Hello community!I need to configure a trustpoint where the CA and OCSP server are reachable from different VRFs. I just discovered the feature "PKI Split VRF in Trustpoint", see Cisco document https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_con...
Hi all, I have a bunch of Nexus 9k which I would like to bring to release 10.2.x.There's one thing which I find very confusing: the upgrade matrix you can find in https://www.cisco.com/c/dam/en/us/td/docs/dcn/tools/nexus-9k3k-issu-matrix/index.html r...
Hi all,
I have a question about BGP MPLS VPN convergence, with route reflectors.
Let's imagine the following topology: 2 route reflectors (RR1 & RR2, different cluster IDs) and 2 MPLS PEs route-reflector-clients (PE1 & PE2, each peering with both RRs...
Good day everyone!I'm investigating the feasibility of adopting MACsec in our network.Given the attached table, created by Cisco (MACSEC and MKA Configuration Guide, Cisco IOS XE 17), could someone elaborate on 'Aggregate Rate Bits' and 'ESP CPU'? I ...
Hi all,I would like to understand something about how LDP works. Let's imagine two routers, R1 & R2, LDP neighbors. Let's assume I am doing 'local label allocation control' on both routers. On R1 I have:interface loopback99ip address 99.99.99.99 255....
hi M02@rt37,appreciate your feedback.What about my second question. If you had a N9k which booted in ACI mode and no NX-OS in bootflash, what would you do? Would you go ahead and install a recent (supported of course) release?
Hi M02@rt37,I think you didn't really read my question. You posted the same link I posted.. this webpage explicitly mentions ISSU.Is that upgrade path necessary even when you perform disruptive upgrade, or could you go directly from 7.0(3)I7(3) to 10...
Hi Giuseppe,
thanks for the valuable input. Let me clarify immediately, the route reflectors are not in the forwarding path, so their outage does not directly affect the traffic flow.
Focusing on your sentence "it is possibile to have no losses when ...
Thank you Joseph, I think you helped me figure it out. The maximum throughput an
ASR1001-x
is capable of is 20Gbps, so that table is telling me that if I encrypt everything but my traffic is made mainly of 64-bytes frames, the cumulative throughput d...
