Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ckronk
Stats
Member since
06-20-2018
7
Posts
0
Helpful
0
Solutions
Created by
ckronk
in Application Centric Infrastructure
in Application Centric Infrastructure
11-12-2019
11:23 AM
11-12-2019
11:23 AM
The APIC has built in smartcard authentication? Do you have a resource for this?
... View more
Created by
ckronk
in Application Centric Infrastructure
in Application Centric Infrastructure
11-12-2019
04:58 AM
11-12-2019
04:58 AM
To be STIG compliant with the new infrastructure I'm looking to implement, FIPS mode has to be enabled on my APICs. The problem is that with FIPS mode, TACACS doesn't work. This puts us in a bind as we use RSA tokens. We looked at the idea of using LDAP as well. The issue with that is that we don't want to use password and and LDAP setup would have to involve the sysadmins in doing as little work as possible. We also looked at cutting out our TACACS server and using RSA to authenticate against groups created in the APICs, but RSA uses RADIUS which is also blocked by FIPS mode. 1. Is there a way to enable FIPS mode on only certain ports? The configuration guide says there isn't, so I'm guessing there definitely isn't. 2. Has anyone used LDAP authentication with RSA? 3. What other options do we have so that we can still utilize RSA tokens?
... View more
Labels:
08-08-2019
07:44 AM
I'm trying to enter the DOD STIG requred banner on to some 2960's and 3850's, but they both cut off because the last line is too long. Has anyone encountered this previously and what was your work around that passed STIG requirements?
... View more
Labels:
04-23-2019
04:56 AM
That's the plan. We have one scheduled and we have console access of course, should anything decide to go too far South. Thanks for the help.
... View more
04-23-2019
04:30 AM
This shouldn't interfere with the OSPF implementation on those routers, should it? All the interfaces besides the 2 or 3 using RIP are set to passive as well. The RIP side is not as important as the OSPF to us, but it would still be useful because of fiber taps.
... View more
04-23-2019
03:55 AM
I'm setting up BFD between some 3850s and Juniper firewalls and we're using RIP. I'm looking at the BFD configuration guide and it doesn't have a section on configuring RIP. We currently have BFD setup using OSPF and it seems that you have an option of enabling it per interface or by using the bfd all-interfaces command inside the OSPF instance. There is no interface command for BFD for RIP, just ip ospf bfd on the interfaces. I see that I can enter bfd all-interfaces in the RIP instance on the 3850. Will this activate BFD on interfaces using RIP and configured with the session information on the interface and will it interfere with the current BFD implementation for OSPF?
... View more
- Tags:
- bfd
Labels:
Created by
ckronk
in Application Centric Infrastructure
11-12-2019
11-12-2019
The APIC has built in smartcard authentication? Do you have a resource
for this?
Created by
ckronk
in Application Centric Infrastructure
11-12-2019
11-12-2019
To be STIG compliant with the new infrastructure I'm looking to
implement, FIPS mode has to be enabl...
08-08-2019
I'm trying to enter the DOD STIG requred banner on to some 2960's and
3850's, but they both cut off ...
04-23-2019
That's the plan. We have one scheduled and we have console access of
course, should anything decide ...
04-23-2019
This shouldn't interfere with the OSPF implementation on those routers,
should it? All the interface...
04-23-2019
I'm setting up BFD between some 3850s and Juniper firewalls and we're
using RIP. I'm looking at the ...
Created by
ckronk
in Data Center Switches
11-08-2018
11-08-2018
I have some 9504's and I'm looking for a little information. Right now
they're onl 7.0(3)i7(3) and t...
Public Statistics
| Date Registered | 06-20-2018 10:08 AM |
| Date Last Visited | 12-10-2019 10:16 AM |
| Total Messages Posted | 7 |
.jpg "VIP Mentor"){kind=icon}
