Cisco Adaptive Security Appliance Software Version 8.3(1)4 Device Manager Version 6.3(1)
The command wouldn't succed since the interface does not have a "nameif" (as suggested by cisco.com). If I do set a "nameif" then the redundant interface will pass untagged packets.
The command is "crypto isakmp enable interface-name"
It would be: crypto isakmp enable Redundant1.251 but
Here is my run conf:
interface GigabitEthernet0/0 description Switch_#1 duplex full no nameif no security-level no ip address ! interface GigabitEthernet0/1 description *** not used *** duplex full shutdown no nameif no security-level no ip address ! interface GigabitEthernet0/2 description Switch_#2 duplex full no nameif no security-level no ip address ! interface GigabitEthernet0/3 description *** not used *** duplex full shutdown no nameif no security-level no ip address
interface Management0/0 description mgt-vlan nameif inside security-level 100 ip address 172.19.24.66 255.255.254.0 management-only ! interface Redundant1 description Switch_#1_#2 member-interface GigabitEthernet0/0 member-interface GigabitEthernet0/2 no nameif no security-level no ip address ! interface Redundant1.251 description vlan251 vlan 251 no nameif security-level 100 ip address "outside_ip" 255.255.255.
Re: how to enable ISAKMP outside redundant interface ?
No, you shouldn't configure the nameif command on the physical interface if you have subinterfaces under that particular physical interface purely because that trunk interface would not be tagged, hence it is not recommended to configure any interface settings under the physical trunk interface.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...