We are implement the multiple VLans and Wi-Fi  in our company:
 
Vlan 1:default Vlan (192.168.1.0/24)
Vlan 2:Office Vlan(192.168.2.0/24)
Vlan 101:production Vlan (172.16.0.0/24)

We are using Aruba instant virtual controller to control all the APs. In the core switch default gateway is 192.168.1.254 which is the router Interface.

We had no problem for the connectivity using wired. But we found the if connected using office wifi (Vlan 2) and try to reach those device have wired connection in (Vlan 101) is no issue. But If the device is connected using Wi-Fi then we can not reached.

IN the Wi-Fi controller we never set any policy to block it.Please advice ?

People,

I'm trying to implement email resiliency solution internally and also externally with no Load Balancer access, so I came up with the below Idea:

http://www.tutorius.com/setting-up-a-dns-round-robin-in-windows
http://exchange929.blogspot.com.au/2013/10/high-availability-for-exchange-2013-cas.html

which I will be applying for all of my Exchange Server 2013 Std. Edition running CAS role:

Internally
AutoDiscover.domain.com points to CAS server 1 internal IP address on AD Site 1
OWA.domain.com points to CAS server 1 internal IP address on AD Site 1

AutoDiscover.domain.com points to CAS server 2 internal IP address on AD Site 2
OWA.domain.com points to CAS server 2 internal IP address on AD Site 2

...

AutoDiscover.domain.com points to CAS server N internal IP address on AD Site N
OWA.domain.com points to CAS server N internal IP address on AD Site N

and also Externally
AutoDiscover.domain.com points to CAS server 1 public IP address on the internet.
OWA.domain.com points to CAS server 1 public IP address on the internet.

AutoDiscover.domain.com points to CAS server 2 public  IP address on the internet.
OWA.domain.com points to CAS server 2 public  IP address on the internet.

...

AutoDiscover.domain.com points to CAS server N public IP address on the internet.
OWA.domain.com points to CAS server N public  IP…

Greetings,

My goal is to allow a 3rd party vendor access to our internet but not to our internal LAN Subnet by using the DMZ port on our Sonicwall TZ300  connected to  their hardware  router (Linksys EA6400).

1. Is this possible?
2. Is this the easiest method since we already have both hardware routers?
3. Will this truly separate our access to each others LAN networks?

Thank you in advance.

COM1

Hi Experts

We had one of our 3750's hardware fail, will not power on. Were currently purchased a new 3750 to replace. Would like some general guidelines on the steps to do so. the most important we want the vlan information to come across.
Do we backup the config on an existing switch and apply it on the new one? - We tried and received a lot of errors
Do we apply the vlan and other port information (below is our existing) to match what we already have.
How do we place the switch back in the stack, unpowered and connect all the stacking cables and then power it on?
What Impact will that have on the stack, will it power down?
What will and will not come across after we add the switch to the stack, do we need to set a password on the new switch, I know after you add the switch the master takes over and it applies some information - firmware.

The switches in the stack has a lower SW Version than the new switch being added will it be downgraded automatically or something we have to do manually.  (sw version of the switches in stack 12.2(25) SEB4 \ New Switch 12.2(55)SB


interface FastEthernet1/0/12
 switchport access vlan 10
 switchport voice vlan 20
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape  10  0  0  0
 mls qos trust device cisco-phone
 mls qos trust cos
 auto qos voip cisco-phone
 spanning-tree portfast



Thanks Much

How can I tag traffic on physical interface of a Cisco router?
I know I can create sub interface but I want to know if it is possible on a physical interface.
There is a command vlan-id dot1q available for physical interface but does not work.

Dear guys, I have this scenario:
- The original IP network which ISP provide: 13.14.24.160/28 (no worry, it's fake)
- I don't know why the IT guy who worked here before request ISP to split that network to 2 subnets: 13.14.24.160/29 and 13.14.24.168/29
- However, I was handover the instructions to get Internet for LAN network as the attached picture without any other explanation

Can anyone help me to answer these?
- Please explain the way end-users in LAN network to go the Internet. Which IP network should we configure in users' PCs?
- Please give me some ideas that clarify the purpose of the splitting?
- Can I place the pfSense firewall in the Router position? If so, is there any device/configuration we need to focus?

Many thanks as always!
Diagram.png

IS-IS router summarization can only be done on L1/L2 router is this correct.
There is now other place to do route summarization.

Why would I be getting these errors on my logs. I am running DMVPN.

 dest_addr 4.5.6.7, SPI 0x8e584d60
000058: May 15 09:18:21: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000309438262163039 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000059: May 15 09:19:53: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000309529825315373 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000060: May 15 09:39:13: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000310690125718495 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000061: May 15 09:50:40: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000311376506767405 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000062: May 15 09:52:37: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000311493607193615 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000063: May 15 09:53:38: %IOSXE-3-PLATFORM: SIP0: cpp_cp: QFP:0.0 Thread:000 TS:00000311554565979494 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 3, src_addr 1.2.3.4 dest_addr 4.5.6.7, SPI 0x8d670b5e
000064: May 15 09:58:38: 

Select all Open in new window

…

I have 887-SEC(IAD887B-K9). itried to configure from cisco configuration manager but i didn't see in wizard ppoe selection.
Also i found from an old 887 i had the configuration file and i tried to configure the new one.i saved configuration and from reload the (CD) does not have any blinking searching to negotiate.
Can anyone help me configure the cisco for ppoe???

Regards!!!!

We have a current network all hard wired with its own internet connection and a second wireless network with a separate internet connection. I have one SSID for Guests on the wireless side and I want to create a second SSID so if you need to access the wired side of the network with a laptop it is possible. How would I keep the setup as is and network the two to be able to access the wired side via the wireless?

Can I upgrade my Nexus switch from version 6.0(2)N1(2a) directly new version 7.3(2)N1(1)

We are being told by an outside technical consulting firm that we cannot upgrade servers until our entire network infrastructure has been replaced.  I need an experts opinion on the scenario and comments made by them (below).

For reasons too lengthily to go into here we are still running our internal domain on W2K3 servers. All of the desktops and laptops are "newer" machines running Windows 7 or 10.  We vertualized the BDC's and member servers 2 years ago but are still running the PDC on old (ancient) hardware.  The new server we verualized the other servers on is intended and capable of running a new domain (built from scratch) on Windows Server 2016.

Our current network infrastructure is built on Cat5 cabling installed circa 2001 and our switches are 10/100 with gigabit dual mode (62.5) fiber up-links. These are old and due for replacement also. Our facilities are spread out through several buildings nearly a city block long.  We have obtained quotes to rewire with a combination of single mode fiber and Cat6 cabling to the desktops, WAPS, etc. Those quotes came in around $100K which is some pretty bitter medicine to swallow at this time.

I suggested to the consulting firm that we move forward with the switch replacement using single mode capable units that we can configure to 100Megabit on all ports and proceed with the domain server upgrade.  Their response was as follows:

"we need to have a solid infrastructure in place in order to put the best …

I have solarwinds to monitor the traffic .
I see (in solarwinds) cisco fast ethernet with 100% utilization although  the top conversation appears (in solarwinds)  in small payload of traffic in KB level .
How does that occur?