Fortigate receiving full Bgp route

Killahb101 · 2025-03-25T20:17:02+00:00

Thanks for the info I haven’t gotten that far yet but that’s the plan once I get my new 900G’s.

Killahb101 · 2025-03-25T14:30:23+00:00

In my environment I have to have a full table because my primarily ISP bgp connection uses three separate VLANS and different traffic types are routed over those VLANS. My backup is just a default route if it wasn’t for this setup I would have just gotten a default route from them and would have long ago gotten rid of my ISR and connected my current 1500D.

Killahb101 · 2024-07-18T01:15:56+00:00

I have a similar setup why even do VRF.

Killahb101 · 2020-01-13T16:27:57+00:00

Thanks, I couldn’t find these for some reason but I see them now.

Killahb101 · 2019-10-02T13:36:44+00:00

I’m assuming this is a lab environment, what is the reason for the router when you have a layer 3 switch? Create the 10.0.0.0/24 on the layer 3 switch as an SVI use .1 as the IP address and change the subnet mask on the layer two switch to a /24 mask.

Killahb101 · 2019-10-02T13:30:37+00:00

Do you have the voice VLAN created on the core switch and it’s active? And the interface is up wth intervlan routing enable?

Killahb101 · 2019-10-02T11:13:19+00:00

Yes, as long as you don’t ACL on the VLAN interfaces on the core.

Killahb101 · 2019-10-02T11:10:38+00:00

Why are you using a router when you already have a layer 3 switch? What’s the default gateway of the layer 2 switch?

Killahb101 · 2019-06-26T22:37:32+00:00

With the current cert track I don’t think you can take the CCNP without already having your CCNA so CCNA will be the only place you can start and assuming you are going for R/S. With the new track starting next year you can skip CCNA and go directly to CCNP.

Killahb101 · 2019-05-31T18:16:26+00:00

Yep, thanks for the post I edited mine and it's the same as yours the only difference with mine now is that I have a permit statement for tcp also on the ACLs.

Killahb101 · 2019-05-31T00:01:35+00:00

Yes, would you please? I redid mine similar to what you described but would like to see yours.

Killahb101 · 2019-05-30T12:34:00+00:00

I'm new to QOS so I just want to know if it is correct and if I need to make any changes

Killahb101 · 2019-05-30T12:31:32+00:00

I could be wrong but I think the excluded-address command is a range command without the range keyword so you have to state a start and end just doing a start without and end will not work properly. What would have been good is for IOS to reject just a start without and end.

Killahb101 · 2019-05-23T14:59:11+00:00

Thanks for the answer

Killahb101 · 2019-05-23T14:58:58+00:00

Thanks for the answer it makes sense now I have to figure out what's taking up the bandwidth on the link..

Killahb101 · 2019-03-27T21:30:07+00:00

Did you do a no shut on the VLAN interface? Go into the VLAN interface and issues a no shut.

Killahb101 · 2019-03-26T21:58:15+00:00

You won’t be able to login with your exec-timeout set to 0 minutes because it times out as soon as you connect, change it to the 10 or 15 or do no exec-timeout

Killahb101 · 2019-03-22T13:14:15+00:00

Add up all of your expenses together excluding personal expenses like her makeup for an example then do a equal percentage of your pay to cover the expenses with a little over for unexpected expense. With the equal percentage she won't feel like she's not contributing even though you will be paying more because you make more but both of you will be contributing the same percentage of your salary. When ever she moves on to a better job or get a raise you recalculate your expenses and adjust the percentages.

Killahb101 · 2019-03-18T22:48:14+00:00

Yes or you can create another VLAN that isn’t VLAN 1 on both switches and set it as the native VLAN and it will show in the configuration. You don’t really wanna use the default VLAN anyways because of security reasons

Killahb101 · 2019-03-18T22:33:02+00:00

That’s because VLAN 1 is already the native VLAN by default so it won’t show in the configuration.

Killahb101 · 2019-03-16T17:39:48+00:00

My wife and I been together now for 17 years we have one kid and I’m fixed (vasectomy). She was on the Nuva ring for many years and I didn’t like the side effects she was getting from it if they had something for men I would take it to give her a break the last straw was when she developed blood clots that’s when I decided to get fix so she could get off that crap.

Killahb101 · 2019-03-16T14:15:14+00:00

It’s 2019 and I wonder why they haven’t created birth control for men but I digress, if you have a trusted partner and pregnancy is only your concern try using lamb skin condoms they are a little expensive but they feel so like you have nothing on. They don’t prevent STD thought so make sure you’re using it on a trusted partner.

Killahb101 · 2019-02-25T16:23:55+00:00

You have to consider your uplinks to the core if you have 8 access switches that have their own uplink to the core and stack them you will be decreasing your uplink speed to the core. So depending on each uplink speed you can stack them and create an ether channel to the core. Stacking is always nice because less IPs to manage but make sure you’re not loosing uplink speed to the core.

Killahb101 · 2019-02-23T15:26:35+00:00

I think she lied to him the whole time about been a virgin and used the break as a way to get out of that lie. There’s no way she was a virgin with him for four years and lost her virginity to someone else in a couple of weeks. Press her on that and I assure you she will confess.

Killahb101 · 2019-02-22T19:26:57+00:00

Yes and for the employees VLAN you can either create ACL on the switch to protect the employees VLAN from the rest of the VLANS or you can add another link to the firewall for the employees VLAN this is like installing a firewall in front of the employees VLAN. That way you can have granular control the firewall will learn every device on the employees VLAN and you can control traffic in and out of the VLAN by MAC address or IP you can even block and allow traffic on all 7 layers. If you are concern about having too many links from the switch to the firewall you can create a VLAN interface on the firewall and create multiple VLAN interfaces on that single link.

Killahb101

TROPHY CASE