Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Does anyone know if there are any methods, procedures, or commands on a PIX firewall or FWSM to display any matches on the specified ACL?For example is there a command where I can test if host "x" to host "y" via ACL "z" matches any lines on ACL "z"?...
You need to set the DF bit in the ICMP packet so that the packet doesn't get sent to the router CPU for fragmentation.This is what you should be doing, DF bit set.Issue "ping 10.250.40.193 size 1500 repeat 100 df" ....This should work if you say MTU ...
I had this same exact problem on the cat 6500 running SXF10. Where I enabled MPLS and it caused CPU to spike. So to check what is getting forwarded to the MSFC perform the following to see a packet capture of what is hitting the CPU. So you need t...
This is pretty simple... to inject global routes into a VRF you need to put an "ip route x.x.x.x x.x.x.x vlan10". Where Vlan10 is in a particular VRF.eg:!interface Vlan10ip vrf forwarding TEST-VRFip address 192.168.254.1 255.255.255.0!do this: ip rou...
Router enable "ip multicast-routing" and CGMP/IGMP and ip pim sparse-dense-mode on the ports that will be forwarding traffic for multicast. On the switch enable the same thing on the VLAN interfaces. Also enable global igmp or cgmp.
