Hi, everyone. Just wondering does anyone implemented multiple vtp domains? We are in process of upgrading our switchs to Cisco which will involve large number for switchs. As result, I would like to see if multiple VTP domain will help me on minimize the traffic of vlans database propagation...
Hi all, thanks for reading this thread.
I have question regards to site to site vpn using 2 pix. Currently I have a remote site with PIX 5153 version 7.0 (ASDM) installed, and is vpn to main site PIX 520 version 6.3.4. The remote site is able to initiate the vpn tunnel fine if the traffic is...
Hi I just want to know if anyone done a failover from Point-to-Point T1 to vpn before. I wonder if I have a Cisco router with VPN accelerate card or Cisco 2800 router install can I setup the router to failover to VPN link (site to site) when the router’s Point-to-Point link goes down. Any...
Hi, I have a question regards to NAT clients. I setup a Dynamic port translation for inside clients to access Internet. In the inside network, I have setup a system for sniffing the network and nothing else. However, from my IDS I seem someone is trying to connect to use ICMP hard error to...
Hey I have question about adding ACL to VPN clients. Currently I have Cisco PIX 515E (ASDM5.0) setup with VPN server. It authenticates users by accessing the TACACS server from inside network. However, I don’t know where to add the ACL for that user after it login. For example I would like...
Hi everyone, I trying to setup test lab that is consist an edge firewall, and our main firewall. This is a setup:
Un-secure network (192.168.254.x) <---> Cisco 515e (edge firewall) <---> Secure (main network - 10.x.x.x) <---> Cisco 520 (main) <---> Internet (Public IP)
On Cisco 515e I also...
Hi, I have question about In-Discard in Catalyst 6509. I have a 802.1q turn setup between two switches (Catalyst 6509 and Catalyst 3550) the layout shows bellows:
Cat6509 ------ Point to Point Laser ========= Point to Point Laser ----- Cat3550
Now I been receiving In-Discard in Catalyst 6509...
Hi,
I just wonder what is the good number for thresdhold setting in Dashboard properties? Or how to define a health network and set it up as baseline to compare the current network.
In my alarm log i getting a lot of Octts/s: alarm.
and utilization over 85%
thanks in advancce
SL
Hi all,
Currently I experienced problem with my snort. I am running it no Fedora 2.0, and snort 2.2. It was working find few weeks ago until I updated the new rules set, and configuration files. Now, when I open up my ACID, I getting Sensors: 0 in the ACID and no alert been received. I check...
I have question regards to Cisco 802.1Q trunk over WiFi. Current I have 2 D-Link DWL-2100AP running as Point-to-Point bridge that is interconnect between two Cisco Catalyst switch. I setup the both ports to be trunk port with IEEE802.1Q trunk. However, when I ran show spantree port# in root...
I am following the VLAN load balancing between trunks in Cisco website to setup the load balancing in my environment.
http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a00800ae96a.shtml
However, my environment is consisted of three switches. Catalyst 6509 x 1 and catalyst...
I have very strange question regards to Cisco PIX Failover. I had 2 PIX 520, Primary and Secondary. Just couple months ago, Primary PIX is having some hardware issues and we take it down for in house repair. After we finish repair the PIX, we went a head and put it back online. However, the...
Just happen today. I tried to PDM (https://aa.bb.cc.dd) into my Cisco PIX 520 using IE 6 like before. After I type in it or use bookmark it prompt me Security Alert.
1. Security Alert,
2. Click Yes
3. Type in my username and password as before.
After 1 second it shows “The page cannot be...
I have question about stateful failover on PIX 520. Several months ago the primary Firewall had hardware problem and we take it down for repair. Now the primary firewall is working, and I thinking to put it back to production. My question is failover going to work? What are procedures or...
Currently I had a Cisco 1600 running with IOS 12.0(3)T with 1.17MB of ram. The problem occurred last month, for some reason the memory just went from 40% used to 80% in one day and next day went to 99.8% used and till today. I did reboot it couples times but it still went back to 99%. I...
I setup SPAN port in cat 6509, and use a Sniffer Pro to get traffic flow. However, the VLAN1 seems to have problem such as broadcast / multicast Storm, high octets/s and high utilization in Sniffer alert. The most of broadcast / multicast is happen in trunking (fiber port) in 802.1q to another...
Hi all,
I have a Catalyst 6509 with 2 SUP1A installed and act as single router with highavailability. Just last Thursday switch become froze and dead over the night. After pull off the second blade and power-cycling the switch the switch return to functional.
I ran show test 1, and...
Got a question on VTP pruning. I setup a Catalyst 6500 as VTP server, and some 3500 as vtp client. I enable vtp pruning in cat 6500 by: set vtp pruning enable.
Show vtp domain:
Last Updater V2 Mode Pruning PruneEligible on Vlans
--------------- -------- --------...
I have question about Exemption Rules in the Cisco PIX. When should a translation exemption rules setup for the network? What is disadvantage of putting a translation exemption rules for a network? Will exemption rule cause client to by pass the Dynamic NAT rule in translation rules?
Sorry...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.