@Bedrock1977,

This is a costly time waster that I learned from when setting up a firewall for the first time "back in the day". So glad it helped.

If you can remember it, you'll amaze people because it's so easy to overlook. I know I did but never really forgot it afterwards! ;)

@Daniel-Kontarev,

The CCENT course was produced for an exam is that is no longer part of Cisco certifications. The course exist in our offering but under the Legacy section our courses page. The subject mattered covered is still good but not matched to a current certification.

@Tavis-Gardner said in How to know number of subnets on large Campus network across city:

The protocol information was just background from the vendor and how their applications ia used.
I'm only asking if you could help me with determining submits on city multiple geographic location network. They want this application on both sides of subnet or help determine if only one subnet.
I just want confirm subnet setup on production network.
Than you

You should be able to see your routing table on the routers. Those should reveal all the networks that are reachable from your network.

@Anthony-Sequeira Thanks Anthony, I've been talking with an SD-WAN vendor named Big Leaf recently. Although they don't really advertise this as part of their core feature set, they CAN actually move an IP block between two different routers for you. Sounds like it takes a phone call into support and both routers have to be connected to the same POP. So if you have a DR facility on the other side of the country, it isn't exactly optimized, but possible.

Regards,
Adam Tyler

@Ronnie-Wong said in CCT Availability?:

100-490

@Ronnie-Wong

Hi Ronnie: thanks for the reply, as per your post your saying the 100-490 (Cisco CCT) is using or course material on old legacy (meaning old technology), Yes, I am watching this one as well at my leisure, but my main focus is to take and pass the MTA Windows Server Fundamentals, and try to pass a Microsoft exam, and also the 70-740 Install, compute and storage, which I think reinforce some concepts in the Windows Server Fundamentals, especially the the Active Directory content. I have some time off coming soon and see if I can pass the 70-740, and tackle the other two (70-741 and 70-742) before the deadline, I personally think the old Microsoft Certification track is better because your learning that actual technology, in my case the server technology stuff. Well that's my view.

Hi Geovanny,

Congrats on passing your ENARSI exam. Did you do the ENCOR first? Are there any tips you would like to share with the group?

Regards

@SIMON-TAPLIN The course is complete and all of the videos are there. We still have QC to do on our end so when that is complete we will remove the In Production. Good luck on your studies!

What an excellent question Diego! Congrats!

Yes, things get very interesting with multiple default gateways in OSPF! Yes - if the two different default routes have the same cost - they might get load balanced, but things can get weird fast!

For example, what if one of the default gateways is in a different area! Now you will not see load balancing by default because OSPF prefers intra-area routes over inter-area routes!

Yet another consideration here is the external metric type set in OSPF. Remember, you have two types. - a type where the cost through the local area is ignored, and a type where the cost is incremented as the route travels in the area.

OSPF is fun!

@Michael-Wallace,

If you're wired customers do not have any issues. What are their settings? I would point my wireless clients to the same DHCP and DNS server so those settings can match. If it's not a DHCP or DNS issue now on wireless then you've figured it out. This goes back to an old troubleshooting technique in Cisco, compare your troubled configurations to a "known good config."

If you believe it is, take a wired client and point it to your setup for your wireless and see if you get issues. If your wired client now experiences the same issue, then you know where to troubleshoot.

Which Meraki Access points are you using and do you have your Organization setup in the Meraki Dashboard?

So I think you better start over and progress one step at a time. Does your lab function perfectly before the addition of IPsec?

Because it sure appears there is a problem with your configuration related to IPsec. Notice the errors:

*Dec 4 18:05:17.211: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /193.188.16.10, src_addr=193.177.16.10, prot= 47

This indicates that packets are matching your access list to be IPsec protected, but they are arriving at the device WITHOUT the required encryption.

So it sure looks like your devices have been required to encrypt the EIGRP, but your configuration is broken and is not doing so.

@Iván-Ces-Gándara,

Glad to help. Let me know if you need more help.. Anthony and I are here to help.

@Magnus-Embret-Henriksen,

That will depend on our practice exam provider Kaplan IT, currently they do not list any practice-exam for the DevNet Associate Exam.

@Robert-Racansky,

It should be attached now!

Do not take this exam-lightly. It challenges you on some antiquated stuff and non-technical job related field technician related concepts.

@darren-mckenzie,

There is always a chance...having said that Anthony's emphasis on topics is probably more helpful for time and focus when preparing for the exam. ;)

Thank you for the prompt reply.

@Albert-LaScola,

That's a good catch. NAT is usually a culprit when you cannot ping all the way across your internet connection to you the outside interfaces of another network but normally when you cannot reach past your default gateway. So this is a great catch.

@Anthony-Sequeira Thank you Anthony. You helped me passing CCNP Enterprise. Looking forward to your other NP courses

Thanks @Ronnie-Wong

Thank you very much

Yeah - I like where Ronnie is going here, but I cannot find the setting which permits the configuration of retaining them for longer on the FTD.

I am sure you have seen this document:

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html