About dragonhunt9111

dragonhunt9111 · 11-21-2023

Hi friends,I have switch 9300 in simple topology like this:PC admin -----------(int vlan 40)c9300-(int vlan 60)--------VcenterI create an ACL on C9300 to allow only PC admin access vcenter web guiip access-list extended Vcenter permit ip host 172.30....

dragonhunt9111 · 11-19-2023

Hello friends,I got a problem when using port-security on switch 2960X, IOS ver 15.2My port is gi2/0/6. it is being shutdowned. Then I plug a printer to it, and config gi2/0/6 as below, and no shutdown it then it go to err-disabled state, I shutdown...

dragonhunt9111 · 10-26-2023

Hello friends.I have a 2960 switch, running OS 15, image LanLite as belowFrom my PC (in different subnet with IP MGMT of switch) , I can ssh to switch normarlly.But when I show running config of switch, the straight thing is thạt : it does not have i...

dragonhunt9111 · 10-24-2023

Hello friends, I test IP source guard on EVE-NG as below topo: I config on switch DHCP snooping and IP source guard. then VPC get IP from DHCP server (R1) ok But dont know why after I enable IP source guard, VPC3 can not ping to R1 192.168.1.1 (If i...

dragonhunt9111 · 10-18-2023

Dear experts,I am configuring simple SLA like this :ip sla 1http get http://24h.com.vnthreshold 50timeout 55ip sla schedule 1 life forever start-time nowtrack 1 ip sla 1 reachability When I show ip sla summary , I see that RTT time is about 80-90ms. ...

dragonhunt9111 · 11-22-2023

Dear,Finally, I found the cause, it is because Vcenter behavior, when from PC access web gui of vcenter, then vcenter will call DNS server , then DNS server reply vcenter, and get droped by ACL (which only permit IP of my PC) - I dont know why vcente...

dragonhunt9111 · 11-19-2023

thank David, it is true root cause. I forgot this,many thank you

dragonhunt9111 · 10-26-2023

Thank all friends,I have check show arp on my switch; and it shows lot IP (in different subnets) in this table. And my co-worker said that gateway is configured with arp proxy.

dragonhunt9111 · 10-24-2023

Hello Martin,I use IOL in EVE-NG. This is show version of it.Cisco IOS Software, Linux Software (I86BI_LINUXL2-ADVENTERPRISEK9-M), Version 15.2(CML_NIGHTLY_20190423)FLO_DSGS7, EARLY DEPLOYMENT DEVELOPMENT BUILD, synced to V152_6_0_81_ETechnical Suppo...

dragonhunt9111 · 08-09-2023

Thanks you Karrsten ,So this is an expected behavior of router (it encrypt data between PC1 and PC2 even I use transport mode).I have test PING from 192.168.3.1 of R3 to 192.168.4.1 of R4, then I capture, it still show IP wan as source and dest, not...

Member Since	‎12-03-2014 11:18 PM
Date Last Visited	‎11-26-2023 08:24 PM
Posts	25
Total Helpful Votes Received	5

User Statistics

User Activity

ACL on c9300 issue

Port-security not work as expected on 2960X

2960 switch does not need ip default-gw command

IP SOURCE GUARD not work on EVE-NG

IP SLA and TRACK not work as expected

Re: ACL on c9300 issue

Re: Port-security not work as expected on 2960X

Re: 2960 switch does not need ip default-gw command

Re: IP SOURCE GUARD not work on EVE-NG

Re: IPsec VPN Transport Mode question