I found this reference DCNM-L-NXACCK9 in the configuration generated by a dynamic Tools for a nexus bundle N5K-C5548UP-B-S32. This reference is not reflected in the price list. Has it been replaced? no datasheet on Cisco portal.
View 2 RepliesHigh Utilization event generated for Nexus 7010 shows in LMS 4.0.1. share your input why its generated. We have checked up Nexus, it showed not utilization.
View 2 Replies View RelatedI am new to Cisco Nexus 7000 Series NX-OS System of appliances. I am looking for type of log events that are getting generated by CISCO Nexus 7000 switches. Some documents which give me this references & some documents which have a log line explained.
View 4 Replies View RelatedWhat is the command that can show the ACE Bundle (Like: ACE-4710-02-K9, ACE-4710-04-K9). We have ordered one ACE with 4G BW, and another one with 2G BW. But nothing shows this fact using "show hardware" and "show inventory" commands !
View 1 Replies View RelatedWe have ordered the following 10 line items , but only got 3 licenses , unless the 3 licenses somehow have all the licenses integrated into the 3 part numbers below, but I suspect not.
Licenses attached from Cisco:-
N7K-C7009-XL-SBUN Nexus 7009 Scalable Feature License x 1
N7K-C7009-SBUN-P1 Inc LAN,ADV,TRS,EL2,DCNM,DCNMSAN,MPLS,SAN,XL -Promotion x 1
[Code].....
To understand and configuring VPN setup to give secure access to my DB & Application Server exist in my Datacenter, to other Service Provider organisation. They need to access those DB & Application Server sitting at their company LAN itself.
My DC Setup :-
1. Core Router 7609 with SPA-IPSEC-SSC400-1 ( Cisco 6500/7600 IPSec VPN SPA Bundle 1 )
2. Core Switch 6513 with FWSM, ACE, SVC ( Network Analyser ), SUP 720
3. Distribution 6509 SUP 720
All the DB & Application Server connected to Distribution Switch in various VLAN,The Server support team from another company need the access to those, for that we will take MPLS link connecting out Core Router.
the dynamic port range server load balancing supported for MS Exchange 2010
View 1 Replies View RelatedI have very strange problem. I have two NK5-C5548UP-Fa where I need to implement the vpc features. I want my peer link go over an SVI. I have Port-Channel 100 configured as a trunk with 3 vlans in it (my VPC-Peer Vlan included in a seperate VRF, and two data vlans).
I have set up the vpc domain 1 and configured the peer-keepalive source, destination and vrf. All seemed fine.
So I had a connection between those Switches and could ping each way in my SVI.
In the moment i set the command vpc peer-link in the port-channel the vlans in the trunk went on err-disable and I lost connection.
SWITCH# sh int trunk
--------------------------------------------------------------------------------
Port Native Status Port
Vlan Channel
[Code].....
I am just CCNA, i have a project to configure site to site and remote access vpn on cisco 3000 routers and pix firewalls.. but the problem is only main site has the static ip while other sites have dynamic ips.
1- both the sides have dynamic ips.
2- one site have static and the other dynamic.
Am trying to do a dynamic configuration of a 3900 series router (3925 to be precise).For the software and licenses, under the IOS technology Package Licenses, what's the significant of SL-39-DATA-K9 and SL-39-SECNPE-K9? Are they really necessary for the router?
View 3 Replies View RelatedI'm having some issues configuring NAT statements on my ASA5505 which has recently been upgraded to 8.41.
I have a single dynamic IP on the outside interface of the ASA and would like all internal hosts to NAT/PAT to it. In addition, I would like to have several ports 'forwarded' to internal hosts, one of which is TCP/4343. With the current configuration all hosts are NATing to the external interface properly but the service running on TCP/4343 is not accessible from the outside. See command output below:
"sh run object" output:
object network DrJones host 10.81.220.90object network LAN-10.81.220.0 subnet 10.81.220.0 255.255.255.0
"sh run nat" output:
object network DrJones nat (inside,outside) static interface service tcp 4343 4343object network LAN-10.81.220.0 nat (inside,outside) dynamic interface
"sh run access-list" output:
access-list inside_access_in extended permit ip 10.81.220.0 255.255.255.0 anyaccess-list outside_access_in extended permit icmp any any echo-replyaccess-list outside_access_in extended permit tcp any interface outside eq 4343
I am working on a DataCenter architecture where we would like to implement Nexus 7000, For the time being, there only one "context" but we may take the opportunity to implement VDC in a later future, I was not able to find a clear answer on the following :
Can we add the VDC licence & configure a new VDC on a Nexus 7000 running without VDC ? I suppose this is possible. but does it need to have the whole configuration changed or adding a VDC can be done without any interruption on the current environnement ?
Any info on how to configure dynamic-pinning, instead of static pinning on a Nexus 2224 connected to a 7009?Can't seem to find anything on CCO!
View 9 Replies View RelatedI have connected a 10BaseT device to a CISCO Catalyst 3560xPOE switch with dynamic port security. All seems to work fine when the distance between the two devices is closer then 200ft. When I connect to 10BaseT devices farther out near 300ft the response from the attached device is lost. It works ok on unmanaged switches at the longer distance. Is there a minimum response time from attached devices for dynamic port security to work properly? Is there any other explanation why it would work on cheaper switches, but not on the Port Secured Switch?
View 2 Replies View RelatedAccording to the note at the bottom of a VMware KB Article "Cisco Nexus 1000V and VMware vCloud Director 1.5,"
"Note: You are must use the Cisco Virtual Network Management Center (VNMC) virtual appliance from Cisco. This is a separate products and needs to be licensed from Cisco."
Is this actually the case? I know you could use portgroup based network pools with vCD 1.0 and 1kv. Can I use the 1kv with VLAN-backed network pools in vCD 1.5 without the Virtual Network Management Center or is it required?
I am trying to get documentation on how to integrate an ACE30 module in a service chassis design integrated with the Nexus 7000 in routed mode. Only documentation I could find shows this design with the ACE30 module in a one arm mode. Any documentation that shows this implementation of this design?
View 2 Replies View Relatedi have a client company that needs to extend their network. i am advising them to purchase the cisco aironet 1550. does the wireless AP support all the communication that is generated by SAP business one? Also, if this AP is placed outside on a over their offices, what is the estimate range that it will cover knowing that their offices are only one story high but do have a big shed that contains some production machine and metals everywhere
View 1 Replies View RelatedI am running CBAC on a 1811 running IOS 15.1 and can't figure out how to configure it so that I can preform TFTP upgrades with CBAC enabled. It appears that CBAC doesn't catch self-generated traffic and put in a reverse rule in the ACL. I am trying to upgrade the image on this router using a public-addressed TFTP server on the F0 interface. If I drop the ACL the traffic will work, so why isn't CBAC cacthing the TFTP outbound? [code]
The tftp rule above is for TFTP upgrades on other equipment, using a server behind this router. I tried defining an outbound ACL as well on F0 to get the traffic be "caught" by CBAC but that didn't work. I also tried adding "ip inspect name trust tftp" but that didn't work.
I have 1242 Configured with 12.4.21a-ja1 and I have many of these. however I have 4 on the same location that have just started rebooting. The crashinfo logs ell me that cmd: PASSWORD statement not printed..Dont know if thats the issue....but something is wrong.. We are running SNMP and thats about it...
View 1 Replies View RelatedConfiguring radius authentication on Nexus 7k?I have heard once you have configured the radius you are only able to run show commands on it.
View 1 Replies View RelatedI am looking to configure PBR in Nexus. The current setup in IOS is :
interface Vlan10
ip address 172.27.206.1 255.255.255.0
ip address 172.27.208.1 255.255.254.0 secondary
ip policy route-map Vlan_10_to_Corp
route-map Vlan_10_to_Corp permit 10match ip address Vlan_10_to_Corp
set ip next-hop 172.27.209.250!route-map Vlan_305_to_EFH permit 30
[code]....
But, Nexus PBR will not work with deny statements init. Now, what options do I have ?
I'm busy on configuring the backup of the configuration from Nexus switches 5K and 7K.I have installed COPSSH on my windows server and try to confiugre the sftp credentials. [code] I have tested from the CLI from the switch and i have the issue but if i use the default vrf 'default' it works fine.How can i change the command sent by DCNM to the Nexus in order to specify vrf default and not vrf management ?
View 1 Replies View Relatedi have a use-case in which we need to firewall some of the security-sensitive-vlans to the ASA. In other words, there are few vlans that have their SVIs on the N5k (Layer-3 enabled) which talk to each other and there are some which have the layer-3 on the ASA. The ASA has sub-interfaces for those vlans. The N5k-sw and the ASA are interconnected on the same 1 physical link with a sub-interface on both ( /30) and the ASA is injecting default route to it in OSPF. They are advertising all of their networks in OSPF. I see all the routes in them. (Attached pic),My issue is: I am unable to ping the other sub-interface on the ASA from the N5k. (If you check the attached diagram, i cannot ping 20.1.1.1 from the N5k, although i can reach my next-hop 10.1.1.2) I have made the security-level to 100 for the subinterfaces and the physical interface on the ASA, also have allowed ip,icmps in the ACLs on the sub-interfaces of vlan 10 and 20 in both directions.
View 5 Replies View RelatedHow to change or modify the auto generated network key? I am trying to work around but no luck. Is there a way to do this or once you generate a network key it is a default.
View 5 Replies View RelatedMy customer they do not want change their real server IPs. So I need setup one interace (one armed) for them on ACE4710. Who had this sample configuration? (CSS has this but it seems to be not compitable with ACE)
View 4 Replies View RelatedI am attempting to configure an ACE4710 to perform SSL end-to-end confguration. i.e. SSL termination - load balance - SSL initiate to backend server.The configuration appears to work fine in a test lab using any old web server, however when I peform the same configuration in the production environment it does not work. It appeatrs from a capture run on the ace that the ace is reseting the tcp connections after communicating with the back end server. The main difference I can think of in this environment is that the cert and key pair the ace is using where exported from the backend server, i.e. both the ace and the backend server have the same certificates and keys. Is this allowed? how to troubleshoot why the ace resets the connection.
View 6 Replies View RelatedI have to deploy the Cisco GSS in our 2 dataceters globally seprate IP ranges to loadbalance the exchange 2010 environment with Cisco ACE 4710 series SLBs. The scenario is to deploy one GSS + ACE on each datacenters and our nameserver will point to both GSS's IP addresses to get through. Incase primary site "site A" goes down name server will point the client's request to "site B".
What will be the physical setup of the GSS here and what configuration should on SLB ACE will make it work? Do GSS and ACE need to be in the same vlan? is this necessary to use Both interface of the GSS to get things working? How the GSS will check the health check on ACE if they both are on different vlans/ip range? Our ACE will be in routed mode do we need to assign the Real server default gateway as ACE inside interface with the server farm or just do the SNAT of the client IPs so the request can come back to ACE?
I have followed every piece of cisco documentation I could find on this and I still can't get vPC configured to actually work. The VLANs stay in a suspended state so no traffic flows across. Below is my configuration:vrf context management ip route 0.0.0.0/0 10.86.0.1vlan 1,vlan 86 name I.S_Infrastructure,vpc domain 1 role priority 1000 peer-keepalive destination 10.86.0.4,interface Vlan1,interface Vlan86 no shutdown description I.S._Infrastructure ip address 10.86.0.1/24,interface port-channel1 switchport mode trunk vpc peer-link spanning-tree port type normal,interface Ethernet1/1 switchport mode trunk channel-group 1 mode active,interface Ethernet1/2 switchport mode trunk channel-group 1 mode active ,interface Ethernet1/3,escription Connection to Mgmt0 switchport access vlan 86 speed 1000.
View 8 Replies View Relatedi am trying to use teh ACE to replace an apache based load balancer in an jboss application cluster. I am using L7 loadbalancing to load balance between multiple components. the way these jboss application servers work with apache is that.When the jboss application starts up on the on application cluster, it issues a GET opencase/webservices/config-service?wsdl to the loadbalancer IP.The apache based LB in turn talks to the same box on port 8009 via ajp retrieves the configuration file and provides it back to the application on port 80.And after 2 has completed the Jboss application comes up. Basically to start the application the Apache loadbalacer will accept requests from the its target list and load balance the request back to them itself.Not sure how i can use the ACE to accomplish this. attached are my topology (logical) and the ace configuration. from my topology file -- the net-cms-1 will issue a get request to teh VIP (on the ace), the ACE accepts the connection but soon resets it.
View 1 Replies View RelatedI am currently stuck to setup an automated configuration backup for ACE Blades. I found a script to backup the ACE from the Cisco ANM box but unfortunately I am not very familiar with Linux. (script) in place, to "pull" the ACE config from a Microsoft system ?
System State:
ACE IOS A2.(1).5
I have Ace 4710 version A4.1.1 and I am experiencing interesting problem with GUI and SSH reachability. I am unable to connect to management vlan3000. Interesting is that I can ping from ACE to network but unable to ping or SSH or HTTPS to ACE. Everything seems good. ARP is ok, switch is OK, line is up, protocol is up. Management is enabled for icmp, https, ssh to any.
When I do show interface I noticed line Config download failures : 9.
Hardware type is VLAN MAC address is 00:1e:68:1e:bc:db Virtual MAC address is 00:0b:fc:fe:1b:01 Mode : routed IP address is 10.168.0.18 netmask is 255.255.255.128 FT status is active Description:Management VLAN MTU: 1500 bytes Last cleared: never Last Changed: Mon Jan 21 16:48:54 2013 No of transitions: 5 Alias IP address not set Peer IP address is 10.168.0.19 Peer IP netmask is 255.255.255.128 Assigned on the physical port, up on the
[Code] ....
I only have configured load balancing on apache with a very simple setup. I have to deploy 2 applications on my clients environment that run inside jboss. One of these applications needs session to be sticky to work properly. The other does not.
In apache I can configure is the sticky parameter is true or false, based on the url, like /appA/* is sticky and /appB/* is not sticky. Can I do that in a CSS 11503? My client insists that it is impossible. That the CSS is only ip based.
I copied the configuration below from the manual: owner arrowpoint # content ruleWapSticky
We are replacing CSM modules with 4710 appliances. Is there a config conversion tool? Have not seen it in any Cisco documents.
View 3 Replies View Related