Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a pair of 5548s connected as w/ vPC. I have some 2248s which I wish to connect the the 5548 pair in active-active. Each 2248 is connected to one port on each of the 5548s. The 5548 ports are configured as a port channel. vPC display seems t...
How do I recover from a situation where I don't have either the maint or application partition pws for a 6500 FWSM? FW is not in service, so I can do anything I like to it... Would like to save existing config.
I'm sure this is a FAQ, but I've been unable to find anything posted.I have two routers (r1 & r2) in a private AS. My ISP provides two routers (pe1 & pe2) in his public AS. R1 has a link (10gb pp ethernet) to pe1, and similarly r2 a link to pe2. I...
I have a 6500 IDSM-2 blade which is configured to create a blocking ACL in the 6500 for a few signatures. It's been working for a couple of years but recently stopped. The IDSM detects attacks and thinks it's updating the 6500, but the 6500's ACLs a...
I have a 6500 IDSM2 at 5.1(4) + S261. When I attempt to upgrade to S267 or S268, I get the error msg:Error: execUpgradeSoftware : Error status returned with status str Internal Error.I have rebooted the IDS - no difference. I'm using "upgrade http:"...
My problem was the documentation is comewhat unclear on how to configure the 2248s. It is necessary to configure an identical FEX and port-channel on each 5548. The port-channel defs need to have a matching "vpc n" on each 5548. This statement has...
Giuseppe,Adding a network 0.0.0.0 (and removing the default-originate) seems to do exactly what I need. I need to wait until scheduled test-time so I can actually down the interfaces and verify, but it looks fine.Thanks!!/Chris Thomas, UCLA
By the way, in case it matters, r1 is is c6509/720 with 12.2(33)SXI, and r2 is a Nexus 7000 with NX 4.1(3).Formerly, there was only r1, with both ISP links landing there. That made the BGP part so much simpler...
Hmm, I haven't tried adding a "network 0.0.0.0" to my iBGP and seeing if that will propagate if the ISP link is up. I'll try that. And thanks for the 'backdoor' hint.
