About rob.burgoyne

We have a pair of 5050s that we recently tried to upgrade, however we ran into an issue where once both of the PANs were upgraded they went into split brain. Its currently setup with some basic HA active/standby settings for 5.0. so I'm not sure why this would change in 6.0.3. We had to roll back to stay within our maintance window. Has anyone else had issues with HA after upgrading? Thanks, ... View more

I have a customer that is asking if its possible to assign static addresses to VPN users. This is required because of existing upstream firewalls that have ACLs tied to source IP addresses. This is done so that users can VPN into the network and then gain access to specific resources that are managed by a different group. I was wondering if anyone has ran into this scenario before and if there was a solution. I was also wondering if it was possible for VPN users to get DHCP from a DHCP server instead of the PAN Firewall. It doesn't look like this is possible but I thought I would check. Thanks, ... View more

Hey guys I am having an issue with a 2 x 10Gb (vPC) port-channel between two Nexus 5548s and a PAN 5050. I can get the port channel to come up on both switches, however I get around 25% packet loss when pinging over it. I have changed the port channel load balancing to src-dst-ip and have tried a couple different configurations on the cisco side with no resolve. As soon as I shut one side of the vPC down it cleans up. PAN: 5.1.5 Nexus: 6.0.2 Both sides of the vPC are configured the same and show up.   description PAN5050   switchport mode trunk   switchport trunk allowed vlan 128,135,159   channel-group 201   description PAN5050   switchport mode trunk   switchport trunk allowed vlan 128,135,159   vpc 201 SW-1: 201   Po201(SU)   Eth      NONE      Eth1/1(P) SW-2  201   Po201(SU)   Eth      NONE      Eth1/1(P) ... View more