Recent content by Mikecl

Hi, I have an IPSEC tunnel from a remote site that accesses a particular host on the dmz. That host now also requires Internet access (not necessaeraily at the same time) object-group service webservices tcp-udp port-object eq www port-object eq 443 port-object eq domain exit access-list...

Hi Currently I have 2 * 3560 switches each connected to a trunked router, the 2 routers connect via MPLS between the sites the 3560's are not currently configured for routing. I have the opportunity to connect a 100mb poini to point connection directly between the 3560's. I plan to connect the...

Hi, Can this be done if so how? I have a cisco asa with multiple external IP addresses and typically i configure static mapping between external address and a number of specific internal hosts using differrent ports. Now I need to allow 2 or 3 external hosts access to approx 50 or so internal...

Hi Guys, Thanks for responding, I can add another switch without a problem, I thought running HSRP on the LAN side would mean no changes for the clients as the virtual IP address would be used, however the question I have relates to how the ISP router would choose or direct traffic to the...

Hi, Hi I have one ISP (with ADSL Backup) which provides a 10MB ethernet connection, I would like to provide router resilience , I was thinking of connecting a switch to the ISP connection and then connecting each of the 2 routers to the switch and run HSRP for the clients on the LAN. The...

Hi, Fairly new to frontpage, I have a few questions that hopefully someone can answer. I am using themes for page layout/design. 1. I created a company logo but i want it in the centre of the screen rather than top left, how can i move it? 2. If i want to make the box or border down the left...

Hi Andy, Thanks for your help it appears as though the code running on these Lightning Edge switches does not properly handle CDP, this is to be sorted in a later code release. Thanks to all who made suggestions, this tread can be closed Regards Mike

Hi Andy, Thanks for responding we are moving from double tagging Q in Q(which work fine) to single tagging which is how this link is configured. Not sure of the Kit. I believe only tagged packets from VLAN's 501-504 inc are allowed across the link. I did try setting vlan dot1q tag native on the...

Hi Andy, Thanks for the quick reply. If I connect the 2 switches with a crossover cable Fa0/1 to Fa0/1 I can see CDP ok, the issue arrises when I connect the switches to the external provider's layer2 switched network. Only VLAN's 501-504 Inc are allowed on their trunks On the 3550 switches I...

Hi Andy, Thanks for the info, one of the switches has 12.1x installed I have updgraded it to 12.2(25)SEA but still cant see cdp across the link although I can see local devices, can you remember what the bug ID was for the problem?

Hi, I have a couple of 3550 cisco switches connected via a layer 2 external network. Only vlan's 501-504 are allowed to pass across the link and I believe they all need to be tagged. I can pass traffic across the link ok, i can telnet between the switches ok but I cant get CDP info across the...

I thought the etherchannel was to help or aggregate links between devices, how does it help with resilience? Running HSRP may be an option but typically the different segments only appear on one or the other core switches. The floor switches I can run back to two core switches so that is not so...

Hi I have a PIX configured with an existing isakmp policy 20 for pix to pix use I want to add Cisco client VPN access however all of the examples I have seen specifying different setting than already configured. Can I use the same ISAKMP policy will the cisco vp client support 3des sha...

I have an aging 4006 with L3 card, a 4506, and one 4503 both with different supervisor engine cards. They are connected by one link from the 4006, the floor switches then connect to either the 4006 or 4506. I would like to provide some resilince in the past I have had the luxury of having two...

Thanks I'll give it a try