Hi, Below command will enable logging on console. 1(config)#logging console   You can also set the logging levels as 1(config)#logging console ? <0-7> Logging severity level alerts Immediate action needed (severity=1) critical Critical conditions (severity=2) debugging Debugging messages (severity=7) discriminator Establish MD-Console association emergencies System is unusable (severity=0) errors Error conditions (severity=3) filtered Enable filtered logging guaranteed Guarantee console messages informational Informational messages (severity=6) notifications Normal but significant conditions (severity=5) warnings Warning conditions (severity=4) <cr> Below Link will help you understanding the Cisco logging Levels https://www.cisco.com/c/en/us/td/docs/routers/access/wireless/software/guide/SysMsgLogging.html   ... View more

Hi, 10G or 40G Ethernet connections. SVL is established using the 10G or 40G interfaces on the supported switch models. However, a combination of both the interfaces is not supported. ... View more

Hi, According the WAN throughput/performance requirement, You can use ISR G2 and ISR 4000 series router. Go through the below link to compare the WAN throughput/performance of the routers. https://supportforums.cisco.com/legacyfs/online/legacy/7/1/5/15373517-white_paper_c11_595485.pdf https://www.cisco.com/c/dam/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/miercom-isr4k-report.pdf   ... View more

Hi, Below is the link which will guide you for vrf aware ssh/telnet. https://www.cisco.com/c/en/us/support/docs/ip/telnet/200718-Configure-Telnet-SSH-Access-to-Device-wi.html If you still have issue, Please provide the output of the error and "show run | sec line". ... View more

Hi, This looks to be a bug in IOS  16.08.1 . Bug ID is CSCvm07355. https://quickview.cloudapps.cisco.com/quickview/bug/CSCvm07355 ... View more

In DMVPN, Spoke to spoke tunnels come up on as needed. You have to adjust routing on HUB so that for Spoke 1 LAN subnet and Spoke 2 LAN subnet must be reachable through tunnel 1.   ... View more

Hi  Andrey128,   Yes, you can achieve that using HSRP+IP SLA+Tracks but the feasible solution is to use dynamic routing between Core and WAN routers.  ... View more

Hi  seanpetty1,   The timer is a negotiable parameter in VPN, that does not need to be the same on both ends. The one has a lower value set is negotiated and used. You need to set timers to infinite/ unlimited on both ends.   The following command specifies the maximum amount of time for which the current peer can be idle before the default peer is used and the v alid values are 60 to 86400. So you can't set to infinite/unlimited.    crypto ipsec security-association idle-time <seconds>   Yes, you can set the following to none which means the session time is infinite/unlimited. vpn-idle-timeout none vpn-session-timeout none   Another option you have is set HTTP(s) probe from the Sophos LAN to the ASA LAN.     ... View more

Hi Dennis, This discussion is really helpful. I have a quick question on virtual ngIPS throughput. What is the maximum throughput it can support? Can I just keep increasing the underlying system resources for more throughput or is there a software/license limit to it? Or in a multi-tenant environment, is there a limit to number of customers we can have on the virtual ngIPS deployment? Couldn't find any documentation which explains it. Any help would be appreciated. Thanks. ... View more

Hi Khizersaleem,   This is expected behavior, the trunk will be shown when the interface will come up. ... View more