Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About georgehewittuk1
09-04-2019
Stats
Member since
03-05-2018
21
Posts
5
Helpful
1
Solution
01-30-2019
09:51 AM
Hi,
I've remoted onto a device and I'm struggling to understand if I am actually on the firepower module or if it is integrated with the ASA. It could be that I am using an older version of code which is confusing me.
Cisco ASA5525-X Threat Defense Software 6.1.0
When I console in -
"Cisco Fire Linux OS v6.1.0 (build 37) Cisco ASA5525-X Threat Defense v6.1.0 (build 330)"
The command line is different to that of a normal ASAv 9.8 and Cisco IOS (which I am better experienced in.) When trying to configure a local user I can't even get into the enable/configure global mode. Is there a way in seeing if I am on the firepower module as I am struggling to source an IP address of the FW - I am trying to make another local user & when i go into the running configuration I can't see the local user we access this device with & there is no aaa configuration.
Thanks
... View more
Created by
georgehewittuk1
in Switching
in Switching
01-14-2019
06:53 AM
01-14-2019
06:53 AM
That is very helpful knowing we can do it after this code release. Going to look at upgrading
... View more
Created by
georgehewittuk1
in Switching
in Switching
01-14-2019
05:49 AM
01-14-2019
05:49 AM
Thanks for your reply.
Code version - 03.08.02.E
It is defintley enabled unforuntaely.
#show vstack config Role: Client (SmartInstall enabled)
Even if we knew when the command was added that would be of use!
... View more
Created by
georgehewittuk1
in Switching
in Switching
01-14-2019
05:22 AM
01-14-2019
05:22 AM
Hi All,
I've detected that one of our devices is affected by a vunerability [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170214-smi] whereby Smart Install client is exploted. Our code version does not allow us to do a 'no vstack' to disable the feature.
Other than the ACL workaround how can I verify what future code versions offer the ability to disable the feature if we were to upgrade? To conclude I'm looking on how one would check for a future code version that allows us to turn off or the Smart install is disabled!
Many Thanks
George
... View more
Labels:
11-09-2018
09:36 AM
This is where voice VLANs are used. It is effectively a trunk port but you configure the port as an access port with the data vlan and with a switchport voice vlan [vlan id].
You should be able to verify this on your show interface [interfae] switchport. Your phone on the voice vlan should be able to reach your DHCP server for voice vlan pool.
Also I would advise making a etherchannel port if possible for load to your core switch. Also for QoS maybe of interest this thread - https://community.cisco.com/t5/small-business-switches/sg300-28p-qos-setup/td-p/2470405
... View more
11-08-2018
11:53 PM
Switchports (as they are L2) only support inbound access-lists which is why you can't configure outbound.
If you can share the configuration and design of your network a little more it would be easier to advise where is most optimal to put your access-list. But from what you have shared applying inbound to this interface would give you your desired results i.e. no communication to 'other' networks.
edit: "Extended Access Control List (ACL) can filter the traffic based many factors like source IP address, destination IP address, Protocol, TCP or UDP port numbers etc.
Since an Extended Access Control List (ACL) can filter the IP datagram packet based on the destination IP address, it must be placed on the router which is near to the source network/host. If we place the Extended Access Control List (ACL) near to destination, the unwanted traffic may consume the bandwidth till destination, and the the unwanted traffic will get filtered finally near destination." http://www.omnisecu.com/cisco-certified-network-associate-ccna/where-should-an-extended-access-control-list-acl-be-placed.php
Reasoning for why we apply on the 'inbound' as soon as we can.
... View more
Created by
georgehewittuk1
in Network Management
in Network Management
11-08-2018
11:29 PM
11-08-2018
11:29 PM
Using an SNMP to poll the interface bandwidth statistics. And when a threshold is met you get alerted. Using something like solarwinds for monitoring would be effective.
Unless you have another requirement? Seeing top talkers IP/protocols you can look at netflow configuration.
... View more
Created by
georgehewittuk1
in Switching
in Switching
11-08-2018
08:57 PM
11-08-2018
08:57 PM
I mean looks like you switch stack is having issues so I would priortise looking into that.
-Not sure on your model but run a show switch stack-ports summary (do a show switch and see your options.. if need be.)
- There should be crash logs generated which you could analyse showing root cause of it.
... View more
Created by
georgehewittuk1
in Switching
in Switching
11-08-2018
08:47 PM
11-08-2018
08:47 PM
You should be statically setting port as an access and the data vlan tag.
Can you run a show interfaces ----- switchport for this one?
... View more
Created by
georgehewittuk1
in Switching
in Switching
10-08-2018
04:28 PM
10-08-2018
04:28 PM
Utilising a dynamic routing protocol instead of using hard coded static/default routes will help you find a resolution. Dynamic routing protocols will converge when a link/router goes down to find an alternative path for traffic and to avoid any failures. You can also manipulate these protocols to weight/favour links. This all depends on your situation of course..
Many Thanks
George
... View more
Created by
georgehewittuk1
in Other Network Architecture Subjects
in Other Network Architecture Subjects
08-29-2018
07:38 AM
08-29-2018
07:38 AM
Hello,
We are having problems configuring the Vifi interface giving us a "% Invalid input detected at '^' marker".
I've checked the feature navigator for the IOS we are on and it indicates we have the feature. Is there any pre-requisite for creating ths interface i.e. enabling ip multicast-routing
Many Thanks
... View more
Labels:
Created by
georgehewittuk1
in IP Telephony and Phones
in IP Telephony and Phones
04-24-2018
10:03 AM
04-24-2018
10:03 AM
Yes that is what I mean.
... View more
Created by
georgehewittuk1
in IP Telephony and Phones
in IP Telephony and Phones
04-24-2018
08:19 AM
04-24-2018
08:19 AM
Hi Guys,
Looking to see if anyone can suggest how this implementation could be possible as I can't find a solution in CUCM.
So External User calls Person A and if there is no answer:-
-> It should then be diverted to Person B (their PA.)
If there is no answer:-
-> Goes to Person A Voicemail.
Any thoughts are appareciated as I don't believe its possible.
Thanks
George
... View more
Labels:
Created by
georgehewittuk1
in IP Telephony and Phones
in IP Telephony and Phones
04-06-2018
12:54 AM
04-06-2018
12:54 AM
Hello,
I was wondering if anyone could clarify the below for me.
For :- https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/Windows/11_9/RN/jabw_b_release-notes-for-cisco-jabber_119.html
The Software Requirements for - Virtual Servers say "Citrix XenApp 6.5, 7.5, and later 7.x versions for published apps and desktop "
The later 7.x versions - would that include Xen App 7.15 LTSR or later than Xen App 7.5
Thanks
... View more
Labels:
Created by
georgehewittuk1
in Policy and Access
in Policy and Access
03-07-2018
08:56 AM
03-07-2018
08:56 AM
Thanks for the reply - When you say the endpoint (port) stays in critical auth until re-autentication. The behaviour of the authentication command is this until a new host is connected or after so long a time? Its not so clear in my mind if you can shed some light. Thanks again
... View more
Created by
georgehewittuk1
in Cisco Digital Network Architecture (DNA)
08-05-2019
08-05-2019
Thanks for your reply.
01-30-2019
Hi, I've remoted onto a device and I'm struggling to understand if I am
actually on the firepower mo...
01-14-2019
That is very helpful knowing we can do it after this code release. Going
to look at upgrading
01-14-2019
Thanks for your reply. Code version - 03.08.02.E It is defintley enabled
unforuntaely. #show vstack ...
01-14-2019
Hi All, I've detected that one of our devices is affected by a
vunerability
[https://tools.cisco.com...
11-09-2018
This is where voice VLANs are used. It is effectively a trunk port but
you configure the port as an ...
11-08-2018
Switchports (as they are L2) only support inbound access-lists which is
why you can't configure outb...
11-08-2018
Using an SNMP to poll the interface bandwidth statistics. And when a
threshold is met you get alerte...
Created by
georgehewittuk1
in Switching
11-08-2018
11-08-2018
I mean looks like you switch stack is having issues so I would priortise
looking into that. -Not sur...
11-08-2018
You should be statically setting port as an access and the data vlan
tag. Can you run a show interfa...
Created by
georgehewittuk1
in Switching
10-08-2018
10-08-2018
Utilising a dynamic routing protocol instead of using hard coded
static/default routes will help you...
08-29-2018
Hello, We are having problems configuring the Vifi interface giving us a
"% Invalid input detected a...
Created by
georgehewittuk1
in IP Telephony and Phones
04-24-2018
04-24-2018
Yes that is what I mean.
Created by
georgehewittuk1
in IP Telephony and Phones
04-24-2018
04-24-2018
Hi Guys, Looking to see if anyone can suggest how this implementation
could be possible as I can't f...
Created by
georgehewittuk1
in IP Telephony and Phones
04-06-2018
04-06-2018
Hello, I was wondering if anyone could clarify the below for me. For :-
https://www.cisco.com/c/en/u...
Public Statistics
| Date Registered | 03-05-2018 08:40 AM |
| Date Last Visited | 09-04-2019 01:41 AM |
| Total Messages Posted | 21 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
.jpg "VIP Mentor"){kind=icon}
.jpg "Hall of Fame Cisco Employee"){kind=icon}
