Is there a way to set a traditional loopback address in FMC?  I would like to use a loopback address for solwarwinds management and troubleshooting but have been unable to find a way to configure one via the fmc. ... View more

I have a question regarding best practice when it comes to using BGP and EIGRP for dynamic routing.  We are building a new infrastructure.  We have a Home office and branches that connect back to the home office via AVPN.  I am currently building the routing from a branch to the home office.  We have acisco 3650 running ipservices license and is using EIGRP between it and the branch router.  The branch itself is hosting a class b network.  We are running bgp between the branch router and the home office.  The switch is hosting all users/networks and is advertising said networks to the router via the eigrp.  Then to advertise those networks out I was going to redistribute eigrp into BGP allowing the router to advertise the networks that way.  I was told however by a consultant that is not the best practice.  Instead best practice is to send routes via eigrp and then on the router put a static route for the same networks pointing to null 0 and add a network statement for said networks into bgp configuration.  See below for the the way I was planning on configuring it and the way that the consultant said was best practice.  What is best practice in this situation?     Branch Router (Consultant Way)                                  Branch Switch (Consultant Way) router bgp 22222                                                           router eigrp 10 bgp log-neighbor-changes                                              network 10.120.0.0 0.0.255.255  network x.x.0.0 mask 255.255.0.0                                   network 192.168.188.92 0.0.0.3  neighbor x.x.x.x remote-as 11111                                   passive-interface default neighbor x.x.x.x allowas-in                                              no passive-interface GigabitEthernet1/0/48 neighbor x.x.x.x soft-reconfiguration inbound   ip route x.x.0.0 255.255.0.0 null0                                     ip route 0.0.0.0 0.0.0.0 x.x.x.x     Branch Router (My Way)                                     Branch Switch (My Way) router bgp 22222                                               router eigrp 10 bgp log-neighbor-changes                                network 10.111.0.0 0.0.255.255  redistribute eigrp 10                                           passive-interface default neighbor x.x.x.x remote-as 11111                     no passive-interface GigabitEthernet1/0/48 neighbor x.x.x.x allowas-in neighbor x.x.x.x soft-reconfiguration inbound     iproute 0.0.0.0 0.0.0.0 x.x.x.x ... View more

Out of the box configuration on my new 3650 includes auto qos and and wireless configs.  I do not need the wireless configs and do not want the auto qos on the switch at this time.  I have tried removing the wireless configs and the auto qos policies and have been unsuccessful.  Is there a way to remove the configs from the switch.  Below are the configs I would like removed.  Any help would be appreciated.  Thanks in advance.   ! class-map match-any system-cpp-police-topology-control description Topology control class-map match-any system-cpp-police-sw-forward description Sw forwarding, SGT Cache Full, LOGGING class-map match-any system-cpp-default description DHCP snooping, show forward and rest of traffic class-map match-any system-cpp-police-sys-data description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL SAMPLED DATA, Gold Pkt, RPF Failed class-map match-any system-cpp-police-punt-webauth description Punt Webauth class-map match-any system-cpp-police-forus description Forus Address resolution and Forus traffic class-map match-any system-cpp-police-multicast-end-station description MCAST END STATION class-map match-any system-cpp-police-multicast description Transit Traffic and MCAST Data class-map match-any system-cpp-police-l2-control description L2 control class-map match-any system-cpp-police-dot1x-auth description DOT1X Auth class-map match-any system-cpp-police-data description ICMP_GEN and BROADCAST class-map match-any system-cpp-police-control-low-priority description ICMP redirect and general punt class-map match-any system-cpp-police-wireless-priority1 description Wireless priority 1 class-map match-any system-cpp-police-wireless-priority2 description Wireless priority 2 class-map match-any system-cpp-police-wireless-priority3-4-5 description Wireless priority 3,4 and 5 class-map match-any non-client-nrt-class class-map match-any system-cpp-police-routing-control description Routing control class-map match-any system-cpp-police-protocol-snooping description Protocol snooping ! policy-map port_child_policy class non-client-nrt-class bandwidth remaining ratio 10 policy-map system-cpp-policy class system-cpp-police-data police rate 200 pps class system-cpp-police-sys-data police rate 100 pps class system-cpp-police-sw-forward police rate 1000 pps class system-cpp-police-multicast police rate 500 pps class system-cpp-police-multicast-end-station police rate 2000 pps class system-cpp-police-punt-webauth class system-cpp-police-l2-control class system-cpp-police-routing-control police rate 1800 pps class system-cpp-police-control-low-priority class system-cpp-police-wireless-priority1 class system-cpp-police-wireless-priority2 class system-cpp-police-wireless-priority3-4-5 class system-cpp-police-topology-control class system-cpp-police-dot1x-auth class system-cpp-police-protocol-snooping class system-cpp-police-forus class system-cpp-default ! ! ! ! ip access-list extended AutoQos-4.0-wlan-Acl-Bulk-Data permit tcp any any eq 22 permit tcp any any eq 465 permit tcp any any eq 143 permit tcp any any eq 993 permit tcp any any eq 995 permit tcp any any eq 1914 permit tcp any any eq ftp permit tcp any any eq ftp-data permit tcp any any eq smtp permit tcp any any eq pop3 ip access-list extended AutoQos-4.0-wlan-Acl-MultiEnhanced-Conf permit udp any any range 16384 32767 permit tcp any any range 50000 59999 ip access-list extended AutoQos-4.0-wlan-Acl-Scavanger permit tcp any any range 2300 2400 permit udp any any range 2300 2400 permit tcp any any range 6881 6999 permit tcp any any range 28800 29100 permit tcp any any eq 1214 permit udp any any eq 1214 permit tcp any any eq 3689 permit udp any any eq 3689 permit tcp any any eq 11999 ip access-list extended AutoQos-4.0-wlan-Acl-Signaling permit tcp any any range 2000 2002 permit tcp any any range 5060 5061 permit udp any any range 5060 5061 ip access-list extended AutoQos-4.0-wlan-Acl-Transactional-Data permit tcp any any eq 443 permit tcp any any eq 1521 permit udp any any eq 1521 permit tcp any any eq 1526 permit udp any any eq 1526 permit tcp any any eq 1575 permit udp any any eq 1575 permit tcp any any eq 1630 permit udp any any eq 1630 permit tcp any any eq 1527 permit tcp any any eq 6200 permit tcp any any eq 3389 permit tcp any any eq 5985 permit tcp any any eq 8080 ! ap dot11 airtime-fairness policy-name Default 0 ap group default-group ap hyperlocation ble-beacon 0 ap hyperlocation ble-beacon 1 ap hyperlocation ble-beacon 2 ap hyperlocation ble-beacon 3 ap hyperlocation ble-beacon 4 end ... View more

So I am posting this because I can't seem to wrap my head around it.  It is the first time I have ever seen something like it before and while I will admit that my experience is limited I was not aware that this was possible or how it works.  I am using different ips than what is on my network but everything else was cut and pasted.  Please see below.  Can someone explain why or how it works with the router ID being the same as the neighbor address.  I didn't think this was possible.   router bgp 65102 bgp router-id 10.168.88.106 bgp log-neighbor-changes network x.x.x.0 mask 255.255.255.0 network x.x.x.0 mask 255.255.255.0 neighbor 10.168.88.106 remote-as 13979 neighbor 10.168.88.106 allowas-in neighbor 10.168.88.106 soft-reconfiguration inbound ... View more

Please see my log message below.  Note that the user section is blank.  Is there a reason why this would be left blank? As a side note I am currently running radius on my network if that makes any difference.   Feb 21 19:57:47.898: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: x.x.x.x] [localport: 22] [Reason: Login Authentication Failed] at 13:57:47 CST Wed Feb 21 2018 ... View more