About Arshad Safrulla

Arshad Safrulla · 10-23-2022

Hi Experts, We are planning to have a CLOS Fabirc (VXLAN EVPN) up and I am finding it difficult when trying to optimize routing. I have attached a diagram for better understanding. We have multiple VRFs (tenants) We are peering with and upstream serv...

Arshad Safrulla · 02-01-2022

Hi Experts, Sometime back I was introduced to an eem script with tcl; which will write the tags to all the connected AP's when it's run in 9800. But unfortunately I had to reconfigure my LAB 9800 multiple times and lost the script. I would really app...

Arshad Safrulla · 05-07-2020

HI Experts,I have a FMC managing 2 sensors in HA which is providing RA-VPN services. At the moment we are using Self Signed Certificate and it is working very well. However we generated a CSR from OpenSSL and got it signed from a public CA, we alread...

Arshad Safrulla · 04-23-2020

Hi Experts,I am running a VPN headend with FDM on ASA 5516-X box. FDM is the customer preferred choice as it has GUI and he is not interested in going back to ASA image. Recently we had an email from customer after having a vulnerability assessment d...

Arshad Safrulla · 03-30-2020

Hi in FDM, if I want to use a SSL certificate for my WAN interface which is listening for AnyConnect incoming connections, how can I generate a CSR, I have seen some articles to use Open SSL, so if I generate a CSR by installing OpenSSL in my PC, and...

Arshad Safrulla · 03-08-2023

Can you check under the SSID config what action is set to P2P blocking?

Arshad Safrulla · 03-08-2023

I completely agree with @marce1000 suggested here, but one thing I would do different is that I will test the HA before shutting down one WLC. You can shutdown the active controller to see whether the standby WLC is ready to takeover the AP and clien...

Arshad Safrulla · 03-08-2023

Devinder, Best way to test the speed of your wireless environment is Isloate the AP registered to 9800 as much as you can (to reduce the interference from other APs), take 2 APs and advertise one SSID locally switched in one AP and centrally switche...

Arshad Safrulla · 03-08-2023

The best option would be not to completely disable 2.4, but to selectively disable it. You can do this if you have access to a good RF planner like Ekahu or hamina. With proper layouts and AP place marking this will give you predictive view of your c...

Arshad Safrulla · 03-08-2023

Captive portal not working is a very stingy explanation to the problem you have. I would request you to share the below info WLC model and the code you are runningSSID mode (local, flex local, flex central etc.)LWA, CWA etc.Out put for "show paramete...

Member Since	‎03-07-2018 07:25 AM
Date Last Visited	‎05-17-2023 12:01 AM
Posts	1,148
Total Helpful Votes Received	3515

User Statistics

User Activity

BGP EVPN - VRF-Lite External Route Preference

EEM Script to Wrte-tags 9800

FMC - Certificate for RA VPN

Disabling Weak Ciphers for SSL VPN in Firepower FDM

FDM SSL Certificate for AnyConenct

Re: Random destinations are not accessable from wifi

Re: Moving 5520 SSO

Re: Lower throughput on Flex SSIDs compared to Centralized SSIDs - WLC

Re: 2.4Ghz / 5Ghz AP Aironet 1830/Mobility Express

Re: Cisco 9800 Captive portal not work