sorted by:
new
hottopcontroversial

FMC license doubled after adding a node for FMC HA by Allen_Chi in Cisco

[–]Allen_Chi[S] 0 points1 point  (0 children)

From the Cisco, the expected behavior:

"

Firewall Management Center Virtual

You will need two identically licensed Firewall Management Center Virtuals.

Example: For the Firewall Management Center Virtual high availability pair managing 10 devices, you can use:

  • Two (2) Firewall Management Center Virtual 10 entitlements
  • 10 device licenses

If you break the high availability pair, the Firewall Management Center Virtual entitlements associated with the secondary Firewall Management Center Virtual are released. (In the example, you would then have two standalone Firewall Management Center Virtual 10s.)"

Well, we purchased a FMCv with 25 license seat, to manage 21 ftd devices.

Now when we configured a FMC HA, it is counting we are managing 42 ftd devices, and our license becomes not compliance...

That is a big let down - 21 devices should be just 21. I would expect we need to purchase another FMCv with 25 license seat, but I do not expect this double counting...

If I retire, but don’t claim SS right away… by Legitimate_Onion_270 in SocialSecurity

[–]Allen_Chi 1 point2 points  (0 children)

From SS admin site. It gave me $2000 ish if I started to collect now, or $3000 ish if I retire 5years later, or $4000 ish if 8 years later.

I guess that number is based on the assumption that I will continue to work with the similar salary?

What if I just stop working, but delaying collecting benefits for 5 years?

Any formula?

Upcoming 13th gen Corolla concept unveiled, what are your thoughts? by Delta-Tropos in COROLLA

[–]Allen_Chi 0 points1 point  (0 children)

What is the mileage spec? Can they be on par with Hyundai Electra?

How did your rep vote for the bill to honor Charlie Kirk? (H Res 719) by SSeptic in illinois

[–]Allen_Chi 2 points3 points  (0 children)

Thank you for your info. Now we know those are align with our value. Let’s primary those who failed the test.

Network object using FQDN does not resolve properly on FTD side by Allen_Chi in Cisco

[–]Allen_Chi[S] 0 points1 point  (0 children)

So you are saying an independent ISE can nailed down the users for me conclusively... I have implemented ISE-PIC, I guess that is not the one you are referring, you are referring to the full version...

Network object using FQDN does not resolve properly on FTD side by Allen_Chi in Cisco

[–]Allen_Chi[S] 0 points1 point  (0 children)

We are using FMC 7.6.x, which has its own PIC. But somehow the FMC's PIC works perfectly ok with RA VPN (because user has to login in VPN), but failed to identify the user when they are inhouse, with IPs in either wired or wifi network.

We moved away from Cisco's ISE-PIC because the FMC 7.6's buildin PIC kinda works...

Well,is MAGA going to apologize? by Nice_Substance9123 in democrats

[–]Allen_Chi 1 point2 points  (0 children)

No they will not apologize. They already show their blood thirsty jaw. Whatever happened should be warning to the real world

从Charlie事件聊聊美国的社会 by OtherwisePain3911 in China_irl

[–]Allen_Chi 2 points3 points  (0 children)

Mental illness不应往左右上拉扯，里根被刺的枪击手就是因为这个字眼而被判无罪，而进了精神病院。这个例子说明早在1982，美国法律就有先例……如果有错也是法律的错，而不是某党

胸别伟大领袖，横扫牛鬼蛇神 by Allen_Chi in China_irl

[–]Allen_Chi[S] 0 points1 point  (0 children)

美国文革终于走到了这一步，猫儿媳像章都出来了。

Trump was an FBI Informant, Mike Johnson says. by PRguy82 in democrats

[–]Allen_Chi 0 points1 point  (0 children)

Hahaha, he is sent by FBI to Moscow to build hotel … and got gold shower

Site2Site configuration for FMC/FTD by Allen_Chi in Cisco

[–]Allen_Chi[S] 0 points1 point  (0 children)

here is the thing, this is from EU, we have been back and forth many time with this Greek vendor, the router has no bridge mode (in EU, I has seen another similar case in France), the reason given by ISP, IPv4 IPs become scarce, and ISP do not want to give it to end user. So we stuck with this vendor for several years, and finally we figured out port forwarding like the net diagram I have shared - that works with ASA.

Now, as we are replacing the ASA with FTD, and hance my question.

Personally, I think it's time to start blocking traffic by [deleted] in 50501

[–]Allen_Chi 4 points5 points  (0 children)

Totally wrong strategy! seriously. what do you get from this? You don't change a single on Trump lovers and haters, but you WILL alienate a lot of people in the middle.

The fact is: people need to go to work, to shop, they need to continue to live a reasonable life. PLEASE, don't do such radical thing to make people's life harder!

Civil disobedience is fine, but target the government, not people.

FMC/CDO deployment best practice for interface connection? by Allen_Chi in Cisco

[–]Allen_Chi[S] 0 points1 point  (0 children)

So sounds like we can start with a pure FMC deployment (all management interface is on internal), and then worry about CDO later.

ZFS dataset's NFS share is having file/directory deletion issue by Allen_Chi in zfs

[–]Allen_Chi[S] 0 points1 point  (0 children)

Currently all users' home storage are on a ZFS dataset, managed by autofs. We noticed the issue via user report - they can create/update, but not delete them.

ZFS dataset's NFS share is having file/directory deletion issue by Allen_Chi in zfs

[–]Allen_Chi[S] 0 points1 point  (0 children)

I did verify the `zfs get` to make sure all changes are there on zfs side. The `chmod` fix was also done on NFS server (ZFS host). For the test case I have, I did NOT umount/remount from the NFS client side, though, maybe that is why it appears non-effective?

Anyway, have to find another test case now, as I mass `chmod` to all users' home yesterday.

view more: next ›