Answer Questions

hi all,i just get a little confused for the following:-CVA (customer virtual assistant)VAV (virtual agent voice)CVP (customer voice portal)i need real live experiences for them with how to use in cucm environment.

Anyconnect在电脑上连接时，始终显示：AnyConnect was not able to establish a connection to the specified secure gateway. Please try connecting again. 用手机连接时正常，表明不是账号的问题，更换电脑连接网络，还是显示上述问题。 电脑版本：Mac OS catalina 10.15.7Cisco版本：4.10.07061log：下午2:44:50    Ready to connect.下午2:44:52    Contacting vpn.xxxx.xx.下午2:45:05    User credentials entered.下午2:45:08    Establishing VPN session...下午2:48:18    Connection attempt has failed. 已经好几天上不去网了，急求大神解决问题

Dear, have problem with our new website pentair.hr, have blocked from Cisco Umbrela. What can I do ? www.pentair.hr

Cannot access Devnet -Sandbox CML. Tried to access on multiple browsers Edge/Chorme/Firefox

Looking for a fix the issue Im facing with NSO 6.3 container image while launching its WebUI. I am using the latest NSO 6.3 container image: nso-6.3.container-image-prod.linux.x86_64.tar.gz and Im able to successfully build and run the docker container docker run -itd --name nso63 -e ADMIN_USERNAME=admin -e ADMIN_PASSWORD=admin -p 8080:8080 9b1 However when I launch the WebUI and type the username as "admin" password as "admin" it gives me a Authentication failed message. Has anyone else encountered this issue with NSO 6.3 and know how to fix it... Appreciate a helpful response.

During the Multi-Region Fabric deployment at the border routers we have to configure some transport interfaces as part of the core region (Region 0) and some interfaces as part of the edge region (Region 1, 2, 3, etc..). But when you deploy Cloud Gateway routers  in Azure as part of CloudOn Ramp for Multicloud scenario, SD-WAN Manager creates the NVA (Network Virtual Appliance) in Azure with just two interfaces. So, how to make such Cloud Gateway router (C8000V) working as MRF Border Router? If I try to configure its one uplink as the interface that belongs to the core region, MRF finally does not work as expected. So, how to configure MRF with the Cloud Gateway router in Azure? Is it possible? Thanks!

Hi FreinddACI 4.2 Simulator Do not Save Config , After Reboot Config Lost than Drop me to do the Initial Config Again Thanks

Hello everyone,I have an issue with STP for the topology above, I need to run STP so that one of the customer's links will be in STP Alt state.The configuration is as follows:Site1-Eth1/1 (Towards Customer CE):switchport mode dot1q-tunnelswitchport access vlan 2214spanning-tree bpdufilter enable Site2-Eth1/1 (Towards Customer CE):switchport mode dot1q-tunnelswitchport access vlan 2214spanning-tree bpdufilter enable Customer CE-Te0/1 & Te0/2:switchport mode trunkswitchport trunk allowed vlan 400-600Site1 & Site2 NVE interface:no shutdownsource-interface loopback0member vni 2214    ingress-replication protocol static      peer-ip x.x.x.x (IP of Main Site)Main Site NVE interface:no shutdownsource-interface loopback0member vni 2214    ingress-replication protocol static      peer-ip y.y.y.y (IP of Site1)      peer-ip z.z.z.z (IP of Site2)Please note that the VXLAN is run over an IS-IS L3 network, the devices used for the main site, site1, & site2 are cisco nexus n9kand the customer's CE is cisco catalyst C3750.I've tried to user the command "l2protocol tunnel stp", and tried to enable L2G-STP, and both of them didn't solve the problemthere will  be a loop unless I shutdown one of the customer's CE interfaces Sorry for the long threadThank you

I have cisco CUBE Cisco IOS XE Software, Version 16.06.09 that is integrated via SIP trunk to AVAYA system My client  needs to implement an anonymous tip line for a customer so someone can call in without showing their caller ID. My tip line number is XXXYYYZZZZ Here you have an example of our current dial-peer to AVAYA ! !voice class uri AVAYACLIENT siphost ipv4:100.100.100.99! dial-peer voice 123456 voipdescription *** Customer:AVAYA ***destination-pattern ^XXXYYYZZZZ$session protocol sipv2session target ipv4:100.100.100.99session transport udpincoming uri via AVAYACLIENTvoice-class codec 10voice-class sip rel1xx disablevoice-class sip profiles 555voice-class sip options-keepalive up-interval 60 down-interval 20 retry 3dtmf-relay rtp-nte sip-notifyno vad!!voice class sip-profiles 555request ANY sdp-header Audio-Attribute modify "a=inactive" "a=sendrecv"request ANY sdp-header Audio-Attribute modify "a=recvonly" "a=sendrecv"request ANY sdp-header Audio-Attribute modify "a=sendonly" "a=sendrecv"response ANY sdp-header Audio-Attribute modify "a=inactive" "a=sendrecv"response ANY sdp-header Audio-Attribute modify "a=recvonly" "a=sendrecv"response ANY sdp-header Audio-Attribute modify "a=sendonly" "a=sendrecv"!! Could you please tell me how I can modify the "voice class sip-profiles 555" to  strip the caller ID of calls made to this specific number where the caller can then leave a message but the caller ID where they made the call from is not shown? Or let me know if there is a better way to do it I really appreciate your help  

Hi all,I have Cisco Nexus 9xxx switch and 100G SR4 QSFP AOC breakout module. I want to do BERT test at each of the 4 lanes so I want to tell the switch to set the QSFP in loopback mode (whatever comes in the RX goes out in TX) then I have 25G BERT with a SFP+ module that I launch into the RX legs of the QSFP and check the error rate coming out of the TX legs.I wonder if any of you can show me what I need to do after config t to set the QSFP to loopback?Thank you

Good Afternoon,I have an ASA 5525-X on 9.12.x.  We have been working with TAC to try and migrate our ASA config to a Firepower 2120 running FTD code.  We also have CDO.  We are hoping to use CDO's ASA to FTD conversion tool, but so far as been wildly unsuccessful.  We have had several cases open  with TAC, and they cant seem to figure out what is wrong either.The latest attempt ended up with only the Inside-->Outside Rules coming over, and all of our network objects.  The rules that came over were not in the order they exist inside the ASA.I reimaged the Firepower device to remove all traces of the botched config and re-enrolled in CDO.  I am getting the follow error messsage on the import:Before this, I had these three lines error out on the conversion:When we removed these lines, and imported, only a portion on the ACLs actually come over.Just as a side note:  I have tried using the firewall migration tool inside CDO as well.  That tool only copied a fraction of the network objects, but did get all our rules, but because it couldnt "connect" to the FTD, it just ran and finished (successfully) but didnt generate a file to update from what I can tell... If anyone has any experience moving from ASA to FTD, could you lend me some wisdom on what we need to do to make this jump? Thanks

Here is the use case: I have two ACI sites (A and B) and running as multisite architecture. Each site has its own local only networks and there are also networks are L2 stretched between the sites. Each site has its own local L3Out (EIGRP based as an example). For a workload on the stretched network running in site B, I want its outbound traffic, such as Internet traffic, to exit the ACI fabric using site A's L3out (intersite L3Out). But I want the workloads on site B local only networks to still use site B's L3out for outbound traffic. With the traditional network devices (IOS or NXOS), I can do policy-based-routing route-map to match source and set next-hop to route traffic differently. But not sure if I could do the similiar in ACI...Please advise. 

Hi,We have an ATA191 MPP we bought on Amazon (supposingly new) that is already locked to a voip provider. We can do a factory reset on it no problem, and do the setup config for our own needs (Freephoneline), but the minute we reconnect it on line, it lock itself to his original configuration. We tried differents type of factory reset: Reset button, dialpad****73738  1, and via the web browser admin/admin, with the same results.Please anybody know how to unlock that ATA so we can use it for our non-profit organisation?ThanksLouis  

We have one webex codec plus and 3 Precistion 60 cameras. HDMI of each camera are connected to crestron switch and output of that that connected to Input of codec plus. switch of cameras are working fine but we are not able to control camera from cisco touch panel.  Camera control ports are connected to unmanaged switch and control port of codec plus also connected to the same switch. When we try to control through touch panel its only selecting one camera.  Am I missing something from touch panel point of view?

I'm trying to upload a custom ringtone to my desk phone and keep getting an error after it asks me to select a slot to save to saying "invalid file format"It does the same thing if I press play, and also if I add it to the MP3 player playlist then try playing it. I used dbPoweramp to create the MP3 file from a FLAC file trying both high and low bitrate files that playback on PC fine. The track is under 30 seconds as well.I am unable to find any specifics on bitrate or duration requirements/limits.Also, I am unable to figure out how to delete the two custom ringtones that were previously uploaded to the phone. When it prompts to select a slot to save to it does not display any empty slots though.Any advice? Thanks!

Hi,After removing from controller the last spine from Pod 1 in a multi-pod fabric (version 5.2(7g)), what I have is Pod 2 and 3 having leafs and spines, and Pod 1 without any switch. At that moment I have a lot of interface tunnels on spines and leafs with destination unreachable. These destination unreachable are the loopback interfaces of old spine and old leafs VPC protection group IP.Is there any way to delete these tunnels and remove the F0475 faults?Thank you

Hey Jan here, do you know that you can register for Developer Days Workshops and Labs to secure your seat? To do that, just look up your confirmation email titled "Cisco Automation Developer Days: Know Before You Go" and click the "Modify Registration" button. A few pages later you can see the program and select the sessions you want to participate in. If you don't register, you will be welcome after all registered participants have taken their seats. We can host up to 35 participants in the new Reaching Network Automation Level 5: Principles and Practice lab. It builds on last year's presentation about automation levels. In this lab, you will be able to take an existing service from automation level 3 to level 4 and up to level 5. This will give you an immersive feel for what the automation levels are all about. What you get: • Hands-on experience with Network Automation Levels 3-5• Giddy feeling of power arising from services that adapt to their environment• Food for thought when designing your next NSO service To participate, you need: • Development knowledge of NSO• Bring your own laptop with NSO 6.1.5 (or later with a few tweaks) installed• Basic programming skills in Python• Familiarity with NSO services and YANG modules Title: Reaching Network Automation Level 5: Principles and Practice Instructors: • Jan Lindblad, Engineering Architect, Cisco• Per Andersson, Engineering Technical Leader, Cisco• Jonas Johansson, Software Architect, Cisco Abstract: Once the Adaptive Service Activation Scripts (Network Automation Level 2) are left behind, a world of life-cycle flexibility and stylistic freedom emerges for the services running in our network. What can we use this flexibility for? In this lab, participants will upgrade a pre-existing Network Services Orchestrator (NSO) service from Network Automation Level 3 to Level 5 by adding service health measurement and making it adapt to changes in the environment. The vision of the Internet Engineering Task Force (IETF) Application Level Traffic Optimization (ALTO) Working Group (WG) is to optimize the application and network together, so that the delivered service is provided as efficiently as possible to the collection of users. This might mean delivering a user's service from a data center that is not the closest one but from another with less load or lower energy prices, and therefore, less expensive for the customer. Moving service instances around becomes a natural part of the life cycle. Link to repo: https://github.com/janlindblad/nso-sustainability-automation-exampleThis lab can also be taken as a self paced exercise at your convenience.

Hi, Goal; I want to bulk import SGT's in DNA center. But i'm having problems with the API.Steps taken: Try "Get virtual network with scalable groups": Method: GET Public URL :https://<ip>/dna/intent/api/v1/virtual-network Parameter; virtualNetworkName ; DEFAULT_VNI get a response i can work with:   {"virtualNetworkName": "DEFAULT_VN","isGuestVirtualNetwork": false,"scalableGroupNames": ["sgttest1","sgttest2","BYOD","Auditors","Unknown","Employees","Development_Servers","Developers","Contractors","Point_of_Sale_Systems","PCI_Servers","Network_Services","Guests","Test_Servers","Quarantined_Systems","Production_Users","IoT","Production_Servers","Extranet","Intranet","TrustSec_Devices"],"vManageVpnId": "","status": "success","description": "Virtual network info retrieved successfully.","executionId": "ac79f26f-47dc-4615-895c-46caaf526a40"}   Then i performed a TRY of POST.   POST body; { "virtualNetworkName": "DEFAULT_VN", "scalableGroupNames": [ "sgttest3", "sgttest4" ]}   Result: {"status": "failed","description": "virtualNetworkName in request already exist. Provide a valid virtualNetworkName and try again.","taskId": null,"taskStatusUrl": "/dna/intent/api/v1/task/null","executionStatusUrl": "/dna/intent/api/v1/dnacaap/management/execution-status/358a0d1a-1372-4eec-93b6-4421c7f43665","executionId": "358a0d1a-1372-4eec-93b6-4421c7f43665"} Response on that executionId:   {"bapiKey": "e3a8-5b19-406a-9f4e","bapiName": "Add virtual network with scalable groups","bapiExecutionId": "358a0d1a-1372-4eec-93b6-4421c7f43665","startTime": "Fri May 17 09:30:21 UTC 2024","startTimeEpoch": 1715938221016,"endTime": "Fri May 17 09:30:21 UTC 2024","endTimeEpoch": 1715938221722,"timeDuration": 706,"status": "SUCCESS","runtimeInstanceId": "DNACP_Runtime_cb8046f0-feba-420c-b709-119881656b7f"}     So instead of a POST i try a PUT because of the response message "virtualNetworkName in request already exist". PUT has the same body requirements, so i use the same input as the POST above. Response: {"status": "failed","description": "Invalid scalable group in request object with name = sgttest3. Please check your request data and try again.","taskId": null,"taskStatusUrl": "/dna/intent/api/v1/task/null","executionStatusUrl": "/dna/intent/api/v1/dnacaap/management/execution-status/0985ca32-ea02-43d4-9671-f468039fb7d0","executionId": "0985ca32-ea02-43d4-9671-f468039fb7d0"}   I've also tested a body with only one SGTI "sgttest3". And also with the optional fields "isGuestVirtualNetwork": false, and "vManageVpnId": "",   When i add the sgt "sgttest3" by hand in the GUI all is good and i can see it in the GET.   Anybody any suggestions?   BR            

Hi,I'm searching for an information regarding supported OS version but so far without any success. Currently, I'm handling a CSSM On-Prem that's on CentOS 7. Since the CentOS 7 is soon running out of support I'm looking for an information does the On-Prem supports RHEL 8 so we could migrate it?Thanks!

Hi, We have a ASR9K, CPU utilization was maxed at 3% but since this morning it got upto 15% and extra 12% utilization is all due to BGP. Nothing changed at our end as we were already receiving bgp full feed from 2 peers. What could be the issue here and how to troubleshoot it without restarting the BGP process.

Can anyone give some explain on the timers?default timers -fast heartbeat timeout - 0 sheartbeat timeout - 30 sRetransmit Timers -Count - 5Interval - 3Let assume there is a controller failure.Q1 - the time it takes for AP to detect and failover to backup controller = 30 + 15 = 45s?Q2 - what does it mean when fast heartbeat timeout = 0?? is it mean fast heartbeat is disabled?  

Dear Gents, I have cisco switch C9200L with DNA-Essentials, I want to connect two different servers to same switch and i want to track each port connected to each server like if server-1 down then the other port connected to server-2 will be on    Thanks Ahmed

I see the application stat from vmanage that statistical-p2p application takes many percentages of Total Traffic.

We have two switches. Next to them is the switch with the IP camera. The NVR is in another building. Will there be traffic load on the main uplink? The network will be slow. If we only put the NVR online and provide its display in another building, will the traffic load on the network be reduced?picture is attached.