About csthomas

csthomas · 11-26-2010

I have a pair of 5548s connected as w/ vPC. I have some 2248s which I wish to connect the the 5548 pair in active-active. Each 2248 is connected to one port on each of the 5548s. The 5548 ports are configured as a port channel. vPC display seems t...

csthomas · 06-24-2009

How do I recover from a situation where I don't have either the maint or application partition pws for a 6500 FWSM? FW is not in service, so I can do anything I like to it... Would like to save existing config.

csthomas · 03-24-2009

I'm sure this is a FAQ, but I've been unable to find anything posted.I have two routers (r1 & r2) in a private AS. My ISP provides two routers (pe1 & pe2) in his public AS. R1 has a link (10gb pp ethernet) to pe1, and similarly r2 a link to pe2. I...

csthomas · 04-28-2008

I have a 6500 IDSM-2 blade which is configured to create a blocking ACL in the 6500 for a few signatures. It's been working for a couple of years but recently stopped. The IDSM detects attacks and thinks it's updating the 6500, but the 6500's ACLs a...

csthomas · 02-12-2007

I have a 6500 IDSM2 at 5.1(4) + S261. When I attempt to upgrade to S267 or S268, I get the error msg:Error: execUpgradeSoftware : Error status returned with status str Internal Error.I have rebooted the IDS - no difference. I'm using "upgrade http:"...

csthomas · 12-09-2010

My problem was the documentation is comewhat unclear on how to configure the 2248s. It is necessary to configure an identical FEX and port-channel on each 5548. The port-channel defs need to have a matching "vpc n" on each 5548. This statement has...

csthomas · 06-29-2009

Unfortunately, we lost the pw's to cf:1, cf:4, and CF:5, so RMA is our only option; we have started that process. Thanks for the reply.

csthomas · 03-26-2009

Giuseppe,Adding a network 0.0.0.0 (and removing the default-originate) seems to do exactly what I need. I need to wait until scheduled test-time so I can actually down the interfaces and verify, but it looks fine.Thanks!!/Chris Thomas, UCLA

csthomas · 03-25-2009

By the way, in case it matters, r1 is is c6509/720 with 12.2(33)SXI, and r2 is a Nexus 7000 with NX 4.1(3).Formerly, there was only r1, with both ISP links landing there. That made the BGP part so much simpler...

csthomas · 03-25-2009

Hmm, I haven't tried adding a "network 0.0.0.0" to my iBGP and seeing if that will propagate if the ISP link is up. I'll try that. And thanks for the 'backdoor' hint.

Member Since	‎10-30-2001 12:40 PM
Date Last Visited	‎10-09-2017 12:09 PM
Posts	68

User Statistics

User Activity

N2248 active-active configuration question

Lost both app and maint PW - FWSM

Conditional default-originate route-map

IDSM-2 not updating 6500 ACL

error upgrading IDSM2 5.1(4) past s261

Re: N2248 active-active configuration question

Re: Lost both app and maint PW - FWSM

Re: Conditional default-originate route-map

Re: Conditional default-originate route-map

Re: Conditional default-originate route-map