Hi  No 802.11ac  https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-2600-series/data_sheet_c78-709514.html   ... View more

Hi Allow Untrusted Hosts Access to Hosts on Your Trusted Network This can be achieved through the application of a static NAT translation and an access rule to permit those hosts. You are required to configure this whenever an outside user would like to access any server that sits in your internal network. The server in the internal network will have a private IP address which is not routable on the Internet. As a result, you need to translate that private IP address to a public IP address through a static NAT rule. Suppose you have an internal server (172.16.11.5). In order to make this work, you need to translate this private server IP address to a public IP address. This example describes how to implement the bidirectional static NAT to translate 172.16.11.5 to 203.0.113.5.   Port Redirection (Forwarding) with Static Port forwarding or port redirection is a useful feature where the outside users try to access an internal server on a specific port. NAT Port Forwarding is useful when you have a single public IP address and multiple devices behind it that you want to reach from the outside world.   ... View more

Is it lightweight AP or Autonomous AP?  With Autonoumous AP you don't need the WLC. Lightweight AP needs a WLC.  I am not sure if you can connect the AP directly to the WLC .. I have never done that .. there has always been a switch in between. If the AP is lightweight, and you have a PC in the same subnet then configure the PC as DHCP server with option 43.  For conversion between LWAP and Autonomous, you can follow this blog post -  https://mrncciew.com/2012/10/20/lightweight-to-autonomous-conversion/     ... View more

Hi    Cisco ACI  Quality of Service (QoS) feature allows you to classify the network traffic in your fabric and then to prioritize and police the traffic flow to help avoid congestion in your network. SwitchTask Ingress leaf switch Classification Marking Buffering Queuing Ingress Policing Spine switch Buffering Queuing Egress leaf switch Buffering Queuing Egress Policing https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/Cisco-APIC-and-QoS.html ... View more

Hi  Are you auto-provisioning the new switch? This may help -  https://unofficialaciguide.com/2017/10/19/using-the-auto-provision-feature-to-automatically-upgrade-new-switches-added-to-your-aci-fabric/     ... View more

Hi  I flow record consists of below fields .. these dont include client IP specifically.  Flow Record Field Value Source IP address 192.168.10.1 Destination IP address 93.184.216.34 Source port 17238 Destination port 80 Protocol TCP Depending on the version of NetFlow, the router can also gather additional information, such as type of service (ToS) byte, differentiated services code point (DSCP), the device’s input interface, TCP flags, byte counters, and start and end times. Flexible NetFlow, Cisco’s next-generation NetFlow, can track a wide range of Layer 2, IPv4, and IPv6 flow information, such as the following: Source and destination MAC addresses Source and destination IPv4 or IPv6 addresses Source and destination ports ToS DSCP Packet and byte counts Flow timestamps Input and output interface numbers TCP flags and encapsulated protocol (TCP/UDP) and individual TCP flags Sections of a packet for deep packet inspection All fields in an IPv4 header, including IP-ID and TTL All fields in an IPv6 header, including Flow Label and Option Header Routing information, such as next-hop address, source autonomous system number (ASN), destination ASN, source prefix mask, destination prefix mask, Border Gateway Protocol (BGP) next hop, and BGP policy accounting traffic index NetFlow protocol data units (PDUs), also referred to as flow records, are generated and sent to a NetFlow collector after the flow concludes or expires (times out). http://www.ciscopress.com/articles/article.asp?p=2812391&seqNum=2     Hope that helps.           ... View more

Hi  What are you using to query the api? python, postman .. ansible? I would suggest having a look at ansible. Have a look at below links -  https://developer.cisco.com/docs/ https://docs.ansible.com/ansible/latest/modules/list_of_network_modules.html#ios Cisco promotes RESTCONF more than the REST api.  https://github.com/CiscoDevNet/restconf-examples   Hope it helps.    ... View more

Hi show redundancy summary output? what does console output show the wlc that ssh is not working? can they both ping their gateways? check redundancy port? reboot the wlc in maintenance window ... View more

Did you purchase the MacBook brand new yourself? If its used purchase, you need to ask where ever this is enrolled to remove it.  If it's used then I suspect it belongs to Cisco Systems.    ... View more

Hello  The device is enrolled in DEP when purchased or MDM .. until its removed from DEP or MDM .. you cannot stop the pop-up. Trust me you cannot stop the pop-up .. maybe if you have a firewall and restrict access to Apple or MDM provider the pop-up may stop.. otherwise .. every time it will connect to the Internet .. pop-up will appear.  ... View more