Tag Info

Hot answers tagged

3

As one of the previous answers states, you can use Policy Based Routing and set up a route map on your router. However, instead of using VLANs or Static IPs, you could use QoS Marking instead. This could be rolled out in a group policy to your Windows PCs, and the route map on your router could be configured to look out for a particular DSCP value to ...


2

I'd use real or observed numbers... Likely 400 Watts per server (assuming sane RAM and disk configurations) and ~380 Watts for the switch. This is based on experience with the equipment in production and working in and around data centers. Plan for expansion and growth as well.


1

I would use 'debug ip packet' and trace the ICMP packets at the time you send the bursts. That would give you an idea of what was happening. More info here: Cisco Debugging And, I'll reprint the warnings from that site here: Enabling debugging can disrupt operation of the router when internetworks are experiencing high load conditions. Hence, if logging ...


1

All you configuration looks fine and I can see that you have only allowed desired traffic to your servers using ACL. If you would like to anyone to be able to ping your server on public IP interface, you will need to add below ACL: access-list OutsideToInside extended permit icmp any any Or you can choose the servers instead of allowing ping to all/any.


1

I have found the solution! Indeed I had to extend my access-list on my outside interface!!! I have succeeded using ASDM. First I created a NEW network object for each of my servers. When you create a new object you will be asked for the internal IP address and "this is where the magic happens" you have to set the NAT IP address (the external address) !!! ...


1

EDIT: The below should work with a Cisco ASA and Cisco Layer 3 Switch This might work: Configure two VLANs - one for Windows and one for MAC's Assign independant DHCP scopes to the two VLAN's Configure routing to allow VLAN's to pass traffic between each other, which will allow both MAC & Windows to speak to Exchange server. Then you can configure ...


1

Futher to the original answer and to overcome the NAT issue, you should be able to assign the service-policy to the inside interface using the following line instead: interface FastEthernet0/1 description Inside Interface ip address 192.0.2.2 255.255.255.252 ip nat inside ip policy route-map PBR service-policy output REMARK_HTTP I'm not in a ...


1

I eventually just used comm2ip and modified the program to support more com ports (it only supports 5 out of the box). It is installed on a windows box with a bunch of rollover cables connected from the PC to Cisco routers. You ssh into the box and are redirected, based on the port, to a serial port. This is not a very enterprise-y solution, and we should ...


1

I think the security-level should be considered. You can ping from Inside to Outside, but the echo traffic must be allowed to go back to Inside.


1

Assuming you've checked the basics like ensuring that the access list is actually bound to the interface with the access-group command, if the logs are showing that the traffic is being denied, you can find out more information by simulating a packet with the packet-tracer command. That should tell you exactly why the packet is being rejected. Assuming your ...


1

It does not sound like you are connected to the router at all as you suspected. Are you sure that ssh is even enabled on the cisco box ? Has the box been set up or is it new ? I would connect up a console cable and login that way can't go wrong then.


1

Check your access point for a 'Wireless Separation' option. Some access points are configured by default to restrict traffic between wireless devices.


1

To answer your initial question, you'll pretty much have to restart. I couldn't find any commands available under the reduced privilege level that would let you either revert to the old config or change the password without restarting. To fix the problem you were originally trying to solve, if you're not using aaa-newmodel, what you can do is set a user ...



Only top voted, non community-wiki answers of a minimum length are eligible