Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Eli Kagan
08-24-2018
Stats
Member since
04-20-2012
45
Posts
5
Helpful
1
Solution
08-03-2018
09:00 PM
I am a little bit confused by the E0L announcement for sup7-e (https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/eos-eol-notice-c51-738118.html)
It says that End of SW Maintenance is Oct 2018.
End of Vulnerability/Security Support is Oct 2020.
Cisco's policy has this to say about these dates: (https://www.cisco.com/c/en/us/about/security-center/security-vulnerability-policy.html)
The End of SW Maintenance milestone identifies the last date Cisco may release a software maintenance release that could include security fixes.
The End of Security and Vulnerability Fixes milestone identifies the last date that Cisco may provide support for network-impacting security vulnerabilities.
What's the practical difference between the two dates?
Does it mean that they will not release any security related fixes after Oct 2018?
Does it mean that they will release some security related fixes between the two dates but not all of them?
Does it mean that they will continue to provide workarounds but no fixes till 2020?
Thanks,
Eli
... View more
Labels:
07-07-2018
03:52 PM
Here are some more details....
My requirements are pretty bland. The switch has to be highly reliable (banking environment), m ature code and hardware. Should not end up with no more software updates in the next 5 years (PCI compliance). Should do VRFs, MACsec, VPC or VSS (quad sup VSS is better). No 10Gig is required as of today.
My options so far:
1. Cat6807, sup6T -- would be my first choice but other techies have no experience with it and are reluctant to agree.
2. Cat6506-E. sup2T -- 7 years old, perhaps will be EoL shortly otherwise will do.
3. Cat4507R+E, sup9 -- good on paper but I had too many hardware and software issues with the existing cat4500 for me to be comfortable with this option. On top of that, Cisco is “encouraging” to go to Cat9400 instead
4. Cat9400 7-slot -- I know nothing about that thing. Does it support quad sup VSS or similar? Is it too cutting edge for a financial client? Is the code stable enough?
5. Nexus 7700 6-slot or Nexus 9504 -- both are e xpensive as hell.
Any insight would be highly appreciated.
Thanks,
Eli
... View more
07-06-2018
01:14 PM
and to add to the confusion do I go with sup2T or sup6T.... ? Will sup2T be EoL in the next year?....
... View more
07-06-2018
11:16 AM
Why would they decommission 6807 if sup6T has only been on the market for 2 years?
... View more
07-06-2018
10:46 AM
I was afraid of that. 9K series looks too cutting edge for the environment (banking)....
... View more
07-06-2018
09:10 AM
I am looking into a new purchase. I understand that feature-wise both 6500 and 6800 are about the same, while 6800 has 10 times more backplane capacity. My primary concerns are reliability and platform longevity. Should 6500 even be considered in mid 2018 for new purchases?
Thanks,
Eli
... View more
Labels:
07-06-2018
09:07 AM
Hi Amer,
What is your recommendation for new purchases Amer? 6500 or 6800? I understand that feature wise they are the same, while 6800 has 10 times more backplane capacity. My primary concerns are reliability and platform longevity. Should 6500 even be considered in 2018?
Thanks,
Eli
... View more
05-04-2018
09:27 AM
Hi there,
Can someone please confirm whether it is possible to create a port-channel trunk from MACsec encrypted ports on 4507R+E Sup 7-E or 8-E uplink ports and/or on any optical linecards ( WS-X4712-SFP+E, WS-X4724-SFP-E)?
Thanks,
Eli
... View more
Labels:
Created by
Eli Kagan
in Intrusion Prevention and Detection Systems (IPS - IDS)
in Intrusion Prevention and Detection Systems (IPS - IDS)
08-03-2017
07:27 AM
08-03-2017
07:27 AM
Howdy,
I have a bunch of older ASA 5510 and 5520 with ASA-SSM-10 modules installed.
I was wondering what's the proper way of permanently disabling these modules without physically removing them.
I was planning on removing the service policy that forwards traffic to the IPS and then doing ' hw-module module 1 shutdown'.
Is there anything else that needs to be done?
Will the module stay shut after a reboot?
Do I need to erase its config?
Thanks,
Eli
... View more
Labels:
04-04-2016
09:04 AM
Can someone enlighten me about the purpose of "tacacs-server administration" command in IOS?
Thanks,
Eli
... View more
- Tags:
- #TACACS
Labels:
04-04-2016
07:56 AM
Can someone enlighten me about the purpose of "tacacs-server administration" command in IOS?
Thanks,
Eli
... View more
- Tags:
- #TACACS
Labels:
02-04-2016
06:54 AM
3.8E has quad VSS with RPR so when one sup fails other takes over. Just like on the 6500 platform. http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/white-paper-c11-736462.html
My question was about stability of 3.8E in production environment. Can anyone comment on that?
... View more
02-02-2016
10:35 AM
Can anyone share their experience running VSS with quad sup on Cat4507r+e Sup7-e, IOS version 3.8.1E?
I am considering upgrading a sensitive client and would like to know other's experience running this newish feature.
Thanks ,
Eli
... View more
Labels:
01-18-2016
01:00 PM
My concern Jon is with the whole idea of carving up one physical cat4500 into two distinct functions: distribution layer switch and edge router.
As for OSPF, both processes in both VRFs would actually talk to each other, either directly establishing neighbour connectivity if the FW is converted to L2 firewall, or via an intermediary.
... View more
07-07-2018
Here are some more details.... My requirements are pretty bland. The
switch has to be highly reliabl...
07-06-2018
and to add to the confusion do I go with sup2T or sup6T.... ? Will sup2T
be EoL in the next year?......
07-06-2018
I am looking into a new purchase. I understand that feature-wise both
6500 and 6800 are about the sa...
05-04-2018
Hi there, Can someone please confirm whether it is possible to create a
port-channel trunk from MACs...
Created by
Eli Kagan
in Intrusion Prevention and Detection Systems (IPS - IDS)
08-03-2017
08-03-2017
Howdy, I have a bunch of older ASA 5510 and 5520 with ASA-SSM-10 modules
installed. I was wondering ...
04-04-2016
Can someone enlighten me about the purpose of "tacacs-server
administration" command in IOS? Thanks,...
04-04-2016
Can someone enlighten me about the purpose of "tacacs-server
administration" command in IOS? Thanks,...
02-04-2016
3.8E has quad VSS with RPR so when one sup fails other takes over. Just
like on the 6500 platform.
h...
02-02-2016
Can anyone share their experience running VSS with quad sup on
Cat4507r+e Sup7-e, IOS version 3.8.1E...
01-18-2016
My concern Jon is with the whole idea of carving up one physical cat4500
into two distinct functions...
Public Statistics
| Date Registered | 04-20-2012 08:20 AM |
| Date Last Visited | 08-24-2018 02:02 AM |
| Total Messages Posted | 45 |
| Total Helpful Votes Received | 5 |
