About andrew.butterworth

andrew.butterworth · 02-27-2025

Apologies in advance for the cross-post as I've also posted this in the IPv6 section. I'm doing IBNS 2.0 dot1x/MAB in closed mode and I'm pushing some IPv4 and IPv6 ACLs via RADIUS to some C3650 switches running the latest IOS-XE 16.12.12. After dig...

andrew.butterworth · 02-27-2025

I'm doing IBNS 2.0 dot1x/MAB in closed mode and I'm pushing some IPv4 and IPv6 ACLs via RADIUS to some C3650 switches running the latest IOS-XE 16.12.12. After digging through documentation to understand how to display the dACLs that are applied, it...

andrew.butterworth · 01-31-2025

Whilst discovering some devices, someone has added a new global netconf port rather than just for the specific discovery job. This port is shown as an option for netconf for all discovery jobs now. How can I delete it globally so that just the defa...

andrew.butterworth · 11-23-2024

I've been doing some testing with a Catalyst 3650-48PS switch with some IBNS 2.0 configs. The 3650 is connected on a single 1Gbps copper connection to a Catalyst 3560CX with the link configured as L3 (no switchport) and OSPF/OSPFv3. The link is als...

andrew.butterworth · 11-20-2024

I have a standalone ASA5508-X running the latest ASA & ASDM code - ASA 9.16(4)76, ASDM 7.22(1). I've reimaged the SFR module with the latest 7.0.6-236 image (with the plan to patch this to 7.0.6.3-50). There is no configuration on the SFR other tha...

andrew.butterworth · 02-17-2025

I used the API to GET all the Global Credentials (/dna/intent/api/v2/global-credential). I copied the ID of the additional netconfCredential "id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx". Then did a DELETE of the Global Credential (/dna/intent/api/v...

andrew.butterworth · 01-30-2025

It would appear that this has been 'fixed' in IOS-XE 17.6.1+ - or at least the match command was modified to permit the keyword 'regex'. This wasn't previously required with the earlier IOS switches (or 3560CX, 2960CX & 2960X/XR), so seems to be an ...

andrew.butterworth · 11-25-2024

This is a 1Gbps copper interface. Gig1/0/24 on the Cat 3650 and Gig1/0/9 on the Cat 3560CX. The command 'system mtu 9100' was added to the 3650 and the commands 'system mtu 1998' and 'system mtu jumbo 9100' were added to the 3560CX. The interfaces...

andrew.butterworth · 11-21-2024

I've tried a couple of different machines. I've cleared the Java cache, I've updated Java and get the same behavior.

andrew.butterworth · 10-27-2024

Can you please clarify the behavior. I see this quite a bit in syslog and usually login to the device in question and issue a 'wr mem' to be safe. Are you saying that if the router auto-enrolls, but the config in startup is different from running, ...

Member Since	‎06-20-2002 01:22 AM
Date Last Visited	‎03-06-2025 05:12 AM
Posts	1,506
Total Helpful Votes Received	958

User Statistics

User Activity

C3650 16.12.12 IPv6 dACL bug maybe?

C3650 16.12.12 IPv6 dACL bug maybe?

Remove added global netconf port?

Catalyst 3650 to 3560CX MACsec switch-to-switch link showing CRC error

ASA5508-X ASDM hangs at 52% 'Downloading FirePOWER packages'

Re: Remove added global netconf port?

Re: IOS-XE IBNS 2.0 with local profiling & class-maps

Re: Catalyst 3650 to 3560CX MACsec switch-to-switch link showing CRC e

Re: ASA5508-X ASDM hangs at 52% 'Downloading FirePOWER packages'

Re: PKI Auto enrollment - Auto save