Hi All,I am doing new SDA site deployment, all went well for switches etc. WLC I have is C9800-L-F-K9 and it resides outside fabric. It got discovered and allowed me to deploy already existing SSID's defined in other office location.However when chec...
Hi All,I am seeking advice as I am seeing issue with traffic traversing over S2S VPN. I have attached topology of the remote site.Remote site is running FTD2120 in Active/Standby version 7.3.1.1 and HQ running FTD2120 in Active/Standby version 7.0.6....
Dear All,I am working on adding two C9800-L-F-K9 (17.9.4a) in DNA Center (2.3.5.5-70026)I configured both WLC's to have Service Port (SP) done in its initial configuration wizard. RP ports are connected with direct cable run between both WLC. Configu...
Hi All,I am working on concept of Dual ISP for some of the sites we have where they have FTDs as firewalls and server as Internet Edge.At HQ I have placed 2x FTD in HA, each firewall has link to ISP01 and ISP02. I have created two static default rout...
Hi All,Before anyone says, yes SNS-3515-K9 feels slow even on 2.7.I am trying to maximize organisations investment in Cisco ISE and as the SNS-3515-K9 is going EOL June next year, I am shopping for new Cisco ISE hardware. I know that 36x5 is recommen...
Thanks Marvin,Your solution allowed me to migrate FMC 1000 to FMCv. My migration was to FMCv to the same IP address as physical appliance.High level steps were:• Deploy new FMCv in virtual environment (mine was Nutanix)• Provision new FMCv with diffe...
Thank you MHM,I found an error in my configuration, I had run the command you asked, but I only paid attention to last entry stating "Drop-reason: (ipsec-spoof) IPSEC Spoof detected" completely omitting the fact that I had made error in NAT.When this...
My Sincere apologies for giving false statement on both tunnels working.I did not realize that my lab was actually on ISP side routing traffic for ISP02 asymmetrically which allowed for both tunnels to be up. Once I implemented ISP router ACL which d...
