In one presentation by an IT regulator & Cyber Security Agency,
one slide mentioned about reviewing "Netflow" & a couple of
slides later, it require us is to perform periodic "review of
information flow" :

though I raised if these are related ie by reviewing "Cisco Netflow",
we are deemed to have addressed the requirement to "review
information flow" : the presenter doesn't quite seem to know,
thus I'm clarifying here:
does Cisco Netflow offers a form of documenting information
flow?

Wiping Cisco phones with the code: 3491672850*#.

How do I confirme that the phones are indeed wiped?

Please see the below in asr1000 trying to establish bgp neighbor. Do we have to use address-family ipv4? Thank you

router bgp 22
 bgp log-neighbor-changes
 neighbor 55.66.77.8 remote-as 33
 !
 address-family ipv4
  neighbor 55.66.77.8 activate
  neighbor 55.66.77.8 soft-reconfiguration inbound
  neighbor 55.66.77.8 prefix-list ine in
  neighbor 55.66.77.8 prefix-list out out

Dear experts, if the Access switch is unconfigurable of DHCP snooping, can we do it on Core switch? (The Dhcp is on Core)

Otherwise, how can we mitigate the rogue DHCP? Thanks!

I'm looking to implement QOS as we have some VOIP quality issues. We have Catalyst 2960-X access switches, and Nexus 9k core switches. Looking through the 2960-x Auto-QOS configuration guide, it seems too easy to be true. There's literally a few commands to run within that guide. Can it be this simple? It can't, right?

On interfaces connecting to VOIP phones:
Switch# configure terminal
Switch(config)# interface gigabitethernet x/x/x
Switch(config-if)# auto qos trust dscp
Switch(config-if)# exit

On trunk / uplink interfaces connecting to other switches:
Switch(config)# interface gigabitethernet x/x/x
Switch(config-if)# auto qos trust
Switch(config-if)# end

*Note* I'm using dscp instead of cisco-phone since they're Avaya phones and not Cisco, assuming they will be using DSCP 46 for signaling and audio.

Are there any tools other than Microsoft Call Quality Dashboard and Skype Analytics for measuring Skype call quality? Audio? Conerence calls? Video? We are mostly a Cisco network. There are shortcomings in the MCQ dashboard that have not been addressed since we adopted it.

Created an enclave (192.168.170.0/24) on our office network using a Cisco 2921 and overload NAT to the ISP Firewall (192.168.168.1).  The enclave NAT works OK but I can't get the management network (10.10.10.0/27) out to the switch in the enclave.  I can't ping 10.10.10.11 even from the CORE switch.

See the attached diagram.  MNGT 10.10.10.0/27  OFFICE 192.168.168.0/24  ENCLAVE 192.168.170.0/24

 

Can anyone point me to a sample configuration for accommodating Skype for Business Quality of Service on their Cisco IOS and/or Nexus OS network? This would prioritize Skype audio and skype video.

I am desperately trying to put my Cisco ASA 5505 up to accept ping requests from the Internet and my DMZ. On my LAN, I have some monitoring software running using ping to see if various machines are running (both physical and virtual machines). It is therefore very important that I can use ping anywhere on my LAN and DMZ as well as the Internet.
Right now, I only get a timeout message. What do I need in my setup?

This is my running config:
ASA Version 9.0(4)26
!
hostname myFW5505
domain-name mydomain.dk
names
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
 switchport access vlan 3
!
interface Ethernet0/2
 switchport access vlan 3
!
interface Ethernet0/3
 switchport access vlan 3
!
interface Ethernet0/4
!            
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 109.xxx.yyy.131 255.255.255.0
!
interface Vlan3
 no forward interface Vlan1
 nameif dmz
 security-level 50
 ip address 172.16.1.1 255.255.255.0
!
ftp mode passive
dns server-group DefaultDNS
 domain-name mydomain.dk
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object network obj_any
 subnet 0.0.0.0 0.0.0.0
object network inside-subnet
 subnet 192.168.1.0 255.255.255.0
object network dmz-subnet
 subnet …

Dear Experts ,

We  are  beside upgrading  our Data Center infrastructure ,,

Presently   we  have  the  Network Topology  shown in  the PIC  below ..






We are planning to replace the Nexus 5000 k with   Cisco Nexus 93180YC-EX

https://www.cisco.com/c/en/us/support/switches/nexus-93180yc-ex-switch/model.html

and  we  want  to transfer and migrate  all  Firewalls and  routers   to The new pair of

the Nexus 93180  ,,  we  want to  dedicate The Nexus 7010  for only  Routing at the Highest possible  speed

the new Nexus 93180YC-EX  pair  will  be  connected  to  all   Cisco catalyst remote branches switches ..


we have two  questions :-

First :-  is it  possible  to  use the 93180YC-EX  in the aggregation Layer , Not in collapsed Aggregation  Access layer   ,,  we want to separate aggregation and access layer and we  want  to  implement cisco 3 layers design model –
Where a pair of Nexus 7010 reside in the core and  pair of  Nexus 93180yc-EX reside in aggregation then Cisco catalyst switched  reside on access layer .

 If   the  mentioned case is  applicable  then please provide us with  sample cases and designs

Second :-




Regarding the upgrade plan
Is it  possible  to  transfer all firewall  -  security  policies and inter-vlan routing  to  the pair of  93180YC-EX   instead of the N7K ?