Is the below capture in any way indication why the host 10.255.0.50 is so dreadfully slow? It's a backup from a host pushing data over to outside cloud.

 1: 11:39:11.779866       802.1Q vlan#900 P0 10.255.0.50.60658 > 209.222.83.40.5128: P 3248280326:3248280838(512) ack 4046900626 win 39 <nop,nop,timestamp 21801362 1515457710>
   2: 11:39:11.788151       802.1Q vlan#900 P1 209.222.83.40.5128 > 10.255.0.50.60658: . ack 3248280838 win 0 <nop,nop,timestamp 1515457779 21801362>
   3: 11:39:11.791813       802.1Q vlan#900 P1 209.222.83.40.5128 > 10.255.0.50.60658: . ack 3248280838 win 31 <nop,nop,timestamp 1515457780 21801362>
   4: 11:39:11.791966       802.1Q vlan#900 P0 10.255.0.50.60658 > 209.222.83.40.5128: . 3248280838:3248282206(1368) ack 4046900626 win 39 <nop,nop,timestamp 21801365 1515457780>
   5: 11:39:11.791981       802.1Q vlan#900 P0 10.255.0.50.60658 > 209.222.83.40.5128: . 3248282206:3248283574(1368) ack 4046900626 win 39 <nop,nop,timestamp 21801365 1515457780>
   6: 11:39:11.791997       802.1Q vlan#900 P0 10.255.0.50.60658 > 209.222.83.40.5128: . 3248283574:3248284942(1368) ack 4046900626 win 39 <nop,nop,timestamp 21801365 1515457780>
   7: 11:39:11.792012       802.1Q vlan#900 P0 10.255.0.50.60658 > 209.222.83.40.5128: . 3248284942:3248286310(1368) ack 4046900626 win 39 <nop,nop,timestamp 21801365 1515457780>
   8: 11:39:11.792027       802.1Q vlan#900 P0 10.255.0.50.60658 > 209.222.83.40.5128: . 3248286310:3248287678(1368) ack 4046900626 win 39 

Select all Open in new window

…

Currently have interfaces set up with (2) vlans

mgmt 86
cpe 87

When controller is set to tunnel traffic and use controller as gw - clients are able to get an ip off ruckus ap.
When controller is set for nomadix to be gw - clients are NOT able to get an ip off of ruckus ap.

As it stands, I'm trying to understand what is preventing clients from using nomadix as gw.
Cisco box is currently set to switch mode with the following for int:

 interface gigabitethernet1
 switchport mode general
 switchport general allowed vlan add 87 tagged
 switchport default-vlan tagged
!
interface gigabitethernet2
 switchport mode general
 switchport general allowed vlan add 87 tagged

Please keep in mind that I am testing a ruckus ap on int2 and can access internet if traffic is tunneled to ruckus controller. What's odd to me is that the cpe vlan for the ruckus controller is not even on this cisco switch but I'm able to pull a cpe ip.
 
To reiterate, I am having trouble getting an ip when controller is set to using the nomadix as a gw for client ips.

Looking for any enlightenment as I've been working on this for a few days already and am stumped.

Thank you!

Hi,



Can anyone help in identifying why once my vpn client enabled. I can  ping all other internal IPs except 192.168.4.1(interface DatabaseZone)  and 192.168.3.1. My vpn client assigned 192.168.5.100 which is in  the range ov VpHi,



Can anyone help in identifying why once my vpn client enabled. Cant ping any of internal IPs configuration like 192.168.4.1(interface DatabaseZone) . My vpn client assigned 192.168.5.100 which is in  the range of Vpnclients object-group configuration.nclients object-group configuration.

here attached output from "show vpn-sessiondb detail remote"
vpn-sesssiondb-detail.txt

A few years back I had to fly to a remote data center and was sent several cisco switches that were to be "stacked" I recall unboxing everything and plugging it all in via instructions from my home office. I booted with a console cable and configured the initial IP address. Then home office pretty much took over and although I was able to observe a lot if it did not sink in. I do recall the stacks only had 1 IP address each and since it was a remote data center we had set up switch redundancy. I remember plugging in cables that had to be crossed to the switch below and when it was all done everything was set with dual power supply and I could have sworn it was configured so if a switch failed another one would take over. I had another job after that where a cisco stack was already installed. I recall 5 switches and when we had to shut down power the Master had to do go down last and come up first. At least I think that was the order, it was written on the wall next to the devices. I am asking all this because I have a job interview that will including installing and initializing a lot if Cisco devices including stacks. It sounds like it will be very similar to what I did years ago, installing the hardware and getting it set so the engineers in the home office could take over. I just do not remember the purposes for a stack as apposed to multiple switches. I know you will save IPs by configuring a switch as a stack, but what the other main reasons? I know the remote install …

Greetings,

My goal is to allow a 3rd party vendor access to our internet but not to our internal LAN Subnet by using the DMZ port on our Sonicwall TZ300  connected to  their hardware  router (Linksys EA6400).

1. Is this possible?
2. Is this the easiest method since we already have both hardware routers?
3. Will this truly separate our access to each others LAN networks?

Thank you in advance.

COM1

Hi there,

I know its kinda a ridiculous question since the Cisco Nexus Series is high end data center hardware and the Cisco SG500X is SMB. But for my home lab I am planning for the future and a good friend who runs a big data center wanted to sell me some nice Cisco Nexus Stuff. So I could get them very very cheap few hundred bucks vs. the around 1k for the SG500X-24. To be specific it would be a Nexus 5596UP with a 2248TP expension.

Would you go for the Nexus or for the SG500X? What are the gotcha's with the Nexus?

I know that the SG500X does L3 stuff out of the box. The Nexus 5596UP needs the L3 Module and the right License file for it. Also the Nexus 5596UP can't do 100MBit but I guess that's solved with the 2248TP Expension.

Thanks,
Yves

Any thoughts on the  ARUBA IAP-205 WIRELESS ACCESS POINT s?

I have about 4 or 5 outhouses and I want an goof Wi-Fi solution.

Thank you.

Dear guys, I have this scenario:
- The original IP network which ISP provide: 13.14.24.160/28 (no worry, it's fake)
- I don't know why the IT guy who worked here before request ISP to split that network to 2 subnets: 13.14.24.160/29 and 13.14.24.168/29
- However, I was handover the instructions to get Internet for LAN network as the attached picture without any other explanation

Can anyone help me to answer these?
- Please explain the way end-users in LAN network to go the Internet. Which IP network should we configure in users' PCs?
- Please give me some ideas that clarify the purpose of the splitting?
- Can I place the pfSense firewall in the Router position? If so, is there any device/configuration we need to focus?

Many thanks as always!
Diagram.png

Hello Everybody ,
 
 need you support RnS Expert Engineer

my scenario , the requirement are the router automatically move the the traffic flow based  link delay by using PFR with active/ active  by using Active/ Active ISP link utilization .

 here  are requirement and configuration    

LAN subnet :-
 188.117.100.172/29
 188.117.124.36 /29
my goals  to measure the traffic over all the available ISP
the  primary path of the first subent  is  ISP 0A, primary path of the 2nd subnet is ISP02
if the any ISP link experiencing any delay the  inbound and outbound shift the traffic automatically .

MY BGP configuration  
ip bgp-community new-format

outer bgp 7770
 bgp log-neighbor-changes
 timers bgp 10 30
 neighbor 172.21.8.169 remote-as 41176
 neighbor 172.21.8.177 remote-as 41176
 !
 address-family ipv4
 
  network 188.117.100.172 mask 255.255.255.252
  network 188.117.124.36 mask 255.255.255.252
 
  neighbor 172.21.8.169 activate
  neighbor 172.21.8.169 send-community both
  neighbor 172.21.8.177 activate
  neighbor 172.21.8.177 send-community both

ISP's BGP Configuration

neighbor 172.21.8.170 send-community both
  neighbor 172.21.8.170 default-originate
  neighbor 172.21.8.170 soft-reconfiguration inbound
  neighbor 172.21.8.170 prefix-list  PFR out
  neighbor 172.21.8.170 route-map BGP_COMM in
  neighbor 172.21.8.178 activate
  neighbor 172.21.8.178 send-community both
  neighbor 172.21.8.178 default-originate
  …

Hi All,

I'm currently looking at this proposal & thinking of implementing OSPF & MLPS I'd like some support with the config & any ideas of best practices?

Thank you all.
ospf.PNG

Why would I be getting these errors on my logs. I am running DMVPN.

 dest_addr 4.5.6.7, SPI 0x8e584d60
000058: May 15 09:18:21: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000309438262163039 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000059: May 15 09:19:53: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000309529825315373 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000060: May 15 09:39:13: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000310690125718495 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000061: May 15 09:50:40: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000311376506767405 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000062: May 15 09:52:37: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000311493607193615 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000063: May 15 09:53:38: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000311554565979494 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000064: May 15 09:58:38: 

Select all Open in new window

…