All board posts in Cisco Support Community

Re: translation rule for SIP dial-peer

Mohammed al Baqari — Sat, 23 Jun 2018 10:09:07 GMT

Didn't get exactly what you are looking for?

Re: Last time that Running Config was changed

shekhar.rawat — Sat, 23 Jun 2018 09:16:19 GMT

Is there any way to check last 5 saved configuration in which time and date.?

Re: DHCP server on 3925 router with multiple VLANs

kr.ujjwal93 — Sat, 23 Jun 2018 08:57:36 GMT

I have 3925 router
I have configured failover rules for two isp
now I have to configure DHCP on a single LAN port
DHCP will be of 4 different private pools

Please help !!!

Re: AnyConnect connect to internet via ASA

i716 — Sat, 23 Jun 2018 08:49:04 GMT

Hello Karsten,

Thank you for your reply. I have tried both check boxes but unfortunately none of them work.

How can I implement your second suggestion via the ASDM?

translation rule for SIP dial-peer

techguy — Sat, 23 Jun 2018 08:42:07 GMT

Hi Guys,

I have outgoing Voip dialpeer where i cannot remove prefix. But we can make translation rule to omit prefix like 9 and then add outbound DID for outgoing calls. Any idea/suggestion?

dial-peer voice 2 voip
description OUTGOING CALLS
translation-profile outgoing outbound-DID
destination-pattern 9T
session protocol sipv2
session target sip-server
voice-class codec 1
voice-class sip dtmf-relay force rtp-nte
dtmf-relay rtp-nte
no vad

voice translation-rule 2
rule 1 /.*/ /35366850/
!
!
voice translation-profile outbound-DID
translate calling 2

Thanks.

Re: Cisco IOS IPv6 with 4G LTE Subnet Sharing

steve255.0 — Sat, 23 Jun 2018 08:35:30 GMT

hi, which IOS did you run? and how did you config ipv6 on cell interface? I got no ipv6 command under cell0 interface, no idea why? Thanks.

WLC timezone consideration for configuring wIPS?

muhammedadnan — Sat, 23 Jun 2018 08:31:10 GMT

Hello Experts,

Was going through the WLC 8.7 config guide and quite confused with contradicting statements on timezone.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-7/config-guide/b_cg87/initial_setup.html

From my understanding as long all the WLC, Prime and MSE are sync with the same NTP server and their timings are in sync, the timezones should not matter.

In WLC configuration, the only option that I see is for the GMT timezone. However for wIPS their's an explicit mention of recommendation of UTC timezone(If you are configuring wIPS, you must set the controller time zone to UTC.). Does it really matter?

Managing the Controller System Date and Time

You can configure the controller system date and time at the time of configuring the controller using the configuration wizard. If you did not configure the system date and time through the configuration wizard or if you want to change your configuration, you can follow the instructions in this section to configure the controller to obtain the date and time from a Network Time Protocol (NTP) server or to configure the date and time manually. Greenwich Mean Time (GMT) is used as the standard for setting the time zone on the controller.

You can also configure an authentication mechanism between various NTP servers.

Restrictions on Configuring the Cisco WLC Date and Time

If you are configuring wIPS, you must set the controller time zone to UTC.

Re: Site to Site IPsec VPN change from 3DES to AES-256 on ASA55xx

RJI — Sat, 23 Jun 2018 08:19:46 GMT

I wouldn't risk making these changes to the VPN over the VPN tunnel. I'd make sure you can access the remote VPN via SSH or ASDM on it's external interface. That way if there is an issue with the VPN tunnel and the tunnel is down you can still access the remote ASA and troubleshoot.

Re: ASR 9010 new Modular Line Card Install error???

nikola.t — Sat, 23 Jun 2018 08:04:19 GMT

Thank you Aleksandar for your reply,

I have seen many Cisco documentation about the possible combinations and I have to say that there are many datasheets that are not very clear.

If you could please make a sum up with me as I have a meeting with Cisco Vendor to decide the possible cards to choose in order to have an increase in the number of 10G interfaces:

Current Situation:

---------------

ASR-9010 Chassis

2x A9K-RSP-4G

2x A9K-2T20GE-L

IOS-XR 5.1.3

2x ASR-9010-DC power supply

Without any upgrade I cannot use the A9K-MOD400 and A9K-MPA-8x10GE cards.

1-The only modular card that I can go with is the A9K-MOD80-TR( the best would be A9K-MOD160-TR but did not find any info if it is supported). XR 5.1.3 supports both these cards.

The main question here is if A9K-MOD80-TR supports A9K-MPA-8x10GE ?

2- I can go directly to the A9K-24x10GE-TR(supported by the A9K-RSP-4G and by XR 5.1.3). The main question here is if all the ports are unblocking 10G or with over-subscription?

Upgrade Scenario

----------------

With upgrades I can use both A9K-MOD400 and A9K-MPA-8x10GE cards.

1. I have to go with A9K-RSP880-TR. Minimum software is 5.3.2 to use the modulars but the maximum is 5.3.4 because from documentation from XR 6.0.x and above the A9K-2T20GE-L are no longer mentioned as supported.

The other question is if more power supplies are required?

So the first scenario sound better as the same configuration can be used with an addition of a new card.

The second would be good because I can have newer hardware which will allow to also upgrade later to newer XR version.

Does Cisco follow any strategy of valuing the old hardware in exchange with newer versions?

Thanks again Aleksandar and sorry for the long reply

Re: New Install CUCM 12.0

silvakizir — Sat, 23 Jun 2018 08:02:48 GMT

I had the same exact problem with CUCM version 12.0.1.21900-7 and resolved it with Ciscos suggested way.

Cisco should add the above release to the affected ones in the bug CSCvh55176.

Re: FMC communication ports & deployment error.

yogdhanu — Sat, 23 Jun 2018 08:00:09 GMT

Its possible that 1 of the SFR does not have correct interface zone mapping. Please be aware that FMC treats both sfr as individual device. So the interface zone mapping has to be done manually on both.

Once that's done, than you should not get error.

Not sure about identity policy question.

Thanks

Yogesh

Re: GEO Blocking 5508 w/ Firepower

yogdhanu — Sat, 23 Jun 2018 07:55:34 GMT

I am assuming you have blocked the geo blocking on firepower module on ASA.

Then the behavior is expected and outside world would be able to ping ASA outside interface as that connection would not be passed on to SFR.

Hope it helps,

yogesh

Re: AMP for Endpoint - EMail scan grayed out

yogdhanu — Sat, 23 Jun 2018 07:53:56 GMT

Hi There,

The scan email option is not there anymore. It was related to Tetra option in earlier versions.

As of now attachments would be scanned if they are downloaded on local disk but the option of scan email is depreciated.

Hope it helps,

yogesh

Re: ASA/SFR failover

yogdhanu — Sat, 23 Jun 2018 07:49:25 GMT

Which rules you are talking about? Are those rules based on users/groups?

If yes, than may be users are not synced up properly from FMC to secondary SFR.

Hope it helps,

Yogesh

Re: Switch Configure

baljeet.s@zapbytes.in — Sat, 23 Jun 2018 07:42:22 GMT

hlo help me . my Switch is SG300-52
how to access on web page

Re: Switch Configure

baljeet.s@zapbytes.in — Sat, 23 Jun 2018 07:41:05 GMT

hlo

Re: Deactivate call barring issue

isaaco001 — Sat, 23 Jun 2018 07:23:00 GMT

hi Ratheesh,

Thanks for the reply. Please find debug attached.

dial-peer in use

dial-peer voice 13 pots
corlist outgoing international
destination-pattern 9.T
port 0/1/1:15

Re: AnyConnect connect to internet via ASA

Karsten Iwen — Sat, 23 Jun 2018 07:18:07 GMT

1) For hair-pinning, it is the other check-box. You need to allow traffic entering and exiting the same interface:

same-security-traffic permit intra-interface

2) Do you have a nat-rule for traffic from outside to outside?

nat (outside,outside) after-auto source dynamic any interface

Re: MSE not showing the timezone of NTP server, can the timezone alone be configured explicitly?

muhammedadnan — Sat, 23 Jun 2018 05:58:46 GMT

Thanks Flavio,

In the CLI, I don't even see the option to set the timezone to GMT. Options to see other time zone are however available though.

Also is their any explicit recommendation from Cisco to set the timezone to UTC?

Will there be any negative repercussions of having MSE in a different timezone as compared to prime and WLC?

Re: native vlan mismatch

mohammed01701 — Sat, 23 Jun 2018 05:36:41 GMT

Hi!

You are using diffrence native vlans, TenGigabitEthernet1/0/8 (80) you are using vlan 80 some natove and GigabitEthernet1/0/28 (1) you are using vlan 1. Can you post show Interface trunk and show run on both switchs?

/Mohammed