We have a number of remote sites connecting to headends via IPSec encrypted GRE tunnels over the public internet.
Our current configuration works, but we would like to see if there is a better way of handling the no-split tunnel rule.
At the headend...
Hi,Looking for some guidance/ideas. I'm about to deploy 3850 and 3650 switches to a site, and I'm wondering if auto qos is really still required nowadays. Back with the 3750s and other older access switches, the norm was to run up auto qos on edge ...
Hi,I'm running 7206VXR routers with NPE-G2, and I'd like to get rid of the fibre to copper media converters used for copper handoff by the telcos.Unfortunately, the majority of my ISP circuits are 100Mbps FE over Single-Mode Fibre, and I can't find a...
Hi,I have a CSS11501S-K9 running version sg0810107s (08.10.1.07s) and am having problems with a VIP.The setup is:Checkpoint FW (192.168.96.126) | |Cisco CSS(192.168.96.124)I want to use VIP's on the CSS in the range 172.16.1.0/24, but I don't act...
I logged into software downloads for ASA5516 and can see they have the new firmware image there (asa5500-firmware-1115.SPA), released 15th May.The bug documentation is confusing, it actually says how to fix it, but suggests that the fix is not availa...
Thanks Peter. It's a simple setup - 2x3850 switches as core with static routing to upstream WAN routers running HSRP (where the QoS settings are important). Edge is 3650 stacks running LAN base connected back to the core with two 10gig ports (top a...
Hi Brij,If there is no firewall in the path, you may wish to check with your network engineers if there is a WAN accelleration device in the path such as Cisco WAAS or Riverbed Steelheads. If so, you may be able to request a pass-through rule betwee...
