The Community is a hub for connecting with your peers and Cisco specialists to ask for help, share your expertise, build your network, and grow professionally. New Here? Click here to learn more and get started.
Cisco Community is an active and collaborative place to learn more about our products and ask questions of peers and Cisco experts! Check out some of the most popular conversations happening right now!
Assume I have to routing among different block of campus network with a square cross connected with OSPF peer to peer type,what is the disadvantage of this square cross design?Is ACI fabric used to replace this square cross design? or replace campus ...
Assume that there are three router type devices outside firewall, and one core switch router behind one layer firewalland I would like to hide the router hop of core switch router from traceroute how to modify TTL to less values at router at the most...
Hi all, All jabber clients are using ldap accounts to log in. I wonder if it's possible to make a policy such as locking the ldap account after 5 failed attempts. Can anybody know how to set jabber's policy rule about login attempts regardless of A...
I have a CBS350 switch that is set up to do inter-VLAN routing and provide DHCP addresses. That has been working without any issues for quite a while. Recently, I have created a private VLAN on it which is working okay except for one issue. I cannot ...
hi all,we have a topology without any redundant link. Every access switch is directly connected with the core switch, and it's a port-channel between access switch and the core. RSTP runs on switches by default, and we do not explicitly configure the...
Hello Dears, I have a little bit weird issue never faced it before, for the sake of testing for a client & to stay out of production impact, in addition to client confidentiality i had to simulate his environment base configuration to start Tshoot...
Hello everyone!I'm not a network engineer but as a subsystem (kernel + filesystem) engineer I know the network concept.Few months ago, I designed a DMZ and configured my 2 node VPC with 6 rack switch.Everything was smoothly working but I started to s...
So, I'm task with finding if anyone else search or connected to a specific URL in the last 30 days. Does any know if FMC have a way of searching this or generating a report. I have only found ways to create a rule to log it go forward not from the pa...
Hey guys, VPN on Firepower authenticating on ISE -> OK VPN on Firepower authenticating on Duo -> OK VPN on Firepower authenticating on ISE calling external Radius (Duo) for MFA -> NOK Duo's auth proxy logging shows: "20): Cannot decode password usi...
Is it possible for the FMC to run a report to indicate what rules are inactive/disabled? What about reporting what objects are not being used?I know beside various items there is a "report" icon, or "export to csv" but this isn't giving me the info I...
In the Assets & Coverage screen, on the Filters section on the left of the screen, it needs to have a higher fidelity than just the current City & State. Customers can have several locations in the same city and it doesn't help a whole lot to filter...
We are looking at moving to SSO but need to be able to include all the groups a user is a member of. Is it possible to pull this from AD and include it in SAML claims?Ideally we would want to manage this in a single place (AD) so if we added a new gr...
We are migrating from our Older Cisco ASA Firewalls to Cisco FTD 2140's. We currently are using WCCP on the ASA's for Transparent Proxy with our WSA Virtual Appliance under VMWare. I was just going to migrate WCCP Configurations to the FTD 2140's w...
Hello,I've been planning to role out dot1x on my network. However, the network consists of NXServers in the DC with thin clients that connect back them at user desks.As I think about it, how would dot1x work in this environment? Connecting a PC to a ...
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: