Hi, I appreciate your help, I need to build a switching environment that will have servers for different customers that we will be hosting, obviously security is the major concern, does anyone have any tips on what features I should enable to provide for a secured hosting environment? I'll be using a couple of Nexus 5596 with FEXs, thank you. ... View more

Configuring OSPFv2 on a Nexus 5K switches, after configuring area 0 or area 10 it shows as 0.0.0.0 or 0.0.0.10 instead, I'm planning to uplink a couple of ASAs with OSPF enabled, just wondering if the area format showing will be a problem, is this how is supposed to look in the Nexus 5K? and will the 5K be able to form adjacensies with other non-Nexus devices that have area 0 and 10? is it just the format? Thanks for your help! ... View more

I  wanted to see what other network architects thought of Cisco's vPC  technology which is available on the Nexus line of switches and its  application. Personally I believe that under most circunstances vPC is  strictly a Data Center technology, it should not be implemented in an  user access or closet access scenario in which the more nowdays  traditional "layer 3 to the closet" can be applied, with vPC to the  closet we are taking advantage of all available bandwidth and the fast convergence but we are still creating an environment susceptible to layer  2 loops, and we are still depending on STP protocol as a backup, perhaps adding some complexity from a support/troubleshooting standpoint. On the other hand, creating P2P /30 routed links between the distribution-access layers can provide the  same "use of all available uplinks and fast convergence" results if used in conjunction with a  routing protocol that will load balance traffic while at the same time providing L2 fault isolation, this is given that user subnets do not need to span across other closets, which is considered a best practice design anyway. Any thoughts are appreciated. ... View more

Very quick question, I appreciate the help. All I need to do is redistribute a default route from BGP into my EIGRP AS, in Nexus as you all know you must use a route-map along with the redistribute command, the route-map can include the ACL but needs to be an extended ACL, what is the equivalent of the standard ACL 0.0.0.0/0 in an extended ACL so I can include it in my route-map? I have: IP access list DEFAULT         10 permit ip 0.0.0.0/32 0.0.0.0/32 Is this correct? ... View more

I appreciate any help in advance, I have a requirement to monitor a host's external IP address, the monitoring host (host A) initiating the request is located in the same DMZ subnet as the destination host (host B) I want to monitor, both are NAT'd to external IP addresses, I was expecting to see a request going out from host A, getting NAT'd to its respective external IP address and then coming back in through the external interface to reach the Nat'd IP address of host B. is this how NAT will be handled by the ASA or am I missing something here? thanks again. ... View more

EIGRP Distribute List on Nexus with Route-maps HI,  I was wondering if anyone has done this successfully, I'm trying to  create a route-map for an EIGRP Distribute list on a N7K, the goal is to  not advertise a 10.0.0.0/8 and 172.31.30.20/32 networks out a link to a  remote site while permitting all other traffic to the internet  (default). I configured the ACL/route-maps below and applied them  outbound on the N7K interface but no subnets at all are being received  on the remote site router, any help is appreciated. ip access-list DENY_10.0.0.0   10 permit ip any 10.244.244.20/30 <<--WAN interface network    20 deny ip any 10.0.0.0/8    25 deny ip any 172.31.30.20/32    30 permit ip any any route-map BLOCK_10.0.0.0 permit 10   match ip address DENY_10.0.0.0 interface Ethernet1/3 ip distribute-list eigrp 1 route-map BLOCK_10.0.0.0 out ... View more

HI, I was wondering if anyone has  done this successfully, I'm trying to create a route-map for an EIGRP  Distribute list on a N7K, the goal is to not advertise a 10.0.0.0/8 and  172.31.30.20/32 networks out a link to a remote site while permitting  all other traffic to the internet (default). I configured the  ACL/route-maps below and applied them outbound on the N7K interface but  no subnets at all are being received on the remote site router, any help  is appreciated. ip access-list DENY_10.0.0.0   10 permit ip any 10.244.244.20/30 <<--WAN interface network    20 deny ip any 10.0.0.0/8    25 deny ip any 172.31.30.20/32    30 permit ip any any route-map BLOCK_10.0.0.0 permit 10   match ip address DENY_10.0.0.0 interface Ethernet1/3 ip distribute-list eigrp 1 route-map BLOCK_10.0.0.0 out ... View more

HI, I was wondering if anyone has done this successfully, I'm trying to create a route-map for an EIGRP Distribute list on a N7K, the goal is to not advertise a 10.0.0.0/8 and 172.31.30.20/32 networks out a link to a remote site while permitting all other traffic to the internet (default). I configured the ACL/route-maps below and applied them outbound on the N7K interface but no subnets at all are being received on the remote site router, any help is appreciated. ip access-list DENY_10.0.0.0   10 permit ip any 10.244.244.20/30 <<--WAN interface network    20 deny ip any 10.0.0.0/8    25 deny ip any 172.31.30.20/32    30 permit ip any any route-map BLOCK_10.0.0.0 permit 10   match ip address DENY_10.0.0.0 interface Ethernet1/3 ip distribute-list eigrp 1 route-map BLOCK_10.0.0.0 out ... View more