont know why after I enable IP source guard, VPC3 can not ping to R1 192.168.1.1 (If i...

dragonhunt9111 · 01-06-2024

Finally, maybe I found the root cause, it maybe a limitation of virtual device in eve. First, I just try a simple policy like this: ( i see from youtube clip, tks https://www.youtube.com/watch?v=KR4jqWmcRTk)policysla-class hai-sla-classloss 10latency...

dragonhunt9111 · 12-31-2023

HI MHM.When I remove command "protocol 1", it works as I expected. Tks you.But when I want to make some protocols, example: telnet prefer going via mpls. It still goes via both lines This is my config:, pls helpP/S: I test removed command "protocol 6...

dragonhunt9111 · 12-30-2023

Hi MHM,i think both lines are same, because it is in eve-ng lab, no big delay, and no packet loss

dragonhunt9111 · 11-22-2023

Dear,Finally, I found the cause, it is because Vcenter behavior, when from PC access web gui of vcenter, then vcenter will call DNS server , then DNS server reply vcenter, and get droped by ACL (which only permit IP of my PC) - I dont know why vcente...

dragonhunt9111 · 11-19-2023

thank David, it is true root cause. I forgot this,many thank you

Member Since	‎12-03-2014 11:18 PM
Date Last Visited	‎01-12-2024 12:06 AM
Posts	29
Total Helpful Votes Received	6

User Statistics

User Activity

Centralized Policy not works as expected

ACL on c9300 issue

Port-security not work as expected on 2960X

2960 switch does not need ip default-gw command

IP SOURCE GUARD not work on EVE-NG

Re: Centralized Policy not works as expected

Re: Centralized Policy not works as expected

Re: Centralized Policy not works as expected

Re: ACL on c9300 issue

Re: Port-security not work as expected on 2960X