About kbrazil

Dear Kbrazil,   I would like to request to help investigate my issues, Currently I'm facing with DNAT policy issues. My design is pointing to DUAL Internet user can access to my DMZ network, My current policy and NAT translation is pointing to  ISP1 and destination translation IP is 10.101.7.9 this policy working fine and that I can confirm with the hits count for this policy. The problem is when ISP1 down our outside user cannot access the DMZ network, So, I decide to create duplicate the old policy and pointing to ISP2 and destination translation IP also 10.101.7.9. This policy is doesn't work and cannot access from internet. Hits count also 0 for this policy. So, how can i solve the issues please kindly suggests my issues.   Thanks in Advance, Pyie Phyo Htay. ... View more

I found that article before finding this post. You can now monitor for the default route, which removes a limitation you mentioned.   The question I have is, can I make advertising a subnet conditional on the default route? I am thinking that it is possible that I didn't receive default route from my ISP for whatever reason, and then I don't want to advertise my public IP space to them. I know, kind of a weird problem, but just because I have an adjacency doesn't mean that all is well. ... View more

We had an issue where anti-spoofing was blocking traffic, and there was nothing about it in the threat logs. ... View more

Thank you for configuration suggestion, can you please tell me why we need to Load Balance Port-channel with only "dst-ip" instead of "src-dst-ip" ? ... View more

I modified this setting and it seems to only take effect after reboot. Is there a way for it to work without reboot?      ... View more