About georgehewittuk1

georgehewittuk1 · ‎11-09-2018

This is where voice VLANs are used. It is effectively a trunk port but you configure the port as an access port with the data vlan and with a switchport voice vlan [vlan id]. You should be able to verify this on your show interface [interfae] switchport. Your phone on the voice vlan should be able to reach your DHCP server for voice vlan pool. Also I would advise making a etherchannel port if possible for load to your core switch. Also for QoS maybe of interest this thread - https://community.cisco.com/t5/small-business-switches/sg300-28p-qos-setup/td-p/2470405

georgehewittuk1 · ‎11-08-2018

Switchports (as they are L2) only support inbound access-lists which is why you can't configure outbound. If you can share the configuration and design of your network a little more it would be easier to advise where is most optimal to put your access-list. But from what you have shared applying inbound to this interface would give you your desired results i.e. no communication to 'other' networks. edit: "Extended Access Control List (ACL) can filter the traffic based many factors like source IP address, destination IP address, Protocol, TCP or UDP port numbers etc. Since an Extended Access Control List (ACL) can filter the IP datagram packet based on the destination IP address, it must be placed on the router which is near to the source network/host. If we place the Extended Access Control List (ACL) near to destination, the unwanted traffic may consume the bandwidth till destination, and the the unwanted traffic will get filtered finally near destination." http://www.omnisecu.com/cisco-certified-network-associate-ccna/where-should-an-extended-access-control-list-acl-be-placed.php Reasoning for why we apply on the 'inbound' as soon as we can.

georgehewittuk1 · ‎11-08-2018

Using an SNMP to poll the interface bandwidth statistics. And when a threshold is met you get alerted. Using something like solarwinds for monitoring would be effective. Unless you have another requirement? Seeing top talkers IP/protocols you can look at netflow configuration.

georgehewittuk1 · ‎11-08-2018

I mean looks like you switch stack is having issues so I would priortise looking into that. -Not sure on your model but run a show switch stack-ports summary (do a show switch and see your options.. if need be.) - There should be crash logs generated which you could analyse showing root cause of it.

georgehewittuk1 · ‎11-08-2018

You should be statically setting port as an access and the data vlan tag. Can you run a show interfaces ----- switchport for this one?

georgehewittuk1 · ‎10-08-2018

Utilising a dynamic routing protocol instead of using hard coded static/default routes will help you find a resolution. Dynamic routing protocols will converge when a link/router goes down to find an alternative path for traffic and to avoid any failures. You can also manipulate these protocols to weight/favour links. This all depends on your situation of course.. Many Thanks George

georgehewittuk1 · ‎08-29-2018

Hello, We are having problems configuring the Vifi interface giving us a "% Invalid input detected at '^' marker". I've checked the feature navigator for the IOS we are on and it indicates we have the feature. Is there any pre-requisite for creating ths interface i.e. enabling ip multicast-routing Many Thanks

georgehewittuk1 · ‎04-24-2018

Yes that is what I mean.

georgehewittuk1 · ‎04-24-2018

Hi Guys, Looking to see if anyone can suggest how this implementation could be possible as I can't find a solution in CUCM. So External User calls Person A and if there is no answer:- -> It should then be diverted to Person B (their PA.) If there is no answer:- -> Goes to Person A Voicemail. Any thoughts are appareciated as I don't believe its possible. Thanks George

georgehewittuk1 · ‎04-06-2018

Hello, I was wondering if anyone could clarify the below for me. For :- https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/Windows/11_9/RN/jabw_b_release-notes-for-cisco-jabber_119.html The Software Requirements for - Virtual Servers say "Citrix XenApp 6.5, 7.5, and later 7.x versions for published apps and desktop " The later 7.x versions - would that include Xen App 7.15 LTSR or later than Xen App 7.5 Thanks

georgehewittuk1 · ‎03-07-2018

Thanks for the reply - When you say the endpoint (port) stays in critical auth until re-autentication. The behaviour of the authentication command is this until a new host is connected or after so long a time? Its not so clear in my mind if you can shed some light. Thanks again

georgehewittuk1 · ‎03-06-2018

Hello, Regarding this statement "authentication event server alive action reinitialize" if it is not included in switchport configuration when dead events are configured to use for example a specifc VLAN only what will be the behaviour? Will it not go back to authentication from the ISE until restarted? Thanks George

georgehewittuk1 · ‎03-05-2018

Hi, Beacuse of loops causing broadcast storms/mayhem! - Having all "uplinks" on layer 2 in packet tracer running on the same broadcast domain is not possibly/advised. STP (spanning tree protocol) protects layer 2 networks from this and you can read about this below. But in short it ultimately makes one route to everywhere based on the cost (most efficient path) but this can be set manually in configuration. https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/5234-5.html You could technically utilise all links by having different VLANs use different links to maximise bandwidth effeciency. And of course those uplinks are always relevent for redundancy anyway. You can read about this in the later literations of STP. Hope this helps. Thanks George

georgehewittuk1 · ‎03-05-2018

Hello Guys, I got a question on this. If = "authentication event server alive action reinitialize" is not included in switchport configuration what will be the behaviour? Will it not go back to authentication from the ISE until restarted? Thanks George

Date Registered	‎03-05-2018 08:40 AM
Date Last Visited	‎11-16-2018 04:27 PM
Total Messages Posted	16
Total Helpful Votes Received	5

Re: Cisco SG300 with multiple VLAN's

Re: 2960-X ACL/Out

Re: how to get logs for interface when ...

Re: Denali 16.3.5b sh aaa servers - Doe...

Re: Computers flicker to receive IP add...

Re: switch has two default ip route.wha...

MSR - Vifi Interface

Re: CUCM Diverting Call and Voicemail B...

CUCM Diverting Call and Voicemail Behav...

Cisco Jabber 11.9.x Documentation Quer...

Re: ISE Behaviour if Server down - Fail...

Behaviour of authentication alive actio...

Re: Packet tracer topology

Re: ISE Behaviour if Server down - Fail...