About chrismes

chrismes · 03-13-2024

We've an internet-proxy in DMZ which can connect to internet.But it does not work when trying to connect from inside to our own webservers, which are located in DMZ, but of course have NAT-addresses in the outside ip-range, where also the proxy has i...

chrismes · 01-06-2024

We've a WS-C2960X-48LPS-L with 15.2(7)E9.After we've got new provider-line we tried to test upload/download with iperf3 on a windows-pc.Download is fine with 20Mbit/s, but upload is only 2Mbit/s. It should be the same speed like download.Unfortunatel...

chrismes · 08-02-2023

I've a C9300 (L2) with Port-Channel to C9500.WIth command "show mac address" I see the same dynamic CISCO MAC-address on all VLANs of this port-channel.But when I look on the C9500 I do not see this MAC-address.I've same configuration in our 2nd data...

chrismes · 05-17-2023

We try to send e-mails to customer of 123-reg.co.uk. Our Cisco ESA C190 uses internet root-dns.So the DNS-requests are send to ns.123-reg.co.uk, ns2.123-reg.co.uk.But they have a strange behaviour. They do not respond to the first MX-DNS-request, the...

chrismes · 08-05-2022

We've installed virtual ISE 2.7 with backup from physical ISE 2.3.Now the windows clients authentication works for WLAN but not for LAN.For the same clients.Event 5411 Supplicant stopped responding to ISEFailure Reason 12934 Supplicant stopped respon...

chrismes · 03-16-2024

Thanks for reply.I've found a community topic saying ASA does not allow traffic which is coming from DMZ, NATed and going back to DMZ.This might be correct.So I've decided to bypass proxy for our webservers.

chrismes · 05-18-2023

Well it does not work with 1.1.1.1 or 8.8.8.8 because it needs to be an authoritative DNS-server.But I found they also have ns3.123-reg.co.uk 212.67.203.246 and this one responds to DNS-requests immediately.It works fine with nslookup on the ESA, now...

chrismes · 05-17-2023

Thanks.Yes, that is what I've tried, but this does not work. You can not put in there any DNS-server, it must be the the authoritative DNS-server for that domain, so these would be for my case ns.123-reg.co.uk, ns2.123-reg.co.uk which are causing the...

chrismes · 08-12-2022

The accepted solution is to capture packets.Ok, this is the way for troubleshooting, but not the solution I've already captured packets on the client itself, with netsh trace while client was rebootet.That is the output.For me it looks like the clien...

chrismes · 08-07-2021

Thanks for information.

Member Since	‎07-04-2019 01:22 AM
Date Last Visited	‎04-17-2024 12:04 AM
Posts	12
Total Helpful Votes Received	8

User Statistics

User Activity

Cisco ASA dmz to outside NAT addresses?

C2960X iperf3 limited by srr-queue bandwidth?

Same Dynamic MAC address in all VLANs on Port-Channel

E-mails to specific domain not send - strange DNS behaviour

ISE 2.7 client authentication WLAN ok, LAN not ok

Re: Cisco ASA dmz to outside NAT addresses?

Re: E-mails to specific domain not send - strange DNS behaviour

Re: E-mails to specific domain not send - strange DNS behaviour

Re: ISE 2.7 client authentication WLAN ok, LAN not ok

Re: Packet Tracer routers 4321 & 4331 SFP modules?